skysight-inc/HackerNews huggingface dataset:
> This was in the capital of one of the poorest countries in Europe, but it was still one of the safest places I've ever been.

Obviously if you put all people in jail they will be very safe there. But then you have less people working and producing more useful stuff than rotting in jail.

The best example I give of this trade off between freedom and safety is that of women in saudi arabia. They have the least amount of sexual violence in the world.
Why does it need to be in the Bay Area? Or any expensive city for that matter? An EBITDA of $2.5mm in the Rust belt for instance is more than successful and would retain and satisfy top talent in the area.

Does the biggest compensation package even attract the best talent? Or does it just attract the obsessively competitive to burn out in style?
The next time I update (wifi) routers I'm responsible for, I think I'm going to go fully Internet Only DMZ, and Wireguard 'VPN' for entry to the LAN.
More Manufacturers Bet on Simulation Software
Looking at the overflowing hospitals in Wuhan, I'm preparing for the possibility of being mildly sick at home and not being able to get a bed in the hospital. The best hope is then that somehow we reduce chance of cross-infection inside the family. For that I got:

- Oxygen/HR meter ($15 @ Amazon) to monitor when oxygenation drops real low so that we know we have to get to ER and staying at home is suicidal.

- Some medical gloves, some masks (not hoarding - I think we have ~50 cheap masks from the time Bay Area was full of smoke).

- A ton of tissues and toilet paper.

- UV lamps to disinfect rooms.

- Basic staple foods to last for quite a while.

It's quite likely I won't be able to prevent cross-infection, but at least I've tried.
I think the SAT solver he wrote recently is several times larger, but otherwise I agree.
You got me! Fair-and-square.
You might be able to use UV-C light sterilization. Strangely, these types of lights are all suddenly sold out on amazon, wonder why... https://www.amazon.com/gp/product/B07W1PHS9P/ref=ppx_yo_dt_b...
I've been doing that but what happens when you released your germs into your elbow/sleeve? It wouldn't get cleaned or sanitized until you wash your clothes. So I think if you are near a sink, it would probably be better to cover nose and mouth with hand and then clean right away. But yeah, I usually do the vampire method when I'm on the go.
Since the system is both aggressive and intentionally opaque, it doesn't much matter to me whether the positives are false or true. If Facebook would like people not to feel threatened by it, then they could either not do it or make it much clearer what's going on.
Ok, but optimizing for what?
It's definitely a different paradigm. A couple of notes on keyboarding though:

- VS Code has wonderful support for multiple cursors (see https://spin.atomicobject.com/2019/04/04/vscode-multiple-cur... for an example)

- VSC has a lot of the same ideas as Emacs, but they're called different things and the keystrokes are different. Cmd-P "terlogremo" <enter> opens the file "terraform/logging/remote_state.tf" in the current project. Ctrl-g 20 <enter> goes to line 20 in the current file.

- VSC has a lot of remappable key bindings. Check out https://code.visualstudio.com/docs/getstarted/keybindings to get started.

Again, Emacs is wonderful. I'm not going to try to talk anyone out of it. But I made myself use VS Code for a week and to adapt to its way of doing things, just as an experiment. By the end of the week, I was 90% as productive as with Emacs and I decided to stick it out. By the end of the second, I was more productive. It's just a really, really good fit for my own personal mental model of how code should be edited.
A couple ways:

One you implement validation functions [1] on user databases to control what kind of data can be inserted into couch. These functions can only be changed by database admins, not users, so can act as a security mechanism controlling what goes in.

As mentioned by others you can also implement a proxy. This doesn't have to interfere with sync functionality, you just have to make sure you proxy all the endpoints in the replication protocol [2]. Envoy [3] is one such proxy that essentially applies document level permissions to a CouchDB database without interfering with sync.

If the goal is just to limit document size, or throttle clients trying to hammer the API, this doesn't even have to be a custom proxy, and reverse proxy with the needed control knobs (such as NGINX) will do. You can of course combine this with validation functions, using validations to ensure the everything that comes in is the right "shape" and using NGINX and it's ilk to apply throttling and sane request limits.

