skysight-inc/HackerNews huggingface dataset:
It seems true because people don't consider disasters, like the mortgage crisis, or this pandemic.

Consider the magnitude of inconvenience from having your identity stolen. I think it dwarfs any minor inconvniences needed to secure your identity.

That said, no doubt user-computer interaction should study security a little more I think.
A three year old android flagship will also kick ass compared to a new low end android.
This is true, to my knowledge, I would NOT relie on the order to be always consistent. But I think you can enforce the order in the linker file, i.e. load the arrays one after the other, and then the order should keep constant. But you still have several places that you need to keep synchronized and, really, most people don't look in the linker file at all.
This is an incorrect way of looking at it. The quarantine isn't the proximal cause of the economic problems, the virus is. If we didn't do any of the social distancing, group limits and shutdowns, if we had just pretended like the virus was a flu that will disappear, then the economy would still have been devastated. People dying en masse have a tendency to make people stay home.
Does this new intel CPU have 'fixes' for all issues like spectre and meltdown, where you were supposed to turn off hyperthreading for better security? I'm just curious if the fixes for those (and other similar vulnerabilities) are starting to make their way into silicon, but also that the fixes recommended usually slow cpu's down quite a bit too.
>as part of the regulations they banned all alcohol sales

For my curiosity, would you mind sharing where this is? It contrasts with my experience in the US, where I know a few states made it easier to sell alcohol.
I included the parenthetical to make it clear that what you're asserting was not my intended meaning.

I am a gay black man.
or manually operated mills too, the technology need not be advanced.
Online Jobs to Make Extra Money at Home
> or power to alter political processes

Doing away with large companies doesn't guarantee that this will end, though.

An example: while there are few large corporations providing physician services, the American Medical Association lobbies on behalf of the thousands of individual doctors and small private practices, often to the detriment of consumers anyway.
Ask HN: Sites to ask UX and Architecture questions
I'm a solo developer working on integrating a Web app with Microsoft Teams. Recently I've been hitting some complexity with edge cases that have come up during Microsoft's testing (eg. they are using the same MS tenancy for different demo organisation accounts, so my app is merging those demo organisations since they share an MS tenancy).

What I have done is working, but I suspect it's overengineered or there's a more elegant solution.

Are you aware of any online communities to ask questions about UX and designing software to support multiple platforms?

I'm looking at ux.stackexchange.com now, but also interested in alternatives.
Aren't process pool based FastCGI implementations a thing?
You can also use fefe (https://github.com/paperhive/fefe/) to validate any data with its pure functional and minimalist approach. Bonus: it's 100% type-safe automatically if you use Typescript.
I think classifying goods and services in "needed" and "unneeded" is a fool's errand.

It's also none of our business what people choose to do with their life and money. If they want to waste it on frivolous things, that is their choice and privilege.
Vagon[1] is another interesting solution tackling to solve a similar problem.

1. https://www.vagon.io
Are there figures for assaults by non-illegal immigrants for the same period, just for comparison? The article doesn't contain any.
Thank you. We've clearly been lied to. Czina paid them to lie and cover for them. Then based on fake death models we shutdown, a shutdown that is a chinese WHO attack from all appearances.
Many of the companies that are in focus here have simply grown too big to be sustainable in the niche they cater for, either through aggressive funding or by riding a finite hype wave (e.g. Gopro, no idea if they also suffer from overfunding)
With GPG, sure.

I have GPG keys (for other reasons) which I never use for email.

On the other hand, using S/MIME for email signing and encryption is a pleasure. At $JOB everyone get's an email cert via self-enrollment, user public certs go in AD, I can easily send encrypted email to anyone in our org.
Speaking of vacuum tubes, this gentleman makes them by hand.

https://www.youtube.com/watch?v=EzyXMEpq4qw
OK, so you don't "tunnel writes through" EventReduce, you "tee" them to EventReduce.

Anyway, to maintain consistency, you have to limit yourself to one process of your app. No sharding, load-balancing etc. This is significant limitation, and it's not obvious. I encourage you to mention it in README.md.
Seems very similar to what https://priv.ly/ was trying to do.
There is a statement very like this, about construction workers--masons or carpenters--in Christopher Alexander's A Pattern Language.
Facebook Scales Down Libra
Hey HN,

We've built www.co-train.space to stay fit while staying home. You pick fitness video on Youtube, it plays synchronously for everybody in the group and you see your peers thanks to Jitsi Meet (Zoom-like software).

I am now exercising with my parents every morning and feel much more connected to them. Looking forward to hearing what you think!
Irrespective of old news or new news, it's a fantastic achievement and ye should definitely be proud of it.
"The three main functions of a currency are as a unit of account, a medium of exchange and a store of value." What does it mean? How does it makes sense to treat e.g. the two last properties (that money is passed between people and that money symbolizes value) separately?
Or the tracing/logs analysis tool https://github.com/fntneves/falcon
I wished I could use Stripe but when selling worldwide you need to send the V.A.T. / G.S.T. to each country and US state you're dealing with. With customers all around the globe it means something like minimum 50 tax invoices to fill and send for me
Make your browser width narrow, and it drops to the bottom. Not that you should have to :)
Tired: {"alg":"none"}

Wired: {"alg":"nonE"}

The JOSE standards (including JWT) are a gift that keeps on giving to attackers.

