skysight-inc/HackerNews huggingface dataset:
What product features does Mastadon offer over twitter/facebook? Because unless it's something useful/significant, 99.9999% of twitters/facebook users do not care about it.
> Q: What do you think about Byte Order Marks? A: According to the Unicode Standard (v6.2, p.30): "Use of a BOM is neither required nor recommended for UTF-8". [...] Using BOMs would require all existing code to be aware of them, even in simple scenarios as file concatenation. This is unacceptable.

Then your site "UTF-8 everywhere" is misnamed, because standards-following UTF-8 can have a BOM.
It's not required or recommended, but it is possible and allowable, so you might see them and if you follow the standard you have to deal with them. It's not a matter of "this would require all existing code to handle them" - that is not hypothetical, that is the current world, to be standards-compliant all existing code does already need to be aware of them. It isn't, which means it's broken. Declaring it "unacceptable" is meaningless, except to say you're rejecting the standard and doing something incompatible and broken because it's easier.

Which is a position one can take and defend, but it's not a good position for a site claiming to be pushing for people to follow the standard. What it is, is yet another non-standard ad-hoc variant defined by what some subset of tools the authors use can/can't handle in April 2020.

> "the UTF-8 BOM exists only to manifest that this is a UTF-8 stream"

Throwing the word "only" in there doesn't make it go away. It exists as a standards-compliant way to distinguish UTF-8 from ASCII, not recommended but not forbidden.

> "A: Are you serious about not supporting all of Unicode in your software design? And, if you are going to support it anyway, how does the fact that non-BMP characters are rare practically change anything"

Well in the same way, how does the fact that UTF8+BOM is rare practically change anything? At some level you're either pushing for everyone to follow standards even if it's inconvenient because that makes life better for everyone overall, like you are with surrogate pairs and indexing, or you're creating another ad-hoc incompatible variation of UTF-8 which you prefer to the standard and trying to strong-arm everyone else into using it with threats of being incompatible with all the code which already does it wrong.

Being wary of Chesterton's Fence, presumably there's some company or system which got UTF-8+BOM added to the standard because they wanted it, or needed it.
The WaPo article is unfavorable to Amazon, puts "violated company policies" in quotes, buries the detail in the end of the article, and gives the employees quotes to rebut Amazon's policies. These kinds of superficial dismissive comments crud up the threads. You should at least read the article --- you say you didn't, due to the paywall --- before writing like this.
I don't think you understand. There is no such thing as a "self-signed" CA cert, (its one or the other). This not about money, it's about control. There are many benefits to using a self-signed SSL cert over purchasing a CA one. However, Apple and Android inherently distrust self-signed certs so you have to actually provide the cert directly to ATS/Android OS which involves bundling it within the app, (a messy process). The current industry "hack" is to use http within the app, and then re-direct to https, (which is exactly what the steam app does).
Transparency can give bad actors a way to game and workaround the system.
They opened sourced the runner[0] if you're interested in learning how it works. Understanding the internals of it may or may not help the syntax and concepts of Actions land though.

My guess is that it is unlikely to see your request for a more generalized script or Dockerfile runner realized because that (Dockerfiles) was the original implementation of Actions during the beta; they pivoted away from that to the current form.

[0] - https://github.com/actions/runner
Sure. Shitty politics in fiction still flies.
Exactly the same story, exactly the same solution. What I didn't know: my ad blocker and Buster are from the same person, good guy this raymond hill.
Renaissance Technologies - one of the "most secretive and successful" hedge funds in the world has a pretty bare bones site too
https://www.rentec.com/
This reminds me of the complex privacy controls that Facebook had that ended up making me delete my account. These things should be secure by default.
What's the best way to keep an eye out for that TR? Periodically checking http://www.open-std.org/jtc1/sc22/wg14/ ?

