skysight-inc/HackerNews huggingface dataset:
I'll bite. It doesn't seem obviously wrong to me. I would also love to know if I'm misunderstanding something.

I've never seen it done this way, but I think postgres pgcrypto could support this.

If I had to guess, I haven't seen it done this way because authentication frameworks are not normally in a position to lock down access to the database in this way (e.g. it couldn't create a password table that the web app credentials can't see, because it's integrated into the web app and uses the web app credentials to create the password table). The way they typically behave is:
- When updating password, run bcrypt in the web server and INSERT
- When testing password, SELECT the bcrypt hash down to the web server, and test on the web server.

Have you used this stored procedure strategy in production? I'm particularly interested if it's caused any challenges with resource usage in the database server?

The top answer in this stack overflow question makes the argument that you should bcrypt in the web server to lessen the time it's unhashed:
> Use php bcrypt if you can, it'll lessen the time that the password remains unhashed.
https://stackoverflow.com/questions/2647158/how-can-i-hash-p...

I'm not sure I agree with this argument, unless perhaps the database is hosted by a separate vendor (which would mean another party is receiving the unhashed password). Also note: the strategy proposed in that answer doesn't have the benefit of a stored procedure preventing a SELECT all, so maybe the less time argument makes sense in that case.

Perhaps there's a valid discussion around - is this going overboard? Is preparing for a leak of web app database credentials an attack vector we really need to prepare for? If we do, are password hashes the critical data we need to be securing in this manner? When hashes leak I've been asked to change my password as precautionary measure, but hashing algos are such that this event shouldn't be catastrophic. Unlike a credit card number leak, for example, which would cause a bigger headache.
> disproportionately rewards weird market actors (like people with custom mines ASICs).

1) Weird? It seems we'd need a government to set some decency standards for those guys!

2) Disproportionate awards: what would be the right proportion to their work? $15/hr for every miner including those mining on mobile phones?

Regarding the article, whatever the cost - "too high" or "too low" - proof of work as implemented in Bitcoin won't survive for long (google it). I don't care how much energy it uses or how much pollution it creates, but I also don't think that its fee market rules are optimal.
I don't think it says even that.

It says if you want to install Qt binaries from Qt website. You can still distribute the binaries other means. For example from KDE.org https://kde.org/community/whatiskde/kdefreeqtfoundation.php
He’s just reciting this post [0] or any similar. See the top comment in that post for further information.

0: https://www.reddit.com/r/gaming/comments/77bodv/the_n64_logo...
Hi gartneranalyst :)

When your firm starts using new category terms like DevSecOps and AIOps, how much of that is due to Gartner trying to create new categories (so that you could dominate the analysis of said category) versus relaying actual terms you're hearing in the market?
They said that in the end only 414 users were affected, and it was their simple hosting package. Honestly, I’m almost surprised it was that much.
Ask HN: Does HTTP Interceptors in Angular Include the Main Request?
Probably newbie question, does HTTP Interceptors in Angular include the main request? I need to add a header to the browsing of an Angular app. I've found HTTP Interceptors, but it sounds like it's for intercepting all HTTP requests made by the explicit app code, and I need to include a header to the first main request of the (let's said) index.html main app file.
If(?) you really want to read this, please note that the site is closely connected to a former Debian developer with an axe to grind and at least people in his very close proximity acting in bad faith [0][1].

Please use your judgement as to the quality of the contents of https://debian.community. I have no horse in this race, but I do notice it is a prime example of Godwin's law [2]...

[0] dig debian.community, dig danielpocock.com

[1] https://nm.debian.org/public/people/dd_all - no Daniel Pocock anymore

[2] https://debian.community/nazi-rhetoric-creeping-into-debian/
I started this project as my 20% when I joined Google over 10 years ago.

I had somewhat accidentally been a Filemaker consultant for a while before that and saw how far non-programmers could get with a visual schema editor and GUI editor and some light scripting. They often made a mess, so I came into to fix things, but the fact that a small business owner could make a working custom inventory and invoicing tool with absolutely no training beyond the manual was incredible to me.