At scale there's a decent chance you want a proxy in front of your Couch instance anyway, since Couch is truly multi-master, meaning you probably want to balance your clients across all your nodes anyway.

[1] https://docs.couchdb.org/en/stable/ddocs/ddocs.html#validate...
[2] https://docs.couchdb.org/en/stable/replication/protocol.html...
[3] https://github.com/cloudant-labs/envoy
You would need a GOG account and a paypal/credit card where with a torrent you just go to your favorite site and download the game.
A thread from 2017: https://news.ycombinator.com/item?id=13778353

(Such links are for the curious. Reposts are ok after about a year: https://news.ycombinator.com/newsfaq.html)
>I suspect that if somebody were to invent a good anonymous micropayment system...

They'd also be guilty of of violating AML, KYC, and other money transfer regulations. It would get shut down faster than you can say "Wait! Don't do that!"
New Chip Brings Ultra-Low Power Wi-Fi Connectivity to IoT Devices
> I'm afraid that the hardline "we need to have solved this emissions problem in 1X years" rhetoric is counterproductive. It asks too much and will prompt fatalism and/or cynicism when the deadline has passed

This is a risk yes, media have a big part to play here to try and build on positive inertia. A good example of the opposite of this is Australia in ~2005 vs ~2015 we went from enough political will to create a carbon tax (that was hugely successful is dropping our emissions in a short period of time) to removing it and likely never going back. IMO this was largely due to medias constant fighting in this direction (to serve those who were lobbying hard in this direction).

The hardline approach does seem to have wakened a larger group of people to speak out and support trying to reduce how much worse the climate crisis will get in the coming decades. That combined with more frequent and intense natural disasters might just keep things moving. However, I've learnt never to be surprised by our collective short term memory when counter narratives are constantly bombarding us through media channels.
Sure, some open-source can be commercial and run their own hosted versions like Gitlab and Sentry. They can be self-hosted by anyone on their own servers too.
People have said for a long time: "Chess is just pattern matching"
Real Programmers is a joke meme.
Serious Vulnerability Deep Inside Your Wi-Fi Encryption (KR00K) [pdf]
1999 and 2001 are only 2 years apart though...
Which image board?
Some of this can also be a totally legitimate result of putting dealers short gamma. When options dealers are short contracts, their delta hedging activity (ie, their effort to reduce first-order risk to the share price by buying or selling a commensurate amount of stock) contributes to the momentum of a large move, because dealers' hedges chase the stock. If this explanation is unsatisfactory, look up "short gamma" on google.

In other words, demand for volatility via buying options can actually beget volatility in the movement of the stock price.
If it's easy enough to start an ETF, maybe someone should start $WSB that yolos some % of the total fund into far OTM options on meme stocks every day.
I think Oberon would be a better candidate for this than C. You could get a tiny and extremely fast compiler for a full-featured programming language.
Novell had NetWare and IPX.
Apple had AppleTalk.
There was also Token ring...
Certain items? everything is influenced by petroleum, whether transportation, manufacturing or fertilization. Our clothes are made from it. Machines are powered and lubricated by it. Food is cooled and packaged with it. I wouldn't be too hopeful that the cost of anything wouldn't be affected, unless those goods have externality costs excluded, in which case you aren't really pricing in externalities, you're just running another UBI scheme.
>Steam (convenience),

There are some downsides with Steam, most annoying is I can't have Steam open on my machine and play or install something while my son is laying some game on a different PC(same home/IP)
If I use backend I can create all validation logic in application server. But in this case no automatic synchronisation.

One of the major selling point of couchdb is replication protocol for client-server data syncing. When you design product with posgress you don't allow to execute raw sql queries from clients without any application server. But looks like it is recommended way to update data in couchdb world if you want to have synchronisation. I can't understand how can this architecture be secure?
Typically the "text-sm text-gray-700" would be a one-off styling while I'm developing a page or a component, not necessarily something that will be repeated a hundred times.

