skysight-inc/HackerNews huggingface dataset:
the department of the interior made disabling all phone-home (including auto updates) a condition of their DJI drone buy

and cautioned that the level of testing they need to do for future updates is a large expense of the project
When was it that XFS got corrupted on you? I think as RedHat embraces XFS, I assume it's quite good now.
> RFC 2616 (HTTP/1.1, 1999) may seem manageable

But it's probably not, as it's underspecified and ambiguous, which is part of why its been replaced as the HTTP/1.1 spec by RFCs 7230-7237 (2014).
Rickroll: An Oral History
I recently came across Unison through YouTube recommending me a series of videos from the "Strange Loop" channel [1]. The fundamental idea of uniquely addressing functions based on a hash of their AST is mind-blowing to me. Immediately my mind started to consider many of the possible paths such an idea could lead down, many of which are clearly tickling the minds of many of the commenters in this thread.

My first thought was the same insight from von Neumann architectures: code is data. So I thought of package repositories with URLs corresponding to hashes of function definitions. http://unison.repo/b89eaac7e61417341b710b727768294d0e6a277b could represent a specific function. A process/server could spin up completely dumb other than bootstrapped with the language and an ability to download necessary functions. You could seed it with a hash url pointer to the root algorithm to employ and a hash url to the data to run against and it could download all of it's dependencies then run. I imagine once such a repo was up and running you could do something like a co-routine like call and that entire process just happens in the background either on a separate thread or even scheduled to an entirely different machine in a cluster. You could then memoize that process such that the result of running repo-hash-url against data-hash-url is cached.

e.g. I have http://unison.myorg.com/func/b89eaac run against http://unison.myorg.com/data/c89889 and store the result at http://unison.myorg.com/cache/b89eaac/c89889

1.https://www.youtube.com/watch?v=gCWtkvDQ2ZI
Sounds like there needs to be a way for the buyer to put some skin in the game. Maybe asking for a $50k non-refundable deposit to kick things off.

Sounds harsh? Well non-refundable deposits are a thing in real estate. For example in my country it is common to put 0.25% down to take the property off the market, non refundable, allowing you to do due diligence and then 19.75% deposit within 5 days non-refundable, with a closing period of say 30 days to pony up the other 80%, usually from finance. Probably the 19.75% is lost if finance doesn't come through but IANAL not sure if that holds up court or not or if you can get it back in some circumstances. But people understand it's serious you might lose it.

If you don't really need to sell but wouldn't mind $5m this would be a good way to weed out non-serious people. If everyone says NO then that's OK you keep on running the business as before. If anyone says yes then you know they are serious. They might not buy, but you get $50k compensation, which might be less than your costs, but the point is the $50k is like a way of communicating information 'we are serious' than an actual payment.

Asking for $50k from someone who invests $5m is like asking $50 deposit for someone who wants to book a luxury hotel room for a week. Maybe I should have said $100k (!)
Women’s gender roles in society has changed a lot over the past century. Do you think the same could happen to men ever?
Navigation Apps and Traffic Politics
> I think that ended when games became truly interactive, as opposed to command-based, because, when that happened, performance became a bottleneck.

Counterexample: the recently posted article series about Another World - a VM-based game released in 1991 that was very interactive and graphics-heavy.

https://news.ycombinator.com/item?id=21937607
I’ll believe it when I see it. I took the I course (which was excellent) 6 or 7 years ago and gave up on II after the third or fourth cancellation. Should also be goo if it ever actually happens.
Craverly Heights: Inform 7 and Dialog Side by Side
Cryptography is used everywhere, I assume that is why you are being downvoted.
This looks really awesome. I just commented today actually in the VR article how the tabletop simulator is about the only VR game that looks appealing just to get a group of people together to play a game like this, but I'd prefer something more quick and easy to pickup and play. This looks exactly like something I was thinking of.

