skysight-inc/HackerNews huggingface dataset:
I assumed 22 kb (compressed) font size. That's the average of the top 10 on their list. (Roboto is 35kb uncompressed for me, not 170kb).
ctypes does not parse C headers and doesn't know about enums or function parameter types — only that they have a symbol in the .dynsym section of a .so.

Maybe you're thinking of cffi? Cffi does basically what this blog post covers, except without D. It requires a C compiler at some stage in the process, but you can pregenerate during 'build' phase and ship a header snapshot to avoid requiring the C compiler at runtime.
Saw a post about them a few weeks back and was interested in how they support independent bookstores so I thought, why not?
Honestly, I think GDPR was way better than I feared. They fined literally no one and we all got access to our data. It created a great interoperability situation. I am quite happy with it because they essentially do not enforce but everyone abides by it.

Nice! I was entirely wrong about what I thought would happen. If I were starting up I'd probably ignore building the entire framework to start with and deal with it when I have to.
I have been using the macOS menu bar application for a while [1].

There used to be a page [2] linking to it, but it seems they deleted it.

Surprisingly, the app is fully native [3] and that’s why I keep it around.

Here is a screenshot [4] in case anyone is curious to see how it looks.

[1] https://s3-eu-west-1.amazonaws.com/poolside-fm/HeyThereHotSt...

[2] https://poolside.fm/mac/

[3] https://pastebin.com/raw/9j45WN00

[4] https://i.imgur.com/k0Ahk6h.png
6 months in and $10k ARR: My biggest mistakes (so far)
How to use numbers in technical documents (2016)
ctypes allows you to trivially mistype C objects, send the wrong types and number of arguments to C functions, etc. Cffi just imports C headers and gives you more or less what TFA illustrates (without D).
Yeah mine do that, you can see it in slo-mo video mode.
The colour under UV immediately brought to mind the space LEGO sets I enjoyed as a kid in the early 90s: https://lego.fandom.com/wiki/6923_Particle_Ionizer

I wonder if uranium glass was actually the inspiration for the neon green elements in these pieces?
I was reminded of this article, and how sometimes you really can't do anything but regard situations like this as an anthropologist. https://www.nytimes.com/2019/04/05/smarter-living/how-to-dea...
Yeah, Comey did say in 2017 that they could only get CrowdStrike to hand over their analysis, and never got direct access to the machines.

https://www.washingtonpost.com/news/post-politics/wp/2017/03...

But I can't find anything about physical destruction, CrowdStrike claims to only have ever had images of the systems.

https://www.crowdstrike.com/blog/bears-midst-intrusion-democ...

In 2018, the DNC said “The FBI was given images of servers, forensic copies, as well as a host of other forensic information we collected from our systems.”

https://www.thedailybeast.com/trumps-missing-dnc-server-is-n...
Agreed, test environments exist for a reason, if you don’t trust your test environment to accurately replicate prod then you need to clean that up.
And you still can't get ECC in a laptop that isn't a $4500 boat-anchor.

Personally, I use a T480 because:

- it has dual batteries that really last 9 hours

- it's repairable, and the manufacturer (Flex (Flextronics) actually) repairs it in Memphis, TN for US customers, although it can take weeks or months to do so. (It killed itself, the USB-C AC adapter and a DC travel adapter recently, but they fixed it... before sending it in, I didn't see any physical damage (burns or pits) to chips under magnification, but it must've killed the power circuitry internally.)

- it works as a hackintosh by only changing the WiFi module and adding an antenna.

- it does Linux, FreeBSD, macOS and Windows all just fine

- RAM and 2.5" HDD bay are upgradable

Sadly, the T490 did away with dual batteries and follows the poor example of Apple.
>> a smaller image often reduces the potential attack surface because vulnerable things just aren't there

By the way, the article proposes blind download of artifacts from someplace on the internet, on every build. Not only that can cripple your builds when the source is down (which happens all the time), it can (and that has happened) send you arbitrary infected crap instead of what you wanted.
Send and Open Confidential Emails
This D approach is essentially cffi. With another compiler thrown in for fun.
I thought I'd try it out while my usual phone's being repaired (plus I'm sceptical it can even be repaired, so that two weeks might turn into four if a replacement isn't forthcoming) - since Android has its issues too.

