skysight-inc/HackerNews huggingface dataset:
Ugh, this is so horrible. Mostly because they have thr right idea but did it half-baked.

Avoiding wifi passwords is great, but you still need connection security,mitm is not hard to pull! You could be on a VPN and someone can mitm you! Client isolation is nice but evil twins are a thing.

The best practical solution is to use EAP-TLS, ideally you would have a captive portal that instructs clients to either run some whitelisted app/script or manually generate client certs (just an app is usually best imho). But if you're allergic to captive portals, you can still do EAP-TLS with only server authentication(like we do with most of HTTPS sites!).

Less practical: allow only VPN traffic. If the traffic is ipsec,openvpn,Tor,wireguard, always allow. If people don't have their own VPN,captive portal directs them to install/run a VPN app where the VPN terminates at the AP or at a VPN provider you pay for (or better yet,work with one of the more reputable procviders to have an audited cross-platform VPN app).

Back to the problem: even if everything used DNSSEC and TLS, a passive adversary can still see which sites you're going to. Now,you may have a hard time envisioning this threat model but imagine you're at a hotel trying to do a business deal, the other side could gain important negotiating advantage based on knowledge of what sites you have frequented(just one example).

Most sites that use https still redirect from http.that is, if you go to somesite.com, your browser gets a 301 redirect to https://somesite.com. so, if an attacker can inject a 301/308 to a site they control,your only defense is the user being smart enough to tell apart somesite.com from some-site.net or something.

Local attacks are very much a thing,i.e.:wpad,llmnr,arp,dhcp,etc....

So,basically, follow industry best practices! If someone loses money or worse because they trusted your enlightened security model,be prepared for a lawsuit!

Attempting to ease user burdern is nothing new,but reduction in security at any point needs to be met with an equal or greater security compensating control. You can't just say "most people are using https" when https is not the equivalent or compensating control for WPA2/3-PSK! An attacker needs one http connection to land their payload. 99% https usage means little here. Anyone can easily mount an evil twin with a pineapple these days.
Debunking four myths about Android, Google, and open-source. (2014)
ps, "fox" was a reference to the ylvis music video from 2014 or so. i thought perhaps in the scandinavian cultures foxes were associated with being quiet. universally, they are associated with being cautious and discreet. anyways, i would have been a bad propaganda writer for sweden in the 1940s. it would have been overrun with nazis within weeks if i were in charge of things.
I agree that there are cases where a naive implementation would have a hard time distinguishing implementation from program (and even in case of a non-naive implementation, it can be a line drawn in water), so this sort of thing might be warranted. Though that was just one example among many, and there are many instances of undefined behavior that are very much compile-time. For example:

> The same identifier has both internal and external linkage in the same translation unit

> Two declarations of the same object or function specify types that are not compatible

> An attempt is made to use the value of a void expression, or an implicit or explicit conversion (except to void) is applied to a void expression

> An unmatched ' or " character is encountered on a logical source line during tokenization

> Two identifiers differ only in nonsignificant characters

> The identifier __func__ is explicitly declared

> The characters ', \, ", //, or /* occur in the sequence between the < and > delimiters, or the characters ', \, //, or /* occur in the sequence between the " delimiters, in a header name preprocessing token

> An expression that is required to be an integer constant expression does not have an integer type

You get the idea. That's just what I gathered from quickly skimming the first screenful (out of about 4) in the list of UB in N1256.
That link still isn’t to the actual results. Here they are: https://news.gallup.com/file/poll/284015/200123LeisureActivi...

Your page points to this — good luck finding the hyperlink though!

Anyway, defined as “% of population that did the thing at least once”, movies are first, parks second, and libraries third.

Parks have seen a huge uptick in popularity. The other two dropped off (libraries dropped off more than movies).

In terms of median visits per person (probably the better measurement), almost nothing changed.