I can't ever tell if I'm looking in the right place. :)
Yeah that was a profoundly underwhelming article, especially for an "expert". You would think Maria and Matt would set a higher standard for contributors.
I don't know if I agree. Overflow is like uninitialized memory, it's a bug almost 100% of the time, and cases where it is tolerated or intended to occur are the exception.

I'd rather have a special type with defined behavior. That's actually what a lot of shops do anyways, and there are some niche compilers that support types with defined overflow (ADI's fractional types on their Blackfin tool chain, for example). It's just annoying to do in C, this is one of those cases where operator overloading in C++ is really beneficial.
Amazon is very clear when you're hired that you're not allowed to represent the company or it's positions on social media or anywhere publicly without getting permission.

You can agree or disagree with that policy, but it's not new. Source: first heard of this policy when I was hired at Amazon in 2007.
Yes, I considered it, but that's how unfinished draft blog posts end up on HN ;). We'll probably just stop using Pages and deploy to S3 instead - it's a fairly minimal change.
Latin alphabet but with some accents, and the eth/thorn/yogh/wynn/ash (ð/þ/Ȝ/ƿ/æ) characters that English used to have, and Icelandic still has some of.

[1] http://www.csun.edu/~sk36711/WWW/KAG/ch2.html

I'm sure everyone will start using it because I want them to ;-)
That's a fundamental flaw of UNIX.
An Atlas of North American Rivers
No, the optimizations referred to include those that will make the program faster when N=100.
Newspapers owned by Bezos are not a reliable or non-laughable source on this story. Also the paywall stuff is getting old, posting paywall links is just spam.
Just curious about the errors in V0 - was it a resource allocation issue or response timeout errors?
I really like the relative simplicity of C compared to C++ and recently wrote a project in C, but eventually rewrote it in C++ for just a few seemingly trivial reasons that nonetheless were important time savers. I'd love to know if the C standard, as can run on GPUs also, will ever evolve to offer:

1) namespaces, so function names don't need to be 30 characters to avoid naming collision

2) guaranteed copy elision or RVO -- provides greater confidence for common idioms and expressivity compared to passing out parameters
How to Display HTML in UILabel and UITextView
Amazon is firing them for commenting publicly on its business.

If you were employed by a company and disparaged them publicly, breaking company policy, would you believe that your employment with them is in any way protected?
If I remember correctly, Chandler was the one writing down the draft for LLVM developers to comment on LLVM-side. Unfortunately, if you Google his name and the relevant keywords, the results are full of his work on speculative load hardening.

Someone who read the LLVM mailing-list attentively should have seen it and may have a link.
Sure, but the peak power of a human on a bicycle is not 100w, I personally can do 1100w for around 30 seconds on a road bike and accelerate up to 60kph. I have downhill in the city achieved speeds in excess of 70kph when I was younger and stupider, on a run of the mill unpowered bicycle. So I don't really get the safety argument, just don't be an idiot, it's not as if on a 30kg bicycle you're putting anyone in danger except yourself, really, or pedestrians in very rare occasions. Most jurisdictions prevent you from using an ebike with more than a kilowatt or less peak power without some sort of license, so unless you're talking about the tiny minority of DIYers, it's not an issue.

Another thing that you have to keep in mind is that electric motors on bicycles are almost always limited in their top speed by their kv rating, that is to say, by their gearing. Once you get up to high speeds, power tends to drop off quite significantly as the battery and controller can't keep up with the motor and the ever-higher voltages required. So unless your ebike is specifically geared for that task or that you use a mid-drive with a ridiculous 72 speed transmission and gigantic pedal sprocket, you're not hitting 55mph on an ebike with a 250w motor, or with a 1000w motor for that matter. If it was actually useful to go that fast we would already do so.

So in the end, the average power of someone riding an ebike around town is of 100w-250w, whereas cars use in the order of 10000w+ in town. This means bikes are on the order of 25-100 times more efficient than cars.