But yeah, I don't think it's for me. It may be a step forward on first-party privacy, but it's two steps back on third-party. And 20 steps back on 'platform freedom', no changing defaults, no file access for running apps like Syncthing, extremely limited customisation of the home screen (I like a simple alphabetical list of apps, nope, can't have that) or 'control centre' (not possible to put hotspot toggle there? Come on...) etc.

Plus fonts and UI elements feel massive, on the lowest text size. The Slack 'sidebar' takes up almost the full width, and about five channel names fill the height. (On an SE. Larger models of course have more space, but it's the size of things that irritates me, that presumably wouldn't change, there's just be a few more of them.)
In what sense does ctypes not require writing glue code?
Orange man bad...
Rust based font tools? Do you mean local font manipulation type scripts or some sort of web service?
Interestingly, in 2013 both credit card minimums (up to a maximum of $10) and surcharges (up to a maximum of 4%) became legally federally, although there are 10 states that still prohibit surcharges (including New York, California, and Texas).

So seems like $0.35 is allowable on any transaction of $8.75 or more.

[1] https://www.thebalance.com/credit-card-surcharges-315423
Isn't this normal? I mean after you break in keeping a low profile and staying undetected for as long as possible sounds like a no brainer to me. I wouldn't be surprised if some APTs were inside some "worst" companies for even 2 years at a time.

Edit: from the Wikipedia page on Advanced Persistent Threats:

> The median "dwell-time", the time an APT attack goes undetected, differs widely between regions. FireEye reports the mean dwell-time for 2018 in the Americas is 71 days, EMEA is 177 days and APAC is 204 days.[4] This allows attackers a significant amount of time to go through the attack cycle, propagate and achieve their objective.
Can you talk a little bit about how you are finding book names in comments and how you are making your ranking?
> very annoying since you couldn't preemptively replace certs

You would sign your request for a new cert with the private key of your old cert, proving you are the same person, which would suppress the alert.

Obviously the key provisioning tooling would do that automatically, so you needn't do it manually.
You do care, you solve their problems.

You don’t just try to solve ALL the problems of the organization, which you were not hired to do.

If you were actually tasked to do that, you would want much more compensation.
Was Dylan created by the ATG?
I haven't put any effort into adding explanations of anything, but looking at the one titled "Basic Beats" reminded me of this little thing I built a while back for playing around with rhythms in a similar circular way: https://michaelmior.github.io/rhythm-wheel/
Would you, in ~10 years, prefer a new standard (Signal-Mail, RFC 424242) and have "secure" (for a given definable threat model) standard called email that obsoletes the above RFCs and has 80% market share over current email standards...

...or have 30 different walled-garden, not-interoperable, partially-working (for a given ergonomic use case) apps?

Considering that much of present day communication happens on async on email (including important conversations inside and between banks, governments, land-lords and tenants....), I'd say its something that should happen. And if we can convince the right people, it will happen. We'll live for the next ~5 years in a state of hell (just like we do when we upgrade TLS protocols), and then for the majority of people, things will get better.

My 2c.
What's the best way to pitch Pioneer?
In addition to the other workarounds suggested, you can store the numbers in two columns - one for the coefficient and one for the power of ten, negated. For instance 2.50 becomes 250 and 2, meaning 250 x 10 ^ -2. You can then do math at the application level, or even in SQLite with user-defined functions or even with recursive CTEs if you’re a bit of a masochist.
Assange would have been asked to provide evidence the Russian government was not the source of DNC emails, and likely to turn over his source.
Inflating job placement stats and using brand new students to write curriculum is shady, but I don't get why the ISA is controversial. The incentives between student and school are still aligned and better than those of traditional higher ed. If the students don't get jobs, no one buys the ISA, the school goes under.
I keep seeing people say it's debunked but their source for that is a news article that looks no different than my sources that doesn't provide convincing evidence in my opinion. Maybe you should continue your research on your debunking sources and think who pushed that theory onto you
Yes, testing in production can be dangerous and Stripe purposefully designed as many testing scenarios we could think of to avoid that (https://stripe.com/docs/testing).
Automating Everything with Python
I've been looking on and off for a few months to see what the remote market is like. It's rare to find senior dev jobs paying >130k and even rarer to find local jobs that let you be remote a fixed number of days a week. It seems at least around here you would need to take a good pay cut to have a remote option.
Fundamental symmetry tested using antihydrogen
I used to run a company card for testing Stripe on prod, and then just processed a refund afterward. It was mildly inconvenient, and eventually I just stopped because there was never actually a difference between their staging and prod behaviour.
All of these devices have been reverse-engineered and packet sniffed to death, and no one has ever produced any evidence that they're doing anything other than what it says on the box.