Concerts went from 1 to 2 visits, libraries went from 3 to 2. I’d guess those are explainable as statistical noise.
"the NG, which had to use these weird flattened turbofan nacelles in order to get enough ground clearance"

I believe your picture actually shows the 737-300 (Classic), which had a very obvious flat-spot in it's nacelles. The NGs do also have a slight "flat spot", but it's much less obvious.
Fifth Time's the Charm – Debugging Ember Octane
Just out of curiosity, how are you anonymous when an Ads-b transponder will respond to any request it receives?

Does incognito mode in your browser stop you from being tracked if e.g Google or facebook can see every or almost all of your requests?
Consider: it’s totally possible to strip down Postgres until all you have left is an embedded RDBMS of the style of SQLite. (I’m not sure why nobody has done this yet, actually.) Would you call the result “just a file format”?

Such an instance of “embedded Postgres” would still have a huge sprawling catalog (PG_DATA) directory attached to each use of it, so it wouldn’t be contained to a single file. But neither is SQLite contained to a single file—SQLite maintains a journal and/or WAL in a second file.

And, yes, this “embedded Postgres” would require things like vacuuming. But... so does SQLite. Have you never maintained an application that maintains a long-lived “project” as a single SQLite file, where changes are written into this project file repeatedly over a long period? (Think: the “library” databases of music/photo library management software.) SQLite database files experience performance degradation from dead tuples too, and need all the same maintenance. Often “database version migrations” of such software is written to either rewrite the SQLite file into a clean state, or—if it has the possibility of being too big for that to be a quick task—to call regular VACUUM-like SQL commands to clean the database state up.

——

Now, I get what you’re trying to say; the point that you’re trying to make—that SQLite might be a relational database, but it’s not a relational database management system in the sense of sitting around online+idle where it can do maintenance tasks like auto-vacuuming. Unlike an RDBMS, SQLite doesn’t have its own “thread of execution”: it is a library whose functioning only “happens” when something calls into it. By analogy, regular RDBMSes are like regular OS kernels, while SQLite is like a library kernel or exokernel.

But that doesn’t mean that SQLite is a file format! It can be used as one, certainly, but what SQLite is is exactly the analogy above: the kernel of an RDBMS, externalized to a library. As long as you “run” said kernel from your application, and your application is a daemon with its own thread of execution, then your application is an RDBMS.

This can be seen most directly in systems like ActorDB, that simply act as a “transaction server” routing requests to SQLite. ActorDB is, pretty obviously, an RDBMS; but it achieves that not due to its own features, but 99% due to embedding SQLite. All it does is call into SQLite, which already has the “management system” part of an RDBMS built in, just not called unless you use it—just like exokernels often already have things like a scheduler, just not called into unless you as the application layer do so.
Almost all articles I've seen explaining the context pkg are done with net/http examples.

That's fine but I feel like it might not be the best introduction for a novice as a lot of concepts are mixed together and they might miss the bigger picture. Context is not just for web servers. You don't have to know how net/http works.

You could simply demonstrate the usefulness of the context package with showing how to properly clean up your program on a sigterm. Or even gracefully stop a long running operation so you are not afraid to stop/start your program at the "wrong" time.
I was riffing on the famous book/Ted talk - https://youtu.be/IPYeCltXpxw

I agree the what often works for me, but if you want mass appeal it appears to be the Why that hooks people.
The best there is with the context package is to make sure to call the cancel function given to you by contexts that have cancelation. Usually you do this via defer. The cancel function is a no-op if the context is finished otherwise. All this ends up doing though is making sure that things that clean themselves up know to clean themselves up eventually.
Big felines and wolves don't do well in urban/suburban environments. Coyotes do.
Presumably the fuel efficiency (and emissions) are improved by a good chunk? 40 percent?
If tall female legendary Greek warriors show up and make a claim to the .amazon TLD, we should consider their claim. So far they haven't.
When I'm interviewing people, if they start to bad mouth a past employer I immediately write them off. There are ways to bring up issues with a past employer that isn't bad mouthing. If a candidate doesn't say anything about a past employer, I know that it wasn't good and respect they don't bad mouth.
Casual users don't upgrade 2 times a year. A casual user might not even know that those things are called "windows" or that you can maximize them or that most application have settings where you can change the behavior you dislike.

