skysight-inc/HackerNews huggingface dataset:
>What I'm more worried about is a replacement for liquid helium in cooling. CERN depends on cryogenics for keeping superconducting magnets cold.

The LHC uses just roughly 100t He (https://en.wikipedia.org/wiki/Large_Hadron_Collider#Design), I don't resplenishing this going to be a problem, even if He becomes more scarce.
This is the flow I envisioned, which matches some large websites, but not necessarily github.

In step zero, you enter "2T1Qka0rEiPr" as the username of the account you want to hack.

In step one, github says "We have m------@e------.com on file for you. Please confirm your email address." and you enter "myemaıl@example.com".

Then github retrieves the email address associated with the username "2T1Qka0rEiPr".

You're correct that you could do this with just an email address and not a username, but that doesn't affect my criticism -- you'd still want to ultimately send the reset to the email address you pulled from the database, not the one you got from the reset request. Your takeaway is exactly right.

Another more secure method is to pull up the account information and display "We have the following methods on file for contacting you: () email 1 (potentially obscured); () email 2 (potentially obscured); () SMS (to a phone number which is potentially obscured)". If I recall correctly, that's how Twitter does it. This bypasses the need to ask the user to type in the address they'd prefer for the reset to be sent to -- you just show them some radio options, and they select the one they want. Since they never provided the address, there's no chance you'll accidentally pick their malicious address over the real address.

"But how do I make sure someone knows the email address, in order to stop strangers from spamming reset emails to addresses they might not even know?" You don't; you apply rate limiting to the reset functionality.
Already plan on it! But to be honest, the physical hardware isn't that great, and of course the battery is mostly shot. The appeal was ChromeOS. Oh well.
While I agree with you, I just want to point out that the 747 as an airliner is no longer made and airlines would not likely go back to it. Many are still flying them but they are being phased out for financial reasons. Their manufacturing continues as a cargo plane though. Passenger wise, the last one was made in 2017. https://money.cnn.com/2017/07/19/news/companies/the-last-747...
I don't do it on my own site. I'm capable of doing it, and certainly did it for my job. But my own site... It's free with HTTP, but they charge for every level that includes HTTPS. I'm it's major user (so far) so \/\/
Meteorites lend clues to solar system's origin
> The aircraft's lower fuselage will be assembled on the A330 final assembly line, and then be moved to another facility for the year-long process of assembling the upper fuselage and the lowered nose fuselage.

They do use Beluga XLs to these parts around too?
Amazon Throws Its Weight Around in FedEx Feud
"that article pretty much nailed it" comment would probably be somewhere in its 29 steps :)
If you're not a coder, I highly recommend Flow (https://flow.microsoft.com/en-us/) Which is an automation platform designed to be used with MS office products.

There are also a lot of options in Azure , but they require a little bit more of coding (They are incredible powerful nonetheless).
Shouldn't you configure emacs to auto-detect tabs/spaces on the file you've opened?
"Going to space" is a lot more than merely getting out of the atmosphere. You need to get orbital velocity, and a balloon isn't going to do that.

For an individual helium atom it's possible to pick up enough velocity to escape Earth's gravity. When they're all tied together in a balloon, that's not going to happen.
There is one - a particular viewpoint on the Incompleteness Theorems imply that you cannot in general tell if a program encoded on a UTM will halt or not.
In my mind, once you strip down “I am” to “There appears to exist a repeating neural process that is creating a compressed embedding and record of sensory inputs”, it’s just not very mysterious or worthy of much further philosophical analysis.

So these other humans in the world are probably just deterministic robots just like me, that may or may not feel like they have magic conscious aliveness.

But my personal experience tells me that I can turn the “sense” of magic conscious aliveness on or off, and so it too is likely just a neural process that is not particularly interesting.

I observe that the vast majority of other humans do not seem to be able to disable this sense at will, which does not to me imply that they are somehow more magically conscious, just that they have not experienced that particular switch flipping.