I'm really saddened by this shut down, for the continued reputation damage that's being done, because it's my baby (and you don't often get to create an entirely new public product at Google), and because I still believe that the world needs more and better tools that allow non- and casual programmers to build software to solve their own problems.
PCMag article talks about how Avast's 'de-identification' of the collected browser histories can fail and be used to by third-party companies to link your web clicks to your real identity https://www.pcmag.com/news/the-cost-of-avasts-free-antivirus...
> AFAIK there aren't really any good solutions to prevent this problem

https://blog.coinbase.com/how-coinbase-views-proof-of-work-s...

> Coins at the greatest risk of 51% attack are the ones where there exists large amounts of hashpower not actively mining the coin that could begin mining and disrupt the coin’s blockchain.

Also, Ethereum's upcoming transition to Proof of Stake is not contentious, it's a large-scale project years in the planning and execution.
Roughly 20 years ago, a similar case threatened to destabilize Microsoft. WSJ
> 7680x4320@32

Any models that you like? That’s 33 megapixels, fantastic!
So would you have participated to a developer conference in apartheid South Africa? You think the issue was some sterile "geopolitics" debate?
I don't see how the US will get out of the current "corporations run everything of value" situation. Seems like all tools to help fight it are themselves owned by corporations in no hurry to change the status quo.
Half the article is about the cultural context; see also the stuff about rural access.
The cynic in me believes that the costs built into the contract for 'maintenance' will provide a very powerful incentive against this.
My belief is based on the career pipeline of:
General staff officer (so, Lt. Colonel and above) -> Defense contractor lobbyist (whose pay is partly dependent in the size of the contract).

While not universal, this happens often enough to be a significant force.

Uncertain if framing this as a 'Right to repair' changes the fundamental issues or not.
Dawn – Annotate Code
I think some of SUSE's customers certainly must? Otherwise it would not make any sense for them to support it and stand behind it by now...?
>Don't bring geopolitics into everything.

A general ban on hosting conferences in geopolitically sensitive hotspots that covered Israel would be the non-hypocritical way to achieve this aim, supposing it is the true aim.

However, hosting a conference in Israel is inviting political posturing. Message censorship is political posturing. Using anti-semitism to censor non-anti-semitism is political posturing (and, usually, a form of anti-arab racism itself).
The thing that shocks me about Google Voice and the fact that it's still around is that it is routinely abused for nefarious purposes. IIRC there was a series of bomb threats made in the US to which the perpetrator was simply using Google Voice and a VPN to mask their location.
And why bother using it when it’s going to get shutdown anyway. Question isn’t if but when.
And by "don't take that into account" you mean "transact anything off chain" including other currencies, goods, services, etc.
Thanks for the feedback. What data would help with the argument?
Looks like we had the same idea. Upvote this guy, he got here first.
I suspect it's because the mobile app does a bunch of device-side caching and the web doesn't. Definitely their front end performance is nothing to call home about, I remember filing a ticket about slowness and being replied that 4 seconds to start painting the screen (not done loading) was "excellent performance" according to their metrics.
I realize this is a problem since time immemorial, but something needs to be done to prevent corporate interests from dictating government and international policies. I can only call out the problem, I don't know what the solution is. But why should people bother to vote if leaders' ignore their constituencies' needs in the face of aggressive corporate lobbying?
I don't trust banks. I only use them because there isn't really a system that I do trust that still allows me ready access to my money.

That said, I don't keep all of my money in a bank. Nor do I keep it all in a tupperware container. I like to avoid accidentally creating honeypots.
that's what every VPNs are doing

that's what every firefox/chrome extentions are doing

that's what every mobile apps are doing

Time to wake up slaves of the modern world
> It's not news that altcoins are much much easier to attack than the top coin(s)

Not everyone here is a cryptocurrency enthusiast. The fact that this is even possible is interesting by itself; an instance of it happening even more so. What's not news to you is indeed interesting to someone else. Alas, this isn't Reddit, so the usual "OMG Don't spread FUD!" response doesn't apply here.
Show HN: Send yourself updates based on how your code is doing (Python)
I mean, OK, but maybe you could explain some of the ways your alternative solution compares to App Maker?
I am not sure if the following is true or one of those stories that gets recycled.