If it turns out that later down the line I realize that "every card should have that size and color for the card title", then I'll pull it out to a separate class or part of a partial or something like that.

The idea being at that point then I have more context around when and how that particular section of a component should be displayed, so I have more context about what I should name the class (i.e. "card-subtitle").

I feel like the documentation explains it fairly well if you're interested in reading more about it:

https://tailwindcss.com/docs/extracting-components#extractin...
Are you scraping Google's SERPs or do you pay them for API access? If it's API, how do you plan to monetize?
It doesn’t have to be Chromium. It just needs to be a browser that can be linked and launched as an app.
Why do some Chinese steal IP from other nations?
It seems that one major reason is because they are communist and they don't believe in private property. They believe that no one has a right to have their own property and so everything must be shared for the good of all. So when "evil" American companies try to protect their IP, the Chinese view themselves as being the good guy by opening up that knowledge so that anyone can use it. Pretty interesting thing that I haven't heard talked about very much. Here are some more thoughts on this:

https://cs.stanford.edu/people/eroberts/cs201/projects/communism-computing-china/intelproperty.html

Anyone here have any other perspectives or more to share on this topic?
I'm looking into self-hosting compilers, is there a good link for Oberons code that achieves this? Or you just are mentioning that Oberon would probably be able to if one were implemented?
Are you also scared of twins?
That's fascinating - you would think they would have some sort of access to sheep, alpaca, goats, or something that could provide wool. I went down a bit of a rabbit hole and found Japan was still one of the largest importers of wool if not the largest) in the world until this paper was written in the late 1970's. Their wool has historically come from Australia.

http://press-files.anu.edu.au/downloads/press/n2207/pdf/ch12...
I wonder how this is supposed to be used:

import routine from "worker-routine";

This won't work in the browser, right? Is it supposed to be processed through a server side compilation step?
If one person searched for the other by name (you know, just to see if they're on FB and what stuff is publicly shared), then they may appear in PYMK.
> more lethal than flu/MERS/SARS

WHO reports a 34% fatality rate for MERS, while at present it is around 2.4% for COVID-19 [2]. So it would be helpful if you provide sources when throwing down comments like this. I'll admit it's more contagious, as they state below, but again, most US cases are asymptomatic.

1 - https://www.who.int/emergencies/mers-cov/en/

2 - http://www.cidrap.umn.edu/news-perspective/2020/02/study-720...
It's amusing to consider the common wisdom that restaurants are a tough, low margin business yet make up so many of the eldest companies. Even if you exceed some threshold to make it to maturity, you'd think the statistics on survival would catch up with you eventually.
>most diagnosed cases in the US, are not actually showing any symptoms

Where did you hear this? Why would these people even be tested, much less diagnosed, if they are not showing symptoms?
"Grammar". Sorry!
To be fair, full human cloning is a thing that has no practical purpose IMO. Rich people can't beat death with clones because they don't inherit their memories, they would have to be raised like normal babies, and not-rich people can still make them the fun old cheap way.

The only practical purpose I can see of human cloning would be transplants, so we'd better learn to grow organs instead of people.
In Firefox, just click on "Reader mode" at the end of the address bar.
An HTTPS URL has several parts, let's look at them in turn from left to right of a URL https://userinfo@someserver.example:1234/foo/search?term=goo...

The scheme will always be HTTPS and that isn't sent anywhere but it's implied.

The userinfo (often empty) is encrypted and delivered to the server. This could be login credentials but in the modern web it's largely unused.

The hostname someserver.example is delivered to the server unencrypted using SNI (Server Name Indication) before encryption switches on. This is used to enable virtual hosting - the server may behave differently depending on which name you want. The Encrypted SNI work (eSNI) at the TLS Working Group intends to standardise a way to encrypt this information - note that if your IP address only serves one single web site the hostname doesn't give much extra away so eSNI is mostly interested to bulk hosts, the cloud and so on.

The port 1234 is not delivered anywhere but it's implied since the connection will use this TCP port.

The path /foo/search is encrypted, this is the part NextDNS uses to distinguish one customer from another if you use their custom URLs rather than the built-in default in Firefox.