Add in the historic social knowledge of “consciousness”, the historical record of neuroscience knowledge, and the rates at which scientific knowledge is processed and absorbed by the public at large, and it really seems like an obvious non-problem.
Boeing’s Decision to Pause 737 Max Production Could Jolt U.S. Economy
> formalism: the idea that mathematics can be reconstructed in a content-free manner, or more strongly put, that mathematics itself is nothing but “a formal game of symbols”.

This is a common misrepresentation of Hilbert's Formalism. It doesn't state that no mathematical sentence has content beyond its mere symbols, but that not every mathematical sentence has content beyond its mere symbols.

Formalism was meant as a compromise between the two dueling philosophies of mathematics of the time: Russel's Logicism, which essentially said that all of mathematics can be derived from some self-evident, obviously true, logical axioms, and Brouwer's Intuitionism, which essentially said that the truth of mathematics stems from empirical confirmation that breaks down when infinities are involved, and therefore some logical axioms cannot be taken to be true for infinites. Hilbert tried to accept Brouwer's finitist philosophical position without rejecting any useful axioms. Formalism, then, separates mathematical sentences into two kinds: "real" -- those dealing with finite quantities and can be tied to physical observation and prediction, and "ideal" -- those dealing with infinities. Instead of rejecting the latter, Formalism says that as long as they don't introduce inconsistencies that invalidate the former, one could view them -- the ideal sentences -- as having no content beyond symbols, i.e. as not referring to anything "real".
>is pivotable to healthcare.

Until the first one glitches and maims a person.
my static website is a sand castle in the beach. When I'm not around, kids may break it, or a random person may impersonate as its creator. That is alright, it is just a sand castle. The only purpose of its existence is to provide casual onlookers a nice view (or read) for a few minutes.

Having to set up a "certificate" for that would be an unacceptable burden.
Like...a trigger?
> No individual journalist wants to be known for getting a story wrong, so incentives are pretty strong to begin with.

I think in a lot of places this isn't nearly as true as maybe it once was. The top selling newspapers in the UK pretty much habitually print anything that drives sales / their agenda and when they get a slap on the wrist they just print a minimal viable retraction.

When that occasionally lands them in court they treat it basically as a cost of doing business.
Recently an OpenShift cluster I admin went down because of long-lived certs not being rotated in time. There are many clients, servers, nodes, services, and configs involved, so rotating is non-trivial, so of course it's automated, and of course because it's not tested regularly, the automation just doesn't work after a while. Using the automation only seems to make things worse, and getting everything working again ends up taking days.

PKI is technically the best practice for these systems, but it's also the most fragile and complicated. At a certain point, if the security model is so complex that it becomes hard to reason about, it's arguable that it's no longer a secure model, to say nothing of operational reliability.

I also have a whole rant about how some business models and government regulations literally require inspecting TLS certs of critical transport streams, and how the protocols are designed only to prevent this, and all the many problems this presents as a result, but I don't think most people care about those concerns.

Oh, and gentle reminder that there are still 100% effective attacks that allow automated generation of valid certs for domains you don't control. It doesn't happen frequently (that we know of) but it has happened multiple times in the past decade, so just having a secure connection to a website doesn't mean it's actually secure.
"herd immunity" is a good argument; but herd immunity exists for outliers. The people who for some reason cannot get a vaccine, yet they are not exposed to the hypothetical disease because everyone they are surrounded by is immune.

That's kinda my argument, not that https is bad. I agree with widespread adoption and taking it as a default even for a static page.

But in my environment I have many dozens of nodes and idk where letsencrypt is going to come in because of geobalanced DNS. I also serve many domains with this project so I don't have the nice DNS-01 ACME verification features because not all DNS providers have an API.

So I have a web server on each node, which reverse proxies .well-known/ to some central server that runs certbot. Then I distribute those certs outwards to those nodes.

It goes against certain sysadmin principles about transportation of private key materials, but it's what works.