While I was working at Best Buy - the Geek squad told us a story of an older Lady who brought in a computer wrapped entirety in plastic saran wrap, to prevent the virus from escaping the computer and infecting people. She thought it was okay as she containing the virus and continued to use the computer before it turned off and didn't turn on again, which is whys she brought it in.
From your mouth to God's ear.

IT installed freaking Norton on all of my new Macs. Now I feel less safe, and I get the software nagging me all the time.
Many people remain uncomfortable about how DebConf organizers are handling the challenges presented in the middle east.

As someone, who has zero experience with DebConf whatsoever, I have to say, I can see how such an intro could be interpreted as anti-semitic. What "challenges" would have an Israli conference have to handle? How and why. If it's just because it is Israeli then do all Israeli conferences need to "handle" this challenge?

Should DebCon be boycotted if it doesn't live up to said "challenges"?

But maybe someone can explain, what is meant by "challenges"?

Also, as a sidenote, the article doesn't help it's case either, if it uses the Holocaust as a reason to criticize Israel.
I have a synology NAS on btrfs. One of the best computer purchases I've ever made.
The link at the end of the article is broken, here's an archive: https://web.archive.org/web/20060507194719/http://www.jumboj...
Is “Fuchsia OS” every going to be anything?
They passed ineffective laws against it. To me that strongly suggests it actually was legal even thought the state didn't want it to be.
How are the AV companies still alive with Windows Defender installed on every Windows since like Windows 7 or 8?

Apparently by selling your information.
To me, theorem proving is automated reasoning, whereas here the system focuses on making human directed reasoning more efficient. The line is a fine one, I guess.
Andreas Antonopoulos offers sane advice on this...

https://www.youtube.com/watch?v=ncPyMUfNyVM
I compete in Brazilian Jiu Jitsu. I also train and do sparring in Muay Thai, but do not actively have fights.

Brazilian Jiu Jitsu (BJJ) is a great sport, not only for the physical activity, but also as it requires constant learning and humbles you very quickly.

You learn to let go of your ego, regularly getting tapped out by smaller people, including women, and forces you to reflect on your mistakes and learn from them.

I feel as though it is equivalent to a real-life RPG, where you're constantly grinding and gaining experience and gaining abilities to take down better opponents. It's also a ton of fun and stress reliever after a long day at work.

It's always interesting to see the dynamic at the beginning of class where everyone is significantly more quiet, as compared to after several rounds of hard rolling and submissions. Everyone is in a great mood and talking to each other about how they were caught in an impressive and sneaky choke or asking for open criticism from others.

I feel as though this has translated well in my professional life, realizing that situations are not as bad and I believe and can take a step back, relax, and assess the best course of action.

Highly recommend giving it a shot if you want to be challenged to an extreme and learn every single day.
Is there at least an https://ourincrediblejourney.tumblr.com/ style post somewhere? :(
I didn't misread - I was agreeing with you! :) And disagreeing with the person you were responding to.
Looks like we had the same idea.

Upvote this post, it makes the point with far more elegance.
(... and to replace most of them)
That's very green. :)
I go camping once a year at the base of a 1.2 Mega Watt transmitter (It is a Navy Camping ground). Not AM, and at a Very Low Frequency, but still impressive! So far, I have not noticed any ill effects. Fingers crossed.

https://en.wikipedia.org/wiki/Jim_Creek_Naval_Radio_Station
A bugzilla clone please. Jira is not designed to be used by software devs imho.
A reminder that the US is, right now, functionally a cleptocracy and that the immense amounts of corruption we're currently witnessing has been put in place by people saying "job creators" every two sentences.
> “protect, promote and support breast-feeding”

Why is it any government's business in first place and why would these super bureaucracies waste they time passing such kind of stuff is beyond. If baby formula companies are any smarter they will probably not waste time and money on WHO resolutions.
Maps as a user yes. As a website owner it fucked over millions of pages with its exorbitant price hike.
> My guess is you’ll never be in a position to have a lot of cash, keeping it from being a real problem for you,

That's a little ignorant.