I designed an alternative format in 2018 called PASETO, which doesn't contain the JOSE foot-guns. (I'm pushing for an IETF RFC this year.)

https://paseto.io

EDIT: Also, this affected their Authentication API rather than their JWT library.

If you use their JWT library, well, it certainly allows this kind of horrendous misuse... but it is not, per se, vulnerable.
I very deliberately did not use the word "free". Of course it's not free. Many things that are considered basic human rights are not free. Food, clothing, shelter... none of these are free. We as a society choose to provide them because we'd rather live in a world where everyone has these things rather than one where some people don't.

Of course this does not apply to everything. It's perfectly fine if not everyone has a private jet. It's not so perfectly fine if people are starving in the street.
Zhaoxin KaiXian x86 CPU Tested: The Rise of China's Chips
Is there something like this that's self-hosted?

My ideal scenario is something like this that's $20/month for unlimited usage, with the caveat that you have to have the server in your own house with your own internet, but the service is that it provisions your machine and proxies it for fast speeds everywhere.
On the contrary, I think it's extremely useful to have the algorithms realized in a form that has a cost model free of handwaving. The books are to a great extent focused on computational costs, and high-level languages obscure those costs.

The only exception is that the books only rarely dive into the variable computational costs due to operating on values of different sizes; heapsort, for example, is only O(N log N) time if comparisons take constant time, while, in fact, as key cardinality approaches infinity, key size grows as O(log N). (Which is why O(N) time sorting is possible.) This kind of thing is growing more important as hardware design becomes more accessible; there are probably more people writing VHDL and Verilog now than were writing any kind of software when Volume 1 came out.

So I think using a high-level language would get in the way of understanding those costs, and even to some extent how to implement the algorithm in other contexts.

If you just want to implement a red-black tree or something, then sure, the MMIX code isn't going to help you. But he also presents all the algorithms in pseudocode, so you can use that.
Internationalisation Manager App
This is probably not what GoPro execs had in mind but I find GoPro is perfect camera for my 2 years old. I know there are cheaper rugged water-proof cameras that would work just as well for kids but I already got GoPro.

I bought GoPro thinking that I'll use it for my "adventures", however, it is mostly unused at home. So we just let our son play with it.

However, on travels, we really love having GoPro with us as it is small enough, and easier to use than phones. With phones, if we are out all day, we are a bit worried about battery life. We also have a bigger camera, X100F, but that is a bit too big to carry all the time on a vacation. So we leave it in the hotel unless we plan to do a photography. So most of our vacation photos and videos are evenly split between GoPro and phone cameras.
Congratulations. We've recently decided to go with Paypal Pro for better rates on micropayments. Do you guys plan to have a similar program soon?
Any plans to support MacOS?
Abseil is used extensively in Envoy Proxy. The project is a top level Cloud Native Computing Foundation (CNCF) project however Google are one of the top contributors.
I’ve had good luck. The biggest hiccup was that you need to pay extra for a public IP.

Super Meat Boy is about as twitchy as I get, and the latency for that is fine (at least in the SF bay area).

Obviously, the GPU can do more than that, but I haven’t tried pushing in that direction.
Inaccessible Island Rail
A "personal dashcam" or bodycam product direction would be good for GoPro or some other companies.
If you're basically building everything from scratch, of course you aren't going to see the churn as much.

If you build on others' frameworks, and those frameworks drop out of maintenance because the maintainers moved on to shiny new things, any security vulnerabilities or emerging incompatibilities with browsers can quickly prove ruinous for people who used those frameworks.

I wrote a SPA while working at a consultancy. It was actually pretty churn-proof the way I wrote it, but during one vacation day and the following weekend a couple people (including the boss) just rewrote the whole thing to use more faddish framework stuff. I don't work there any longer, but since then (about 2016) they've probably had to effectively rewrite it twice if they kept up with that approach.

That's what I mean by "constantly impending obsolescence".
> How does pricing work?

> For hourly plans you are charged a flat rate(depending on machine type) per month to cover storage and access. Additionally, you are charged an hourly rate when the machine is running. Monthly plans are offered at a flat rate for unlimited access.

Then the pricing page doesn't list the flat rate, when looking at hourly pricing - but does show an hourly price for monthly billing? Possibly monthly/(30 * 24)?

Ed: looks like hourly for monthly plan is calculated as monthly/(365÷12×24)
Ask HN: How do I retain more information from podcasts?
I listen to a lot of podcasts, mostly when commuting. Any tips for retaining more of the information?