A question though, how do you plan on dealing with the inevitable cease and desists as people create unofficial versions of their favourite proprietary games or even games using copyrighted properties?

As far as I know, some game companies...cough cough...wizards of the coast...cough cough...among others get kinda protective of these things.
> fowl play

Those damn geese.
Just use a token like yubikey. I have a small fleet and am very happy with the decision.

The only problem is there are very few services that get it right. Get it right means support multiple tokens and allow to truly disable any other means of logging in or recovering the password.

Most services seem bent on allowing many ways of logging in without giving a choice. For example, they will advertise they use 2fa tokens but then if you can't produce one they will still allow you to log in with SMS or mail (ie. password recovery by mail). Facebook will not even let you set up tokens without having SMS set up as a factor and the phone number verified.

I hope slowly developers will get more aware and they will be better tooling (and stack exchange answers to ctrl+c ctrl+v...) to do it correctly.
One thing I've found incredibly powerful over time is sussing what "Good Enough" looks like in the context of whatever task I'm dealing with. I just can't overstate how much Good Enough is important. It saves you doing extra work, and from doing redundant work, and from getting forever stuck on one thing so you can't move on to the next.

The other thing to mention is that there's a false dichotomy between quantity and quality. Quantity is the only way to get to quality. At elite levels, improvements happen because you change how you do things. But to even get to that point, a lot of quantity work has to happen.

In other words, your gut is telling you that super-optimising is making you better, but it's not.
VCs will also fake interest to try and build a deck of possible companies to invest in. Then they go to their financial backers, and say hey! give us more money to invest. they talk about their financial opportunities, and then if they raise funds, maybe invest in you.
I'm definitely not good at finance, but could this just be Casper making it look like they're losing money to dodge taxes or something?
Quick Tip: Create a CircleCI Baseline Build on New Branches
Wow I didn’t know that. What are some examples?

That’s interesting to think about compared to so many companies I’ve seen having their own url, even if their website is all html tables and css rules from 10+ years ago.
The game state is a json schema object and user actions (roll dice, shuffle container, move component, etc) are json patches that update this state.

I want scripting to allow specific mechanics that would be more tedious to perform manually. For example: Draw N cards based on the value of a dice roll. Or to potentially move a turn token around from one player to the next after an action is performed. Haven't though too deeply about implementation yet though.
So, inherently necessary, and quite important if you're diabetic?
Maybe a little better... I guess if you are a young startup and broke then nothing to lose? If you don't own a house or much in the bank...

But I feel these breaches also make the compaines look bad, so bad PR I think is a big hurt. However at the same time you have no choice to be included or not with some things. Like with LexisNexis or Equifax, since as far as I know I can't tell them to delete all my info and as far as I know I never consented to them having my data.
There are infinitely many facts. They don't select themselves. Humans do that, for reasons of their own, and sometimes their reasons don't match the intended use of this website, which is curious conversation. So while facts are a nice-to-have, they're not sufficient to make for a good HN post. Other things are needed also.

https://hn.algolia.com/?dateRange=all&page=0&prefix=false&qu...

https://news.ycombinator.com/newsguidelines.html
What a loss. I’ll be listening to his music for the rest of my life.
Not for everyone's setup, but network booting the Pi's is an option [1]. Probably not wireless, but it may be something.

Bonus points for the instructions using a Pi as a server for this setup.