Causal users just use the system how it is, I sometimes find them suffering trough a complicated workflow because they did not consider to even ask themselves "maybe this can be improved, maybe there is a setting to do this or a shortcut or some better way"
Look at the other comments just in this post.
They eat chickens that people keep, kill other pets, they're basically a nuisance species in North America. Here's it's perfectly legal to shoot them year-round. And, you can cull up to 50% of the population before you would have any effect on them.
I'm not arguing in either direction, just pointing out that moving can have a high cost. I've moved a lot, but I'm lucky to have been largely about to afford to pay for support when I've not yet been able to build support networks.
> In KDE apps that allow you to override the systemwide color scheme, there’s now an option to revert back to using the systemwide color scheme

Is there a way of forcing gtk apps to use the qt file picker?
Juggalo makeup - woop woop.

https://www.yahoo.com/lifestyle/worried-facial-recognition-t...
Xamaron Forms
I didn’t see mention of the obvious double “entendre” in the design as well, with the rather clear implication that prison awaits those that dare not comply.
That mobile web apps aka PWAs are a perfect fit for classical data-driven applications. The return on investment for 2 native apps vs. a PWA is far...
It costs zero if you're a student living with parents who feed you and provide for you. If you have to pay the bills while working on the project then it costs the money you'll need to survive those 6+ months, or it costs you your free time and social life and sleep if you're moonlighting. Depending on your gender, ethnicity or religious creed (and immigration and parental status) it might be significantly harder for you to pull it.
> The main argument I hear for why Sqlite deserves second class status in the DB marketplace is the difficulty in handling multiple writes simultaneously.

SQLite is not in the DB marketplace. It's in the file format marketplace. It handles multiple writes in exactly the same way CSV handles multiple writes. If you want to handle multiple writes with SQLite, you handle it the same way as CSV.
And the oil is still useful as chemical feedstock even if we stopped burning it.
Oklo in Gabon, Africa. See https://www.iaea.org/newscenter/news/meet-oklo-the-earths-tw...
But why is that especially exhausting for remote workers? Why not local ones too?

You also foucs on assigned tasks rather than a team working together to get stuff done. Sounds like Software engineers, not product engineers. If you are pre assigning tasks and working separately then yes a daily scrum has no value.

But that isn't the point of a daily scrum, or scrum/agile at all. The focus needs to be on getting value to a customer together as fast as possible - not individuals doing a task each to build to a pre-defined whole. Iteration not increments.
True, but not every visit is for checking out or returning material. In fact, there was a technical meetup event at my local library yesterday.
I'm familiar with the disagreement, I used to get a DNS error not a 403. Looks like things have escalated a bit:

$ dig archive.is

; <<>> DiG 9.10.6 <<>> archive.is

[-------->8--------]

;; ANSWER SECTION:
archive.is. 299 IN A 94.16.117.236

;; Query time: 224 msec
;; SERVER: 8.8.8.8#53(8.8.8.8)
;; WHEN: Mon Jan 27 01:21:23 PST 2020
;; MSG SIZE rcvd: 55

$ dig archive.is @1.1

; <<>> DiG 9.10.6 <<>> archive.is @1.1

[-------->8--------]

;; ANSWER SECTION:
archive.is. 228 IN A 1.1.1.1
archive.is. 228 IN A 1.0.0.1

;; Query time: 7 msec
;; SERVER: 1.0.0.1#53(1.0.0.1)
;; WHEN: Mon Jan 27 01:23:35 PST 2020
;; MSG SIZE rcvd: 71
I'm a self taught programmer and started developing for Android in 2012. It took me a while before I realised that you needed third party libraries to do absolutely anything useful as the platform APIs were so poor and undocumented. There were gaps everywhere and you needed to write tons of boilerplate code to do things properly.

Image loading was often a huge source of crashes due to out-of-memory errors and doing it properly wasn't trivial [0]. Libraries like "Glide" and "Picasso" solved this.