While I do appreciate that the cited sources in their paper, I would have appreciated actual information security papers rather than mainstream media articles.
Small aircraft can be surprisingly affordable; many small used GA aircraft cost about the same as a nice car does new and they generally don't depreciate very quickly -- there are lots of perfectly safe small aircraft from the 1960s and 70s still flying.

You'd be surprised how many middle and upper middle class americans fly.
Stripe is Visa.

Visa is one of Stripe's largest shareholders.
https://www.reddit.com/r/printSF/ is a sub for SciFi, and has occasional compilation and recommendation threads, and a wiki with some more links in it.
From the point of the student, the TL quality being low is a huge minus, plus the fact that they are also busy means that you don't get that much help.

From the point of the business, I can see the trade off. Running a cheap shop is essential for the kind of deal they offer: A time-capped value-capped full-risk sharing agreement.

Lambda's model could have much, much higher quality if there were a less restraining cap on the ISA, but that will affect sign-ups and might increase the trouble of the people that fall-off the track.

I dont know what is the best positioning of price-quality, but I'm sure many people would prefer to pay more through ISA to have a higher success rate and stronger guidance.

That said, Lambda is really just 3 years old, they need to figure out a million things.
Somebody has had a really bad weekend in a muddy field apparently. Also real LARPers don't want sharp swords, the whole point is that it's not actually dangerous - no edges, no points, nobody is supposed to get actually hurt.

I'm more optimistic than this blog post allows for. I see email's trajectory over my lifetime and it looks like incremental improvements really do work, they just aren't fast. And I think just as Signal lacks an "Encrypt" button because that's the wrong UX (everything is always encrypted, no need for a button) that's email's future too. You aren't going to install "Really good privacy" and have encrypted email. Just one day perhaps many years from now you'll be debugging a weird problem and you'll discover that without ever noticing it your email is actually encrypted end-to-end and you're not actually sure when then started happening or how.
Maybe now you can start charging us properly for debit card transactions, instead of pocketing the difference.

My company is now evaluating options to move off Stripe because of this fiasco and how it was communicated to customers, along with the complete lack of explanation of whether this impacted the % fee or just the flat $ fee.
Windows 10 has support as well.
Don't know if the site is legit, however you can literally go to Egypt and see the Giza Pyramid in person. If you know what to look for, it can be seen from ground level.

It's extremely slight. And, again, not an occult or religious feature, just a quirk of its design.
Even ignoring biodiesel, vegetable oils are in high demand for lubrication, and electric motors use less. Hopefully the switch away from heat engines will decrease overall demand for lubricants and reduce industrial vegetable oil consumption.
It's worth reading the paper, which calls out its own limitations:

* It is unknown if ACE2 is the only important receptor
* Study doesn't actually count the amount of ACE2 receptors, just the amount of RNA expression (ok, you can probably hand wave this limitation away)
* Study also shows a difference of expression ratio of 1.6% vs 0.4% in males vs females (n=2 vs n=6)
* There was a SINGLE asian male in the data set

Given these limitations of the original paper, at the very least, I would say that you should shy away from definitive statements until stronger evidence appears.