[1] https://www.raspberrypi.org/documentation/hardware/raspberry...
I wouldn't say it is illegal but the law in Australia is very tough and you can't just use common sense, you got to wait and get approvals which in many times don't come. Many times I was pointing out to people that there are too many dense forests around where people live and it is a fire hazard but people looks at me like this dumb immigrant who is anti "the environment". Australians just love their nature and are against anything that will hurt it, even if it is necessary. So it is easy to dismiss anybody who point it out as some climate change denier but meanwhile people houses get burned.
Yes, I run Linux for business but keep a FreeBSD personally so I'm used to it in case I need zfs for business.
That's interesting. I hadn't heard about deepfake-generated songs before. The main thing stopping deepfakes from becoming a problem that I see is that even though you can swap someone's face onto another person's body and have it mimic their facial expressions, you can't make them sound the same. So if you try to put words in someone else's mouth you have to have a way to generate audio in their voice to match the video. It seems that audio deepfakes are on their way now too, which I think is when we'll see a real problem.
Is anyone aware of something similar that works when the picture is taken outside the water? Something that could remove reflection and glare.
Similarly anecdotal, women spend a lot on clothes.

My actual point is this type of discussion doesn't really add anything. It's difficult to prove, and prone to an extreme amount of bias combined with generalizing from a small sample.
Yes, I've already investigated the PinePhone. I have nothing against it -- there are a great many things about it that are wonderful -- but I don't find it particularly appealing on the whole.

My escape plan is to use the dumbest feature phone I can find and also carry a pocket computer (running standard Linux) that lacks cell capability.
The Craziest Funnel Builder Ever Made
What Does “TDP” Mean?
Awareness may make providers more willing to switch to a better 2FA, such as TOTP.
especially populist ones

That word is used by people for politicians they don’t like.

Can you give me an example of a politician who is not populist?
A single pedal would be manual control over acceleration and braking. All the way off is full breaking (or stopped), half way down is coasting, and all the way down is full acceleration. Society could never transition to such a control system, but I would love to try it. If Tesla's pedals are completely drive-by-wire, they could pretty easily set things up to run that way.
I fully agree with this.

Guiding principles are a good thing, but the one principle that should top them all is "no dogma".
Honestly, I don't like binary modules and I am happy with policy that let's me have functional operating system with modern hardware with source code that I have access to (well... except the firmware that even Linux can't do anything about until open-source hardware projects get more traction).

It is enough that almost all devices around me have a bunch of running code that I have absolutely no control over. I need at least one computer I can trust to do MY bidding.
First, I want to thank you for your reply.

The article is about the USA, and the problem is specific to the US. It seemed natural that we were still talking about US society. I didn’t intend to provoke you with my bombast, I simply misinterpreted your argument, my apologies.

The first post didn’t elucidate your points well enough for me to put them in context, and it makes a lot more sense given this additional information. I actually agree with almost everything you said in principle! :) But the ambiguity of your previous post left me genuinely upset, as this particular issue hit close to home. I’m glad to have this sorted.

I tend to see a welfare class as an unfortunate inevitability of social welfare programs. The best thing we can do is have strong public education and holistic healthcare system to try and combat a multi-generation welfare class. It’s a difficult problem.

I’ll leave my original post as is, for the sake of prose.
Currently there is a very high rate of HOV lane violations. I wonder if they’ll enforce it more when it becomes a toll lane too.
Compared to what?

Better than not having it? Yes.

Better than committing a 4,096Kb PK to memory and confirming all interactions with mental arithmetic? No.
One might expect Garena to do it, but why haven't they already? Maybe Grab can.
It was a general rejection system, so all valid (and recently invalidated) tokens were in the same bloom. If we rejected your token, your connection was cut immediately without response. The normal mechanisms for limiting short-lived connections from a given address apply, so your ability to sample for that would be severely limited, and chances are you wouldn't even have a well-formed token to sample with anyway (since the tokens were authenticated).

I don't work on that anymore though. I might do something similar in the future, but being able to detect when admins are snoozing is low on my list of concerns; if it's designed properly, it'll be cheaper to hire PIs to just look and see when they're snoozing.
Minor correction but it's closer to 11M hectares. The 5M hectares is just New South Wales alone:

https://en.wikipedia.org/wiki/2019%E2%80%9320_Australian_bus...
I tried to build a game once with their stack, but it's just too old school and custom for my taste. I really appreciate your platform and hope it will attract some people.