The query parameters ?term=goose are encrypted

The fragment identifier #egg is not sent to the server this is used only locally in the browser engine itself.

The reason you shouldn't design web sites to use GET for secrets is that URL ends up in the user's URL bar and gets bookmarked or shared with friends.
Not necessarily. There is going to be some education involving how to optimally treat it, and/or vaccines (in the longer run).
Rian Johnson: Apple Bans Bad Guys from Using iPhones in Movies
Wow, just today I was creating css lib for my project with similar naming and behaviour rules. Thanks for showing it out, I will check (eventually create) sass version of it. In my personal opinion, for simple projects, this is all what developer needs. Intuitive, extensible, low dependency and fast.
You're also walking among many, many real-life clones. They occur naturally at a rate of about 1 in 400 births.
People dismiss wsb but gambling is a big issue here in the US. This is exactly what happened during dotcom.
Sure, but the colors from Tailwind aren't determined through an algorithm like this. They are handpicked from a designer, which I feel like most design systems do as well.
I had to go to the ER for my son and it was already full of sick people for flu season. So no, you don't probably wouldn't get the care all to yourself. There were also way more masks in use than the last time I had to go.
I think games cost a lot of money to make profitable (i.e. appeal to the standards of most people).

Even if all professional game designers/programmers/artists stopped getting paid and quit, people would still make and enjoy free games, and they would probably much better than whatever generic crap is greenlight by publishers.

So I don't believe that the artistic value nor the quality of video games depends on the success video game industry, In fact I would say they are orthagonal to each other.
I'm moving money into checking from investments.
I don't think they think about it at all. My university had a strong nuclear research program and I took some classes from the professors in the field. It's clearly really hard, to the point that even PhD level intellects can only do it when they're hyperfocused on the nuts and bolts of the physics. I think even beyond that, maybe for national security reasons, people in the nuclear industry don't get outside their bubble much. I'm sure if any of them took a weekend of genuinely trying to understand why it wasn't cost-competitive they'd understand it better than me, but then they'd fall behind in their 'real' research. So they lobby for more state support without ever questioning why they need it.
Behind my two Safari windows is the text editor I use for my technical writing job: BBEdit, a native desktop app. (For coding, though, I prefer to use MacVim, a native desktop app, although I've lately been trying out a beta of the forthcoming Panic Nova, a native desktop app.) I also use Marked, a native desktop app, for Markdown previewing occasionally. Of course, I spend a lot of time in the Terminal, a native desktop app, running command line programs and shell scripts, which are not native desktop apps but are certainly native apps. When I need to run a diff or merge tool, I tend to use Kaleidoscope, a native desktop app. Because I'm in an open office, I sometimes have to resort to headphones, which I primarily use with iTunes, a native desktop app.

Now, as I finish up this response to you in Safari, a native desktop app, remind me what were you saying about native desktop apps again?
I wasnt worried about that since it is a basic proof of concept, adding that would make it ~210 lines of code.
A proper solution is either to add a third AoA sensor, or to remove MCAS altogether and let the MAX be a different aircraft type. All else is questionable.
Racism is bad.

This is bad.

Therefore, this is racism. ;D
To "loose" something is to set it free.

They really mean to ask if Joe Biden is losing his mind, not loosing it.

People may think it's petty of me, but I can't control my immediate reaction that I just can't take seriously something that makes mistakes like this.

Appearances matter, first impressions matter, if you make a bad first impression it's hard to recover, no matter how good you are. You may think the world shouldn't be like that, but it is.
Any reverse proxy can limit the the size of a document upload. Even just plain NGINX can do that. Just set the client max body size.

As for queries, it kind of depends on your model. Mango queries are pretty limited (no joins, no arbitrary filters), so it's not necessarily as easy as you think to write one that hosed performance. A client could of course write one that doesn't use an index, which may or may not be a concern.