But; given that architecture which caters for a latency sensitive product; letsencrypt is a serious overhead. To the point where I'm considering going back to 2y paid certs.
> "we’re still going to mine natural gas for the helium then as the primary product"

I don't see why. The US has for quite some time been trying to get rid of its helium reserve. Helium has plenty of interesting uses, but it's not valuable enough to justify mining natural gas just for the helium.
Why are mass purveyors of anti-news and propaganda on the Internet not fined like this?
Claro que es muy fácil (Sure, it’s very easy). Quevedo is even damn easier ;-)

“Si no os picaderes más de saber más menear las negras que llevais que la lengua –dijo el otro estudiante–, vos lleváredes el primero en licencias como llevaste cola.”

Miguel de Cervantes Saavedra

El ingenioso hidalgo Don Quijote de La Mancha
Use Homebrew [1] to install the most current versions of bash and make.

By default, it’s installed as gmake to not conflict with the existing make 3.81.

[1]: https://brew.sh/
Getting Redis Modules into ARM Land – Part 1
I don't see an easy way to discuss this without ruining others' perception of me. It's more important to me that I maintain positive relationships in my time here in this life than that I consider questions like these. hence the throwaway
I have read it, and it has become my most recommended book for someone trying to get into programming or technology in general. It won't tell you how to do every single thign in the universe, but it can give a great starting point for automation and programming in general.
We could already do that — just do away with the padlock icon now. In my browser, anyway, http:// gives a big "non secure" warning.
C#/.NET will be in that bandwagon. They have been pushing WebAssembly usage with their Blazor framework.
San Diego bans e-scooters along the boardwalk
It looks like the writer of the article was surprised Google was trying to develop technical solutions to deal with content to moderate instead of spending money on their workers but he really shouldn't.
This article's premise doesn't hold up, IMO: arguing there's "no point of contact" between pieces of code doesn't make sense when one part can write something like (from the article):

sync({ block: 'manualUpdate' })

To me this is semantically similar to an INTERCAL "COME FROM"; in a system that works like this, it's impossible to determine the runtime behavior of a single part without understanding everything that might be fiddling with execution.

Furthermore, there's another point of contact between the related pieces of code - they need to agree on the string-typed values like "manualUpdate" above.
My older brother developed a more sophisticated version of this idea a decade ago and never released it to the public. You're showing successfully that the old internet 'dashboard' idea still hasn't died yet and I think it's valuable still.

The internet's content should be controlled by the individual, not the feeds a big reddit,hn or facebook gives you. Simple good tools like what you provided should be a good step in cultivating an internet garden that can integrate into people's lives in a more orderly fashion.
This is exactly the opposite of a forcing HTTPS problem. When HTTPS isn’t everywhere, HTTPS gives a false sense of security. When it is, browsers can stop emphasizing it. We’re already well down that path, with padlocks no longer being green/being hidden entirely, EV certificates losing their confusion vector, insecure pages being assigned the icon that sticks out…
People pay for convenience, it's as simple as that.
what does 'new technology' even mean and how does it enter the calculations?
> wish people would just stop

That's not "just" going to happen, no more than Twitter, Facebook and Youtube will "just stop" sending people into feedback loops of radicalization. Case studies are good for educating people, who just see their own small contribution at some of the stages. That it's hosted on buzzfeed is unfortunate -- if you know of something better on another site, share it.

I have a bunch of "shit X says" collections I sometimes put things I stumble over into, here's some shit HN says:

> > people shouldn't buy phones from the manufacturers they don't trust.

> You're literally hosting your life on it. You should indeed not do this

https://news.ycombinator.com/item?id=17244303

Nobody batted an eyelid at "literally hosting your life on it". No, the question is just how to best do that.