The licensing thing is a big thing though. But I think the publishers don't mind as long as the games are well presented and don't have a digital version yet.
As always, it works (the law, not the SMS 2FA)
A useful primer for those un-initiated:

Cartoon Cryptography

1min animated series that explains cryptography with cooking analogies

https://gun.eco/docs/Cartoon-Cryptography
Not exactly. More like "not a substitute for".
You can negotiate anything you want, and I'm not joking or being sarcastic about it.

A lot of people in this thread will say: well, it's unusual or non-standard to do x y z. Good. Most of the interest a company receives re acquisition is going to be pure bullshit at best and malevolent at worst. Ideally you cause the majority of both types to turn tail and run away immediately. If you're not careful you'll waste an enormous amount of valuable time dealing with bogus acquisition (and partnership) interest. Big companies waste a lot of time and money screwing around with: let's make a deal; they can afford it.

The break-up fee should not be layered under 27 conditionals. As someone pointed out, the acquiring company will bury you under a mountain of difficult to fight legal justifications to get out of the break-up fee if they can. And they're almost always going to be far stronger financially than you are.

A fee is going into the company bank account no matter what, without conditions, if you want to get serious about an acquisition. You're going to pay us for our time - risk, legal costs, etc. - if you're serious. The mental approach is simple: don't like the arrangement? Fuck off right now so I can get back to running my business. That's not standard? Too bad. It's your business, you can do anything you want to in that respect. Don't let people tell you that you can't do it, you certainly can. If a company is very serious about buying you, they won't run away if you put this on the table up front, they'll be willing to discuss it at least.
But we are talking about the specific case here, aren't we?
Password reset involves a separate table to record user’s requests to reset, which also acts as an audit log of attempts (successful or not).

As for eMail verification, you create and store a verification ID when the account gets made (I use a Guid), and it is this that the system dumps into the verification link that gets sent to the end user. Every time the username gets changed, that Guid also gets changed (along with the verified flag getting cleared) so another verification link can get sent out that is unique. Reusing a link is always bad, because you want to ensure the user goes after the most recent link.
Not really. More like a way to sell a fraction of your vehicle's value while working for less than minimum wage in some cases. Not a great situation but, you are not paying high interest on a loan that you have to pay back.
I added `zpool scrub tank` to cron once a week.
2018 and 2019 biopharma startup IPOs
Gates had close ties to Epstein:

https://www.nytimes.com/2019/10/12/business/jeffrey-epstein-...

In fact, Epstein left his entire estate to Boris Nikolic (guy on the far right on that NYT picture). Nikolic worked for Gates for many years.

This is Gates emailing co-workers after visiting Epstein:

> After the meeting, Epstein emailed friends and associates to boast, writing "Bill's great" in one email reviewed by The Times. In an email Gates sent to his own colleagues the next day, he wrote, "A very attractive Swedish woman and her daughter dropped by and I ended up staying there quite late."

The revelations about Epstein directing the $2M Gates donation to MIT first came out in Ronan Farrow The New Yorker piece on Joi Ito and MIT. Gates has denied it but given all the facts it seems very believable that Epstein did have something to do with that donation.
It's honestly more angering when figures like this think everyone else is dumb and will swallow the story that nothing is happening, it was just the right time to leave. This one is even worse, he's trying to sell himself as a wise leader leaving to see his pupils grow:

> He said that it was the “right time for me to make way for the next generation of leaders”

> In his farewell note, Mr. Drummond did not mention any of the claims.

Really? At least mention the full context around your departure. Moreover, he tries to pull this one off:

> “I know this company is in the best of hands, and I am excited for what the future holds for Google, for Alphabet and for me,”

> His departure had been telegraphed in the last few months as he sold off most of his shares in Alphabet, unloading roughly $170 million worth of company stock from November to January.