If you want to build any sort of enclosed structure that can pass crash safety, it will likely have 4-5 times the frontal area of an ebike, and weigh the better part or upwards of a ton. And in the end, you will have an average power consumption, not peak, in a city in the multikillowatt range. Essentially, you would make an electric Smart Car, which already exists :)
Well, how about this, in New York on Apr 14, rate is 552/M. In California it is 19/M. This is 30x factor. Maybe people just do different things in different places. And this results in different numbers. It might be worth to examine what people are doing in different places.
For developers, they're both just libraries. As protocols to implement, SAML is drastically harder.
We're working on clarifying this.
Uhh, I don't want to be Amazon defender, but in US most of the employment is at will. In practical terms, they can fire you for any or no reason at all. There are practicalities that come into play that have to do with unemployment insurance and whatnot, but company policy violation is a defensible 'cause' for firing.

I am not a lawyer nor am I condoning this, but them is the facts.

edit: added play
Um, AdWords.
They probably still do a codepage lookup just for consistency.
Good point. If I’m being fair I would have to say that the system that encourages individuals to live paycheck to paycheck and the system that encourages companies to leverage to the gills is the same system, and so maybe it is unfair to blame corporations for needing a bailout- they’re just responding in a rational way to their environment. I hadn’t thought of it that way.

But the downside to that is: if in fact you can’t pin this moralistically on bad actors, then you are definitely going to see the same behavior over and over, until policies change.
I'm curious why you need the SOC2 report itself instead of some sort of signed statement of compliance. The details of the SOC2 don't seem like they should be important?
Why does the redirected request accept a self-signed cert, but the initial request doesn't? That seems weird.
These are all good points, and I don't see a legitimate, technical reason to avoid deprecating and eliminating identifier list syntax in new C standards (but then, I'm not as much of an expert as some people, so I might be missing something important).

That having been said, a compiler vendor has, almost by definition as its first priority, an undeniable interest in keeping customers happy while, at the same time, ensuring strong reasons to see value in a version upgrade. When dealing with corporate enterprise customers, that often means offering new features without deprecating old features, because the customers want the new features but don't want to have to rewrite anything just because of a compiler upgrade.

They'll want C17 (and C32, for that matter) hot new features, but they will not want to pay a developer to "rewrite code that already works" (in the view of middle managers).

That's why I think they'd most likely complain. Their concerns about removing identifier lists likely have nothing at all to do with good technical sense. Ideally, if you don't want to rewrite your rickety old bit-rotting shit code, you should just continue compiling it with an old compiler, and if you want new language features you should use them in new language standard code, period, but business (for pathological, perhaps, but not really upstream-curable reasons) doesn't generally work that way.
Counterpoint: I've never used Docker at all (I'm a Mac/iOS dev), and was able to get GitHub actions set up and doing what I needed it to in ~30 minutes. Its general similarity to other CI/CD solutions, TravisCI being the one I'm most familiar with, helped a lot.
Currently I have a desk with both a large exercise ball and office chair. I try to use the exercise ball more. My laptop is connected to a 27" monitor mounted on to the wall.

I intend to change this so that my desk is more at waist height and get my self a bar stool so I can switch between standing and sitting.
Love it when companies decide not to use Microservices "just because"!
Don't you feel a little...silly...making accusations about something that you haven't even looked at?

WaPo did not "stress that they violated company policies". There are two short sentences in the middle of the article about Amazon's reason for firing, followed by a disclaimer that Bezos owns WaPo.

Much more of the article is devoted to the fired employees belief that she was fired for her climate change activism, and not for violating Amazon policies. Including a heart breaking "I'm doing it all for you, kiddo" scene.
But you should be worry if they can manipulate yours but not the other way round. When next virus come they would how to control more. Good luck.
> Note: Currently, you can add a self-hosted runner to a single repository. The ability to add and manage self-hosted runners for an entire organization will come in a future release.