> I have begun wondering aloud about whether the social media era is our closest approach as a species to telepathy. [..] The stories I read that had telepathic species glossed over their transformation, usually with some variant on the phrase, "It wasn't pretty."

https://news.ycombinator.com/item?id=16943994

> I remember life before smartphones. I remember boredom. It sucked. I would never go back to the agonizing pain of sitting in the DMV for three ours or standing in line at a grocery store just for some "missed moment" where I study the shitty tabloids in line or DoT pamphlets.

https://news.ycombinator.com/item?id=15913665

> Having lived through the horrors of the pre-smartphone days

https://news.ycombinator.com/item?id=15913342

I could find more, if I used algolia I could find ten thousands. I know it's petty. But it's also true, the fish stinks from the head and that's SV rather than buzzfeed.
How long ago was this — and how fast was your network? On hardware less than a decade old you shouldn’t be seeing that unless you’re talking about 10+Gb networking.
A good rule of thumb is to never believe it when a company or industry says they have razor-thin margins.
Why would '/' ever be in the searchpath of the compiler ? This looks like a preprocessor bug to me.
Yeah but you might still disagree with what he is saying, for numerous reasons.

Acting like an a-hole just for the sake of 'fuck it' mentality ain't something to admire for many, doesn't matter if 70 years ago or tomorrow.

To wrap everybody who doesn't blindly admire his discussed actions as 'middle-class technocratic people' doesn't add much to the discussion apart from certain snobbishness of 'I am better than you are if you don't agree with me'.

We did / are doing some pretty crazy shit in our lives that Kerouac never even dreamed about, we just don't need to be a-holes while doing it. A bit of respect goes much longer way.
follow up question - does it need at least a few active users to triangulate the sticker position or would 1 user be enough?

if so, how are you able to determine location from a single bluetooth beacon and user?
I know for example the tile app will only tell you how far you are from the tile as opposed to the position of the tile.
Game designers usually have to do tons of playtesting to find all the broken strategies in their games. As self-learning AI becomes more accessible, it'll give designers much quicker feedback. I'm curious to see how this will affect the games we play. Maybe someone will discover a new game as deep as Go and Chess!
Interesting tool. It basically says you can:

- Tax coal, oil, natural gas, bioenergy

- Subsidize renewables, nuclear, new technology

- Increase efficiency and electrification of transports, buildings, and industry

- Reduce population growth

- Reduce economic growth

- Reduce deforestation

- Increase afforestation

For an effect that puts us at +2.1C by 2100 https://en-roads.climateinteractive.org/scenario.html?p1=120...

OR you can do these three things:

- Set a high price on carbon

- Reduce emissions of methane and other gases

- Increase usage carbon removal technologies

for a similar effect of +2.1C by 2100 https://en-roads.climateinteractive.org/scenario.html?p39=25...

All optimistic actions combined puts us at +1.0C by 2100 https://en-roads.climateinteractive.org/scenario.html?p1=120...
what is about that site's low contrast. My eyes can barely focus
I like C# more than Java because it is improved more often. Conservatively of course, but each version adds some new good stuff to play around with. Java felt like it stayed the same for so long.
Java has changed a lot too. Its a real problem in an old code base as there are different generations of developers writing in different styles making the whole thing inconsistent and confusing.
> These domain experts would very much like to "do things right" but they lack the leverage to make it happen.

The reality could be worse though. My experience is that many domain experts refuse to "do things right" from a software development perspective. Many domain experts think their code is good enough as long as the code get correct results. Unfortunately, domain experts in general are terrible coders.
Then again, comparing New World statistics to Europe ans Asia, it seems pretty clear that personal gun ownership isn't the only option for staying alive.
Tencent apologizes after WeChat translates Canadian flag into ‘He’s in prison’
A tweet gave a journalist a seizure; case brings new meaning to 'online assault'
Will see about that.
No, but it's a good idea to have the option, so long as people are aware of the implications.
I remember growing up in the 80s that there were only a handful of people in the entire community that had multiple TVs. In the 90s some teens in the upper middle class had a tv in their bedroom.

I remember buying my first tv as a married couple around 2007. We were still in undergrad and quite poor, but saved up and bought a 32” HDTV from Walmart for like $400.

Fast forward to today and you can get a 65” 4K tv from Best Buy for that same price [0]. Is it a good tv? No clue. But in 2007 a 32” tv seemed huge....