When buying a personal hobbyist aircraft (KitFox, which was a thing) engine, my father stuck 10k in his socks that he had withdrawn over a couple months when traveling to go take a look at the engine in Kansas or wherever he found it. I have had to deposit 25k in cash into a business account. These things are uncommon, but not rare.
Why the censorship though? That is pretty nefarious.

Palestinians basically live in israel, but have manufactured concrete borders put around them. Inhibiting their freedom of movement in their own country. Not allowing them to go to conferences. So holding a deb community member asking the community if they would be willing to spend some time for the engineers less fortunate, is actually quite awesome of him.
That’s what I was thinking but his LinkedIn shows he was at google for over 2 years.
Looking at the patch (http://launchpadlibrarian.net/27497360/hardy.diff), the issue was that the string "Tue Jan 22 14:32:44 MET 1991" is matched to check for an Erlang file, which seems weird but reasonable. The bug is that the spaces weren't escaped in the string, so it was only looking for "Tue" instead of the full string.
The last couple seasons were difficult for me to listen to Marty calling games because I thought he came across as very negative and embittered, but then his final season (this last season) was so much fun as he seemed to be enjoying it again even though it wasn't a good season for the team. I listened to games a lot more throughout the last season and then listened to parts or all of his last 20 or so games and it was so much fun. Really glad we still have the Cowboy. Baseball is such a great sport for the radio if you have good announcers.
> cryptocurrency era

Cryptocurrencies and their associated boom-bust market cycles are here to stay.

95% of blockchain development happens on Ethereum, and Ethereum is growing well, https://medium.com/@jjmstark/the-year-in-ethereum-2019-24201..., so the idea that there was a cryptocurrency era that's ended is not true.
I would prefer to live in a society where corporations run everything rather than a world there bureaucrats run things. What to feed their babies is a parental choice and the government should mind its own business.
Thanks for the tips.

I meant presenting. Like, should I do a fatty grid? Organize by trip? Etc.

As for srcset I use it on my blog but something about Hugo causes my images to rotate.... Sometimes. Lol.
Because the market cap of the tiny "currencies" is total bullshit and is based on two guys trading with each other, it's like me buying 0.0001% of your company for $1 and then you claiming it's worth $1M.

Bitcoin Gold is not seriously used by anyone.

The larger currencies are slightly more reasonable but even then the valuation is unhinged because, for example, a lot of Bitcoin has probably been permanently lost.
Friendly, unnecessary, pedantry: "for just my wife and me".

"I" is used when it is in subject position. Occasionally, the rule is a little bit obscure ("He does it better than I", where the subject position is implicit ("better than I do it")).

This grammar error is becoming very common even among well-educated writers and speakers, in the US at least. It must be stopped!
Y Combinator's Track-Trump Site Is Down
Is there some connection to CarbonFive[0], the consultancy, or did they just.... um... completely duplicate their logo by accident or something?

[0]https://www.carbonfive.com/
He went from Tesla to Google in no time flat, less than 3 months. But he was at Google from August 2017 until now which is significantly more than one ISO no time flat unit.
Plenty of companies develop desktop software for internal use. They built it, update it, and use it heavily but never sell it. I'm not sure how many of these fall into Qt's startup/small business category, though.

It seems like this license is maybe ideal for a small company that wants commercially-supported Qt to use while developing a product prior to selling it?

That seems like a fairly small niche to target, but presumably they're making this change based on actual usage data and not just conjuring it out of thin air.
As in all things cryptocurrency related, when most people are talking about the biggest coins, they are talking about trading price and volume.