An easy option if it is though is just don't expose the `_find` endpoint, which effectively limits your users to the map/reduce queries you've written (unless you give them admin they don't have the ability to create their own).
My guess would be that it's very easy to write down a value, but much harder to actually practice that value consistently.
Over the last few weeks, we have acquired enough food/supplies to stay isolated at our house for about 2 months (a combination of bulk rice/beans/grains, and pre-purchasing anything we use regularly which has a long expiration date). We also have medicines/toiletries/etc to last that long.

Maybe 10-12 years ago I read the book 'The Great Influenza'[1], and there are enough similarities between that outbreak and this one that we are taking it fairly seriously.

Although that book isn't perfect, it has a lot of detailed and fascinating explanation on (a) the development of scientific medicine in Europe and then the US (b) the way flu works, is transmitted, etc (c) the way that specific pandemic played out.

[1] https://www.amazon.com/Great-Influenza-Deadliest-Pandemic-Hi...
Sciter's author here.

a) Is anyone brave here to finance transition of Sciter to OpenSource? Please contact me if yes.

b) Sciter's script is a JavaScript++:

It uses JS syntax and runtime like `arr.concat(a,b)`.

Grammar and syntax was extended to better support UI cases. Like `const width = 12px;` is valid construct as Sciter has Length data type.

React and JSX are implemented natively.

function render() {
return <p>{this.greeting}</p>;
}

is a valid construct as JSX (SSX in Sciter) is a part of script grammar : https://sciter.com/developers/sciter-docs/reactor-and-ssx/
Having just gone through this process, having a clear doc to point to is invaluable. Thank you YC!
Introduction to Multi-Armed Bandits (2019)
I appreciate your comment, but I don’t really know where to start with it since it’s so far off the mark.

1. A start up would start with fewer people and less money. It would most likely be started by people who can live cheaply and/or people who have money from other sources like work or family. Founders typically don’t make anything early, but once the revenue starts rolling in, they can pay themselves and others.

2. Assuming you are referring to a business making 2.5mm, that’s plenty for a smaller team (e.g., 5). Not everyone will be a high-paid tech professional, and the founders will probably be the highest paid folks in sales and tech (at least in this structure). If you’ve got 2-3 founders growing a non-VC tech business making 2.5mm a year, and they can’t make it work, they’ve got big structural issues that they need to address.

3. Outside of the Bay Area or NYC, 10 people on 2.5 mm would be very doable.
Huh, you're right. The last time I tried this (year ago) they would throw up a "Are you a robot" page.
The article mentions that iOS 13.2 fixes the issue. If an iOS update can fix it, then I think it would just be software.
Have you worked at small companies all your life. There are teams with 50 devs in some places and shipping huge multi-hundreds of million dollars pieces of software that is in a lot of cases, legacy software. You dont get a call in deciding to work smaller with closed feedback loops all the time.

Your opinion on this strikes me as you being a junior in the software dev world.
> 1. They want anti-cheat stripped out of games so they can play games via Steam Proton, conveniently ignoring the fact that any multiplayer game that does that will be flooded and destroyed by hackers

Yes, I want them stripped out or made optional. I've had good times playing multiplayer games without built-in anti-cheat systems. These are a lazy concept in any case. Self-moderating communities are much nicer, and in any case required to save the day when anti-cheat inevitably fails to detect (let alone prevent) cheating.

> 2. They demand full support from game devs, despite only making up an absolutely tiny fraction of the customer base. They routinely make up less then 0.1% of sales (!), but cause 20%+ of support tickets[0]. No sane business in the world would sink 20% of their support budget into 0.1% of their revenue.

There are games that are rock solid on Linux. There are games that I've offered to people on a USB stick running Linux and Wine because it works better than Windows.

So here we have an anecdote from one company and one game, and automated crash reports are conflated with support requests so you can't even tell what's what. Yeah, maybe their game actually crashes a lot on Linux. Sucks for them?

This is not data.

But yeah, they'll continue to make up less than 0.1% of sales when they're not being supported.
This is so true. FireFox is terrible at spaffing private info at search engines.

Breaking DNS is madness IMHO. Its just more sites that dont work on FF.

Broken is not more secure, its just broken.