Still waiting for it for the last few months. :)
For me, the main difference between programming being joy or misery is deadlines. When I'm tinkering at home solving some problem without any timelines, I'm super happy. When I'm solving a problem at work that has relatively flexible timelines (which is rarely the case lately), I'm very much enjoying myself. But when there is timeline attached coupled with "where are we with this" every alternate day, it takes all the fun out of it. I do understand that this is real world and this is how we operate etc etc but that is how it is for me.
Not inherently, but how we're using it makes it cheaper. Our stack has ~50 different ML models being served live, and GCP makes it easy to treat each model as a micro-service, and give auto-scaling to each one.

This is in contrast to the easiest way we found to deploy the same architecture on AWS using Elastic Beanstalk, which involved one really big instance (that was constantly growing as we added more models), and the costs that come with that.
It is not me! To guillotine! :)
ventilators don't just pump air. they also monitor and control the amount of air, and beep when something is wrong. plus a bunch of other features...
I was a long time Bloomberg Businessweek subscriber until last year. Starting around 2017 China started taking out multi page ads at the beginning of each issue. (Or at least that's when I noticed).

The editorial slant became predictably sympathetic to China as well. So much so that by the end when I canceled my subscription there were many outright pro-China propaganda pieces.

Interestingly the editorial slant also went much further left, politically. Not sure if the two are related.
I'm Polish and I have just tangential knowledge of Czech language. Sorry for confusion.
You can't even write proper English in ASCII. ASCII is an absolute dead end. It's history.

Actually representing human language is HARD. It is also absolutely necessary. Whatever solution you choose is going to be complicated, because it is solving a very complicated problem.

Throwing your hands up and going "oh this is too hard, I don't like it" will get you nowhere.
But in an interactive display that is not of concern. It allows us to rotate and move vantage point to see different parts of the globe, as much as a real globe would allow someone to peruse.
Totally, something like a mix between that and the Sony TZ series.

Also gives me flashbacks to the Google CR-48, which itself looked like a Blackbook but a bit sexy-fied.
Exactly! I was sitting there scratching my head on this one. I get that Joe Shmoe wouldn't understand the risks of a MITM and the potential areas it could be exploited, even John Q Programmer I wouldn't guarantee to understand the risks.

But a person working at Hacker One who's job is assessing vulnerabilities doesn't understand the threat of a MITM? What?! Does everyone at Hacker One think the whole move to HTTPS was just pointless security theater or something? How is that possible? How does this chain of events even happen? It looks like the author spoke to multiple people at Hacker One who were genuinely not understanding the threat, after it was explained to them.

We must be missing some side of this here. That's too absurd to be real.
Well the Socratic method frequently results in aporia or puzzlement for both parties and doesn’t necessarily resolve conflicts in business. When you need to discover the next step or a new direction among cooperating people it’s food for thought, but for negotiating hidden conflicts of client work a more robust method is needed.

Discrimination is a tool, being seen as ugly or short in a position of success implies you overcame difficulty and played right can enhance a specific image or personality aspect you want to use as a technique for influencing clients. That game will always coexist with high level abstracted method like the Socratic.
Yes, for example, it took Lagrange reinventing classical mechanics using the principle of least action to put physics in a spot where quantum mechanics and general relativity could be seen.
It's not so much that I want it to render as a list (e.g. like Markdown), but that I want to produce separate lines of text without an additional blank line between them.
Given the architecture demands and shortcomings noted in the article, it would likely be more efficient to cut out the overhead invoked by Cloud Run and AI Platform and just run everything in Kubernetes Engine (backed by Knative for Cloud Run-esque autoscaling). This would also solve the latency and scale-to-minimum size issues, and likely be cheaper in the long term at the cost of a bit more configuration to get it started.
Slightly off topic, but I would like to request that you open Github for Education [1] for pandemic-related home-schoolers. Currently it requires verification as an accredited school & credentials. Any help is appreciated.