You'd do well to frame your discussions about cryptocurrency from the HN perspective, not that of a BTC-enthusiast or -maximist. Using derisive terms like "Bitcoin Crash" really doesn't add to the conversation. Like I said in another comment, this isn't Reddit.
I firmly believe all workplace bathrooms should be completely Faraday shielded for this reason.
Show HN: Work laptop doesn't allow minesweeper? I built my own minesweeper
The author of ‘The Stars in Our Pockets’ on eschewing the internet
this link scans for most recent pre-print articles https://www.biorxiv.org/search/2019-nCoV%20numresults%3A10%2...
Since the other post got buried in a subthread: This is about Bitcoin Gold, not Bitcoin itself.

Bitcoin Gold is the least relevant of the forks (worth ~$12 per coin while the main chain BTC is worth ~8750 and the two major forks BCH/BSV are worth around 300, and only 7 of the 20 largest exchanges (by liquidity, according to coinmarketcap) list it - even though most of them list plenty of altcoins/shitcoins. For comparison, Bitcoin Cash is listed on all of them, Bitcoin SV on 14 of them. Additional stats here: https://news.ycombinator.com/item?id=22160458
The heuristic was _supposed_ to be checking for the full string "Tue Jan 22 14:32:44 MET 1991", but the bug was that the spaces weren't escaped in that string, and only "Tue" was checked for.

The proper heuristic seems odd but reasonable to me.

diff for reference: http://launchpadlibrarian.net/27497360/hardy.diff
It's not like they couldn't use dual licenses, like Mozilla did at the time, for example.
A good number of packages are available for R.

Hence e.g. calling R from J
When we either create or advance terms that we're hearing it's always to provide clarity to the market.
Just FYI... this started happening to me when I upgraded to Catalina and it turned out that it was a hardware failure, not the OS. Apparently, Mojave didn't do some kind of check that now happens in Catalina and so Catalina caught the hardware failure that Mojave wasn't catching. You may want to test your RAM and/or drives to make sure they're not failing or about to fail.
It depends. Roughly speaking the revenue is

(Largest transaction you can cash out at exchanges) * (1 - (The decrease in value of the currency you attacked)) + (Block rewards earned).

Basically you get someone to give you cash in return for your cryptoX and then the attack lets you undo the transaction that gave them the cryptoX (but you still have the cash you got). The second term handles the fact that the attack may have cause the value of cryptoX to decrease which hurts you since you still hold the cryptoX you double spent.

This is an academic paper that looks into the details more closely https://faculty.chicagobooth.edu/eric.budish/research/Econom...
I haven't played sports since being on the swim team in high school. Likewise, I have no interest in watching sports. Competitive sports creep me out a little.

My physical activity is bicycle-riding. I don't do it recreationally much, but intentionally got rid of my car in order to force me to ride a bike, to ensure that I get enough routine exercise.
Sure but isn't indifference easier than opposition. Why oppose it rather than ignore it??
but companies can control that choice, and that's cool with you?
Data Integrity Identifying/Protecting Assets Against Ransomware/Other Events
Because you know the right answer for every single situation in life and don't need any coaxing in the right direction and all your neighbors do as well?

Weird that you created an account just to post this.
Why is inability to download and install binaries from qt.io without login such of show stopper for people here?

Other sites and organizations can compile and distribute the binaries.

KDE Free Qt Foundation -The KDE Free Qt Foundation is an organization with the purpose of securing the availability of the Qt toolkit https://kde.org/community/whatiskde/kdefreeqtfoundation.php
I can't help but think of the sprawling McMansion my extended family vrbo-ed in Houston during a wedding. The home comfortably housed 14 people across 7 bedrooms and I counted 6 bathrooms. While the rest of the house was thoroughly maintained (and a little gaudy), one bathroom tucked in the corner of the house had an awful mildew smell, white duct tape covering a crack on the toilet, and a bunch of stains on the wall and tile that I could only assume were a rush job to remove mold.

Just a little anecdote that fits my worldly philosophy of the more things you own, the more things that can break.
I can talk to my representatives and possibly work to vote them out when they do things I don't like. How do I do that to corporations with monopoly level powers?
Hard to take this seriously when it is missing Garlicoin.