Using the camera hardware was awful. Device manufacturers would implement things differently, and break the camera API unexpectedly. Only recently [1] are we starting to see sane, consistent camera APIs.

Making network requests felt extremely clunky, and the platform JSON implementation wasn't performant, or easy to use as you had to manually parse everything. Retrofit [2] made talking to REST services much easier.

I could go on and on, but I'm sure there's plenty others here who can do that here. These days Android development is much, much more enjoyable. Kotlin has pretty much replaced Java in the Android ecosystem, and there's great reasources around on how to architect your app to make everything testable and easily scalable such as the architecture samples [3]. I've worked on a few React Native projects in the last year. I'm not a fan of it, but I definitely see the industry heading to some cross platform solution eventually.

[0]. https://developer.android.com/topic/performance/graphics/loa...

[1]. https://developer.android.com/training/camerax

[2]. https://square.github.io/retrofit/

[3]. https://github.com/android/architecture-samples
Probably best not to use `time.After`, because it indeed starts a timer that you have no control over unless you are waiting for the full time.
The fact that SQLite is serverless is common knowledge and not interesting unless you're brand new to databases
It's a top level domain, not one in the .com namespace.
Okay, but that only matters if you read my comment ultra-pedantically. Given the comment I was responding to, I should think it's obvious that you can extend my statement to: "I can't imagine anyone in my family getting stressed over a bathroom"
I’m not buying your reasoning. Try putting a WKWebView into a SwiftUI view. This kind of thing is all sorts of messed up when multiple rendering systems - two of them declarative (SwiftUI and HTML) - collide in a single view. I’m sure someone’s going to call this a corner case, but useful and interesting apps that push the boundaries of the feasible are all composed of such “corner cases”. And hey, I’m not even doing anything outlandish: just trying to show some HTML.
this would not work in the US. like i suspect most americans, i don't know all the words to the star spangled banner.

oh say can you see
by the dawn's early light
by something we hail
by the twilight's something streaming
oh the rocket's red glare
bombs bursting in air
gave proof through the night
that our flag was still there
something something something
and the banner yet waves
for the land of the free
and the home of the brave
> If someone loses money or worse because they trusted your enlightened security model,be prepared for a lawsuit!

The network is provided without any guarantee. In fact with a non-secured network there's not even a way to prove that they were connecting to the hotel's network and not someone pretending to be the hotel.

Furthermore, given your logic, would you sue ISPs, transit providers, hosting providers, etc if they happened to be involved in the data path from a malicious website to your computer? No. And if yes, then EAP-TLS would still do nothing in your case because there's still the rest of the internet to worry about.
If the cultural problems at Boeing led to the issues with the 737 then perhaps they would also manifest themselves on this plane, just in some other part of the aircraft.
Tyre wear does release particulate matter, but it's mostly heavy, large particles that end up on the road and get washed away by weather.

With the exception of tunnels, where heavy particles are constantly being churned up from the road surface and re-circulated into the air, tyre and brake wear is a relatively minor contributor to urban air pollution.
Yeah shortly after 1900 we got the national park movement and more state forests and wildlife reserves started getting set up. Conservation was not a thing in the 1800s. It became one in the 20th century.
I'm afraid I don't. Sure there's abuse of the flagging system; there's abuse of everything. But HN's system as a whole (consisting of community, moderators, and software) has countervailing mechanisms for that and other abuses. The example you raised, of threads about women and gender issues, shows this very much, since those not only do not "always get flagged" as you claimed, but just the opposite: it is one of the more prominent topics on HN, as I've explained.

Beyond that, I'm not sure what your point is, other than to complain about downvotes and flags, which is a discussion that gets increasingly repetitive and tedious, which is no doubt why the posts attracted further downvotes and flags.