Come on. Drummond, you're leaving as consequence of the investigation around your misconduct. This is not an opportunity to try to squeeze idolatry out of. Just leave.
> Should the library includes its own CA store, or use the system's CA store?

The CA store should be a configurable option, and one of the supported options should be the system CA store.

> The user will want tighter release schedule than python's so they can get these stuff sooner.

Ruby is moving stdlib to default and bundled gems, which addresses this. There's no reason that “delivered with the interpreter” needs to mean “frozen with the interpreter”.
This also makes it multiplatform. While (paid) TTS supports Windows, Linux and Mac, running on a web browser lets you play this (presumably) on an Android tablet, Chromebook, or iPad.
Ferrari acceleration maybe, handling like a Chevy Impala
Two hours is a very long Caltrain, do you live in Gilroy or something?
The taxi system is not fair nor safe. They prey in your inability to properly judge the fares for your ride. I can 100% guarantee you were scammed, it's just that the low value of the colombian peso made you feel it was pretty cheap. And hell no it's not safe, double the danger if you're a woman.
I didn't read it like that at all. As stated in the article, the offending bit was the last two lines. "If you haven't tried it, I suggest you do" is the smug, condescending jab that was completely unnecessary. It is inflammatory for no benefit.

The start of the response was perfectly fine and I did not feel the author took offence to it.
Sure, but how do we used to share the increase in productivity ? How do we share it now ? How should we share it ?
;
My feeling is workers had been the "loser" those last 30 years in how are shared the productivity gain.
Ethically I find it wrong.
Economically this did not seemed to offer more growth or positive outcome...
Both of Stewart Butterfield's companies, Flickr then Slack, are spin-offs of tools the team made while trying to make a game. Maybe that's what your coworker was thinking of?
I never claimed that every problem is best solved at the neighborhood block level.

I think Vermont DMV is best solved at the Vermont level.
The big benefit of SMS for the website is that it outsources the problem of lost 2FA tokens. What happens if the user loses a yubikey. Or changes phones and did not back up their TOTP. With SMS authentication, even if the user loses a phone, they can go down to the local cell phone store and get a new phone on their number and be back in business without the website having to get involved.
Previous discussion: https://news.ycombinator.com/item?id=22015581
In what sense? I haven't tried anything CPU-intensive on it, since there isn't much point with that kind of screen.

If you mean the screen refresh rate, it's typical eInk, comparable to Kindle. For tasks that require fast refresh, it's certainly not a pleasant device to use - e.g. scrolling around in maps is a bit tricky - but it's manageable.
I wish more websites (and other application protocols) would support client-side certificates in addition to the username and password for authentication.
Of course it could be added later (there's urllib that almost no one uses), I meant that Python is older than HTTP and HTTP evolved a lot during that time.

Once you create an API, it's hard to change it. HTTP initially was very simple and evolved over time. Things like REST, JSON encoded messages, cookies, authentication (albeit rarely used), keep-alive were added incrementally. Today's HTTP is used completely different than 30 years ago. Python already had urllib, then urllib2 which was renamed back to urllib in Python 3, but its API is still behind how HTTP is used right now.
Just for the record, absence of evidence can be evidence of a crime: evidence-tampering. And anyway, an absence of evidence isn't exactly exonerative either, especially if a plausible narrative exists to explain the absence. And there are several here.

It's a matter of probabilities. Surveillance video was prematurely destroyed, twice in a month, in separate incidents and in different ways. Oh and both of those incidents involved the same subject. That is statistically improbable, similar in category if not in actual magnitude, to getting struck by lightning twice. At the very least that should justify and support an investigation kicking into overdrive mode to find direct evidence. And if no such evidence is found, it may nonetheless end up being used as part of a prosecution. Interesting coincidences are always pretty persuasive.
No, we are talking about hundreds of fires.
Even here in Canada farm related employment is classed separately for a variety of things including taxes and employment insurance. I've never really thought much about it, but every employment related government form I've ever filled out is like that.