[0] https://www.bestbuy.com/site/promo/xl-tv-savings
Haha, that's clever. Yes, it's a 4GB limit. Guess I'll try to fix that again. EDIT: fixed
Discussion of the original story 3 years ago: https://news.ycombinator.com/item?id=13202045
Guy, you do realise that the entire story is made up? None of those tweets or accounts are real?

Sheesh.
The demand would drop and so would gun manufacturing. There would be less guns on the street and more effective securing/training of legal guns/owners.

Clearly there is a spectrum of choices that can be made, some more effective than others. As mentioned, state borders have effectively zero restriction in movement and should be taken in context with any criticism of local gun laws.
Allowing http://captive.apple.com should make macOS’s captive portal auth window work.
I think this really highlights one of downsides of being an employee. If you were the founder of company and you found a way to automate a job, all that economic benefit would go directly to you. If you are an employee, your employer gets all of it.
Author here: Exactly this. We keep a `bin/` in the root dir with scripts/programs for more involved steps. Make gives us the dependency graph, incremental rebuilds and parallelization.
Java's development is still mostly not in the language (although some developers focus on language changes). Most of the improvements in recent versions were to GCs, low-overhead deep profiling, and general performance -- neither Python nor JS compete well in these areas. In addition, the upcoming JDK 14 has the jpackage tool which would make it easier to deploy desktop applications, and there's a lot of investment reducing warmup time (CDS), AOT compilation that appeals to some microservices and maybe mobile/WASM apps, easy FFI and native memory access that can help with machine learning (Panama) and, yeah, the REPL. What features would you like to see?
If you put everything in the database, and use it for all it's able to do, as the comment I replied to suggested, it is practically inevitable under startup feature pressure conditions that total modularity won't hold. And in fact I think it would be irresponsible to pursue total modularity; it would court failure.

I believe you're being deeply naive about modules owning single tables. You forego relational integrity and almost the whole power of relational algebra if you take that approach. That's heaps of functionality to leave behind when you and one or two other guys need to crank out a feature a day.
all that stuff started out as a troll, but ended up with legitimate Nazis. The problem with pretending to be a Nazi on the internet for kicks (well, one of them - there's plenty) is that no-one knows your real views - all they have is your outwardly-projected views, which are those of a Nazi. This upsets the outraged, as is the intention, but it also makes people who aren't familiar with the culture war think that there's an upswell of Nazis, and makes legitimate Nazis think they're in good company.

It's stupid and dangerous on both sides, and I really wish this wasn't the game that everyone was playing on the internet now.
An Airbnb for the Formerly Incarcerated
If you've done game AI then you're the expert, not me. I threw it in as it seemed relevant.

I dunno. Granted evaluation is key but so is branching, surely, as that is what generates new positions, and their complexity in evaluation as there are more factors to consider.

How does one 'look at "the best" 10-15 [positions]' without culling all the others first, however cheaply? I thought evaluation really was just tree searching (hence branching factor is crucial) with various weights (obviously this is traditional chess evaluation, not fancy NN stuff). I honestly am clueless.
This seems very nice, like one step further from zero config bundlers like Parceljs.
French press can be fined, don't worry, i.e C8 3M€ in 2017, Amaury press group 3.5 M€ un 2015

On that very case, no one can tell.
A hiring test I'd like to run
That works at least until their cash flow seizes up and they need a huge bail out. The car industry is a good example of a margin thin one.
>It just kinda...disappeared.

This might be the answer to you second question. No one seems to have taken the Bloomberg story to be true. Just went "that's dumb" and dropped it. In fact the only times I've ever seen it resurface is in a context to point out something negative about Bloomberg (like now), not the companies named in the article.

Sort of like the Elon Musk defamation case that just ended. Plaintiff didn't get anything because people didn't turn on him due to the accusation, they turned on Elon.

If it's not believed then you couldn't have suffered harm.
yes it's a fake example, but the general trend is real. You can see real instances of this mock story play out regularly.