The top comment on biorxiv ran with some of the ideas from the paper, and looked at a more general and larger data set and found no statistically significant difference between Asian and Caucasian lung tissue samples in terms of ACE2 expression when measured in bulk (see https://uploads.disquscdn.com/images/5cb4b2c5e1ae3cf8454e870...)

That said, it's certainly a cool paper.
dimensions, stacking thin-film
devices in the vertical direction with a 1/1 film/airgap ratio can lead to a
practical volumetric power density of more than 1 kW m−3 (Supplemen-
tary Fig. 24), potentially outperforming solar cells,
Assange's Lawyer Admits He Offered Russia Exoneration Quid Pro Quo, WH Ignored
I don't think child porn can be compared to hard core racism. Child porn both directly victimizes a real person (and specific one at that), and can't really be considered a political ideology. It's a huge stretch to argue otherwise. I don't think some of the bans on social media are hardcore racists. Even some of the really bad people that have gotten booted don't really fit that bill.

Also, while I don't necessarily see bans that I think are harmful, I'm not sure I agree with the criteria used. There are several that appear to be judgement calls that someone's "bad news", and while mostly right, the specific things they've done to earn a ban haven't always been outside the norms for the platform. You can find plenty of really toxic stuff on twitter and reddit, specifically. It doesn't seem to be applied very fairly.

I think you're exaggerating and your comment is a bit sensationalist.
It's not disingenuous; I think an earlier draft had it. This came down from 4000 words. I'll try to ask my editor to add this as a correction but things are pretty hectic. It's a fairly minor omission in my opinion, but I understand disagreeing.
I don't know what Stripe's cost to merchants is.

As far as Visa/MC and the banks? The banks get something like 9/10 of that portion off the top; Visa/MC get about 1/10th.
He has a lot of other stuff too, but I agree, he has probably made the largest and most in-depth collection of LED lighting videos on YouTube. Unlike a lot of other review videos, he doesn't just take the lamps out of the box, plug them in, turn them on and make some comments; he takes them apart and scrutinises them in a lot of detail.
Wow, his grading policy is garbage.
Just keep at it. The one thing that Lambda does best is the constant drilling of practicing. That method of learning is second to none.
Thanks for reminding me about this, just taking a quick look at it now. Quick question: do you know why it uses methods like db.InsertWithInt32Identity(product) rather than db.InsertWithIdentity<int>(product) or similar?
DIY.com is the website for B&Q, the largest UK retailer of diy tools, turnover £4bn (owned by Kingfisher).
It’s not reasonable because the cost which the fee is covering is not the cost to process the transaction.

It’s three things, in order of their share of the total cost;

1) Rewards programs

2) Fraud risk

3) Interest expense

The rewards are negated, because a refunded transaction earns no points. The fraud risk is zero, because the merchant has returned the funds. This leaves only a portion of the interest expense, assuming the transaction balance was even paid into the merchant account at that point, but then the refund acts to reduce the card balance so that might even cancel out too.

Basically it’s justifiable to hold into the flat fee (e.g. $0.20) but to hold onto the 3% is an absolute scam.
Because you can, and because lots of people are doing it.
I believe they're the same book, the latter being a later edition.

(I've only read the former though)
Very cool tool! Thanks a lot for linking it. I wonder what sort of sequencer you would build.
We use Adyen (we deal with international customers) and they've got the same rule - no test cards in production. I've never heard of a payment provider allowing test cards in prod.
Did humans truly domesticate dogs?
I'm just trying to find a way to stay alive. I don't understand why I get so much hate for that. I can't take care of the oppression other minorities face. I can't even take care of myself.
Transit telescopes are more accurately aligned but a lot smaller https://en.wikipedia.org/wiki/Meridian_circle
> The third clause says it applies to "a place where Member State law applies by virtue of public international law", but I don't think this applies to Indonesia?

IANAL, but I think that is primarily a reference to member state embassies, consulates, overseas military bases, ships having member state flag in international waters, aircraft registered in a member state, and spacecraft operated by a member state. So GDPR would apply to data kept in a member state embassy/consulate in Indonesia.