For sure it sucks to see one's comments downvoted or flagged. The best response to this is to reflect on what in your comment might have led to that. Usually it's not so hard to see this if you're willing to look objectively. If you do see something, that's good learning for next time. If you don't, chalk it up to the quirks of other users and move on—it's priced in for everybody, and focusing on it further (e.g. by demanding reasons) is a poor use of energy and an especially poor direction for further discussion.
Tell HN: DDG vs. Bing vs. Google – Testing Ads UI
Recent discussion about how every Google result now looks like an Ad:
https://news.ycombinator.com/item?id=22107823

I decided to compare Ads UIs between DDG, Bing and Google.
Setup: Chrome incognito, Mac
Query: "slack"
Results: https://imgur.com/a/oi6rEZy

Summary:
- For all 3 of them, Ads look just like Search results
- DDG and Google have slightly more noticeable Ad badge than Bing
- All 3 of them had exactly one ad (from Slack) at the top
- All 3 of them have slack.com as the top Search result

I repeated my test with a few other queries ("basecamp", "sonos", "credit karma", "robinhood") and the observations were generally the same: ads on top, indistinguishable from the Search results, followed by the expected result at the first position in Search results.

Disclaimer: Hold a lot of GOOG!
So you give the example of Britain plundering India. Explain to me why Indians in America are the most successful ethnic group in the country then, at almost twice the median income of white people?

https://en.wikipedia.org/wiki/List_of_ethnic_groups_in_the_U...

By your logic of white "holy ground" whites should obviously be at the top of the list, no? Instead Indians and East Asians are.
I'm using KDE on Arch Linux for about a month now (tried KDE for the first time) and I'm loving it. Will start contributing to KDE soon :)
> I feel like most of the documentation is meant to refresh the memories of people who have been developing apps for years; they're extremely beginner-hostile.

Yeah, really agree with that; I'm not sure about the state of Google, but the word 'beginner-hostile' is really an exact state of Apple's documentation (well I'm touching AppKit not UIKit, so that's a factor too but...).

Coming from a web background, almost every web framework had a starting point from the documentation or at least some concept documents: Apple's documentation is almost non-existent. The best documentation I could find was the archived ones from early 2010s, and those were not really helpful at all.

I did know Apple's dev experience isn't really great... but what I did not know was that learning Apple's APIs/conventions means watching three and four WWDC videos that briefly touch the API for about two or three minutes, learning two languages together(Swift & Objective-C -- which actually wasn't really that awful for me b.c. I already knew much about ObjC & message passing due to my interest in various (elegant) PLs), & searching for other people's personal projects from GitHub.

Seriously Apple, improve your documentation. It's just plain awful.
Dependent types are not just useful for proving correctness properties, and in fact I think dependent types in Haskell are not really intended to prove really complex properties, like the full functional correctness of a compiler. Hence, I think the use of Coq or Agda proofs as an example of impracticality is a strawman argument. You might need a research team and several years to show the correctness of an operating system in Coq. You do not need that to have type-safe database access or statically checked matrix sizes. Not all non-research uses of dependent types are impractical.

You could use many of the same arguments you’re making against dependent types against most programming language features. Why should a language have generics? Or first-class functions? Or even any kind of static typing whatsoever? Should Java not have added lambdas because it already had anonymous inner classes? You can clearly get by just fine in a lot of business applications without some of these features.

I think we should rather be discussing whether dependent types are useful for relatively simple applications, like providing type-safe database access or REST APIs in a library, rather than looking at them as tools for proving functional correctness. It’s not so clear that dependent types are too complex a solution there, especially if you look at a library like Servant, which already uses some advanced type system features, and which is actually a really practical library that is probably used in production applications as well. A library like Servant might be able to expressed more clearly with dependent types than with a hodgepodge of type system extensions. I think that wanting type-safe REST API access is already an order of magnitude more practical than model checking kernel code.
I've been getting ebooks from my library for at least three years. Your library probably uses the Libby app (from Overdrive) which makes searching and checking out ebooks and audiobooks a snap.

I'm a cheapo, so I'm always looking for ebook deals. Waiting a couple months to buy a new expensive book I'm interested in (for free) is not a problem for me.