[1] https://education.github.com/schools
Every program that purports to support Unicode should be tested with a bunch of emoticons.
I've an iron pipe desk with a red wooden top paired with a similarly designed shelf. They allow me to work at standing height with all the proper ergonomics. My laptop simply goes on the shelf and connects to the rest via a single USB C cable

There's some storage underneath the desk and an anti-fatigue mat. Light strips underneath the shelf for the desk surface

Ergonomic mechanical keyboard w/ silent switches, MX Master mouse, Blue Yeti w/ mechanical arm, decent headphones and a discrete USB Dac mounted underneath the desk, USB hub

I've always hated external monitors and use a tiling window manager, so it's a pretty fine setup for me
Unfortunately I am out of useful information:

https://news.ycombinator.com/item?id=22868999

I hope someone will provide the next link.
I agree with that. The biggest problem I see is people backlit by a window. Personally, I have a higher-end webcam but the biggest difference I see is people who have good front lighting and the webcam at a reasonable angle versus those in obviously dim rooms, backlit, and webcams looking up at the ceiling.
I think the risks are overstated. Probably not anywhere near surefire.
No, the disclosure is disconnected from payment, so it's not blackmail. Notifying companies is a courtesy, and considered good form. Companies offering rewards is to incentivize this behavior. Researchers releasing vulnerabilities after a time period no matter what is to incentivize companies to actually fix the problems (not just pay to shut up the researcher). Both are useful for a well functioning system of independent researchers finding vulnerabilities in companies that then get fixed.

Releasing the vulnerability because you weren't paid, regardless of whatever timelines you would have followed? That's blackmail. I imagine having a very clear and consistent policy as a researcher that is not based on money (but can be based on company participation and whether they seem like they are actually trying to fix the problem) will go a long way towards clearing you of any suspicion of blackmail.
The employees certainly knew this could happen, or at least should have been aware what they were getting into. I hope that's the case.

Every large company very clearly states, one way or another, that speaking about the company to the public without being a designated spokesperson is seriously grounds for termination.
If someone wants to read something that is more like a classical physics paper there are these two papers by Jonathan Gorard:

https://www.wolframcloud.com/obj/wolframphysics/Documents/so...

https://www.wolframcloud.com/obj/wolframphysics/Documents/so...
More likely, ammo in a potential legal battle between GitHub and the banned party.
USC-2 is an old version of UTF-16 that lacks support for surrogate pairs, which means that rare symbols and emoji don't work.
The response wasn't very coordinated in the beginning, but we were lucky enough to start a lockdown in a timely fashion. So far we also managed to keep the disease mostly away from the most vulnerable groups.
It could have been a lot worse. When Fox came in, it could have turned into a propaganda machine for fake science. Given the possible alternative, I'm happy with "fluffy."
+1 Wish I had more upvotes to give. This should exist.
You'd think that site would be accessible. And while it's not terrible, all the unordered lists with a single list item in them is crazy annoying if you're using a screen reader.
have you used youtube lately? i would say the explosion in ads per video lately certainly qualifies as becoming more expensive.
I got about halfway through Principles when it came out and eventually gave up on it (had newborn twins at the time).

Was having a slow morning here so your comment led me on an hour and a half of checking out that video and some of his other content.

His videos seem a lot more approachable than the book.
Why is coronavirus killing so many more people in the UK than in Ireland?
It's a reflection of the fact people aren't going to throw out existing filesystems because they aren't in a specific character encoding. There's nothing the OS can do about that, there's nothing programmers in general can do about that, and the only way to fix it is with a time machine and enough persuasion to force everyone to implement Unicode and UTF-8 to the exclusion of any other character encoding schemes.
.. apart from all the meth side effects??
Perhaps it could also be because English is your first language (if I assumed correctly) and it stands out more as familiar as opposed to say Chinese words in Japanese? I won't deny that English is a Borg of a language though.
We should teach human rights law to software engineers
"Weird flex but okay" I love it!
A bit of both. Flask was obviously not designed with serving Tensorflow models locally in mind, which is how we had it set up in v0. Towards the beginning we had to debug some weird threading issues, but towards the end once it was more stable (as a result of some hacky fixes), the timeouts were the main issue.