In practice, a lot of the work embassies/consulates do may fall into one of the exemptions from the GDPR – national security, etc. But embassies/consulates often also do other stuff, like host conferences, workshops, dinner parties, etc. GDPR may well apply to data collected for those purposes.
The 'ancestral diet' doesn't make sense and relies on lazy stereotypes
This is a fine list. I think the algos are probably reasonable and so forth.

The reason I can say that is because it reads pretty much like a greatest hits of fantasy fiction list.

It would be interesting to normalize it in various ways:

Most read book per unit time that has passed since it was released. (Contrast NK Jemisen’s work from last year with Martins work from the 90s with Tolkien etc)

Most commonly read book that is not on the amazon list. (Most surprising book on the list)

Most widely read book that doesn’t have a tv show or movie.

And perhaps other smart variations that you and other readers might think of.
Are processing fees really going up? As a longtime brick-and-mortar retailer, I am used to fees going up and then changing to a new processor to get competitive rates again. You just go back and forth between the different providers every few years. They give you a lower rate and then slowly raise the rates because they know it's a pita to switch.

As a SaaS founders, I use Stripe because it was easy to get reliable subscriptions up and running. I have no returns, so this particular policy doesn't impact me. However I know that I am still overpaying for convenience and it will likely be time to make a change this year or next.

Maybe when Stripe will drop rates once they start experiencing the same churn other processors deal with.
As far as I know, this is true.
There is reason not to do so: Ohm's law.

Low voltage requires low resistance to transmit reasonable current. The only way to get this is with substantially thicker wiring.

5V DC isn't a plausible voltage to send the distance from a fusebox to light installations. One could do 48V and step it down at the site, but there's not much in the way of gains to be had. AC/DC circuits are quite efficient as-is.
Also basically offered us a $1000 giftcard to walmart to fix the income inequality created by oligopolies.
Is that even possible? I though debit cards entered using purely digits (vs pin) have to be run through the credit card network.

Is there a provider who provides debit card online processing?
https://twitter.com/noisetheorem/status/1230144240996450306
We haven't put skids on the bottom of the boats in a really long time either. Doesn't make the stories any less interesting though.

https://www.amazon.com/Blind-Mans-Bluff-Submarine-Espionage/...
Russia’s Dr. Seuss
Tesco and M&S likely to have soya linked to deforestation in supply chains(2019)
Can't win my own reinforcement learning tic-tac-toe agent
They're talking about decimal numbers as a different thing from floating point numbers:

https://en.wikipedia.org/wiki/Decimal#Decimal_computation
Thanks for the feedback, that's not my intention. We're definitely not claiming we're the only innovation in 100 years.

However the environment those companies started in is gone. Insurers went in and out of business all the time in the 1920s and 30s, it's the survivors who are left (I think it really is amazing how many of the top insurers started in the 20s and 30s!). It's good there's more regulation and safety for insureds.

It does mean though we have to work in the current framework to get things done - the companies of the 1920s can't be started the same way in the 2020s.
And to expand on this a little:

Users don't care. They'll use whatever is given to them, as long as there is no friction. That's why PGP-encrypted email never took off, except as something that tptacek likes to argue against.

Concretely, we (the security-conscious community) need to convince people (engineers, executives, managers) at Google, Microsoft, Oracle, countless other companies, and a myriad of open source communities that this is something important to build, invest, and collaborate on.

The first part is messaging. Then comes networking, convincing individuals in private. Then comes public collaboration. Proof of concepts, test networks, RFCs, production apps.

But until there's a need and money, this won't happen. And it'll be people arguing past each other on the internet.
Awesome website, inspired me to build on Arweave again
The power of lock in. They know this from analytics.
It's substantially better than nothing, is it not? Do you disagree that it requires more effort on the part of a malicious actor when emails are sent from on ostensibly encrypted email service?

Do your house doors not have locks because locks are easy to pick?

Further, wouldn't encrypted email, even in current implementation, be much more effective in keeping secrets if everyone used it? You can do much less with metadata than with email contents, and the fact that leaks of plaintext archives may happen eventually doesn't mean that all archives will be leaked.

The article has a valid point but shaming people by accusing them of larping is IMO irresponsible.