I suspect that the only way is to treat podcasts like lectures: take notes then process them like you would lecture notes (spaced repetition etc).

It seems like I'd have to listen to the podcasts twice. First listen for interesting content I want to retain, then actually note it down.

Can anyone suggest a better approach?
If you're a business basically nowhere. Some of the sibling comments are suggesting e.g. the UK where I live. Modestly sized transactions (maybe not the price of a new car or home but from pocket change to a nice family holiday) between individuals are zero cost and typically near instant. But a business can't access those rates.

However the EU forced the payment services sector to cap charges for businesses so you're maybe paying 0.5% or less on a transaction not 2.5% and that's why you don't see amazing cashback card deals or big discounts for cash in the EU normally.
Wealthy enough to have a pipe organ in his home on the Stanford campus! I'm sure he could afford a housekeeper if he wanted one.
It depends on what you're used to use. "Kanban" systems escape my intuitions.
this doesn't quite pass the smell test. I can't quite tell if there's a way to filter out results from overclocked parts in geekbench, but it looks like these results for the i9-10900F are significantly lower than typical results for a stock i9-9900K. hard to believe they would do worse on the same process with more cores.
Clearly this is a product targeted to professionals, designed for using heavy application while mobile.

Gaming is a also a use case, but gamers that run heavy games tend to be nerds anyway.

Per month pricing would make it very hard to price competitively for users who work 6+ hours a day vs. users who need to work with CAD files a couple of times per month.

I don't know what kind of every-day consumers need to to run heavy CAD software.
Stripe not allowing to withdraw onto USD accounts not located in the US is an absolutely MASSIVE gripe with the service.

We operate internally in USD - we sell in USD, we pay in USD, so we end up being shafted with not one, but two pointless FX conversions. And that's without going into minor stuff like the headaches with refunds done at rates, extra accounting overheads, etc.
Interesting story & perspective, thanks for sharing.
Have I missed it or does this front page not say what this service is?

I was looking for something like: “Mailvelope is blah blah blah...”
I use the db for some tests, it's totally fine, because it's limited to those tests which actually need db access (most don't). It's also closer to the actual application behaviour than mocks and doesn't need to be maintained.
What does a Paperspace account get me without a machine?
How to Mitigate Fiduciary Risk in Overheated Global Markets (2018)
There are quite a few attempts to that topic (Parsec Gaming, Shadow Gaming, ..)

I tried a few of them but as for latency relevant online gaming current solutions are rather meh.

For an old laptop I guess its alright and price for casual gaming is probably hard to beat (if renewing every 3-4 years hardware). But as with any cloud/rental after paying its gone.
I wish there was a way to automatically nuke the image on shutdown, and then spend 15 minutes to have a script auto-populate a few games in my steam library at next boot. It’d save $5/month, and also solve the OS update problem.
It killed 4000 people because they basically shut down cities and villages to allow it to do so.

If they hadn’t obliterated those places the death toll would be a lot higher.

I haven’t heard of entire cities being shutdown due to solar accidents despite the far greater prevalence of solar farms than nuclear facilities in existence.

Edit: Also, heroic efforts by ordinary Russians, who almost certainly compromised their own lives so that people much further away wouldn’t be affected.
It's generally a well-known phenomenon, but here:

https://www.cnn.com/2019/02/26/success/layoffs-women-minorit...

https://hbr.org/2019/01/why-most-performance-evaluations-are...

Links to the research cited are in the articles, which provide a basic overview.
IANAL about the interpretation of the rules, but:

* Airdog have been doing this (on a small scale) for ages - they released a GPS tethered action drone years ago.

* Skydio, more recently, released first a follow-me drone based totally on vision, and then a drone with vision and GPS tether

* Lots of other drones (DJI included) have vision follow-me, although with varied success (based on reviews)

Problem is, the ones that work well (e.g. Skydio) are really expensive, and the tech hasn't trickled down to cheaper models yet.
PO-137: Rick and Morty Pocket Operator
It’s larger than Adyen who has a arguably a better platform and bigger customers like eBay and Microsoft. Stripe has Shopify but with their misstep of not refunding processing fees on returns, that’s going away quickly as merchants pressure Shopify.
The gist of this Auth0 authentication API bypass is detailed as follows:

> The Authentication API prevented the use of alg: none with a case sensitive filter. This means that simply capitalising any letter e.g. alg: nonE, allowed tokens to be forged.

I really don't know what to think of why you need a case-sensitive filter for alg:'none'. The question is that why use and support 'alg:none' in the standard in the first place? As I previously commented, the option to have 'alg: none' should never be used as it is still the biggest footgun in the JOSE specification. Even giving the user a choice of ciphers to use is a recipe for disaster. Thus, JWT is still a cryptographically weak standard and its use is discouraged by many cryptographers.

PASETO [0] or Branca [1] are cryptographically stronger alternatives to use over JWT here.

[0] https://paseto.io

[1] https://branca.io
Twenty One Grams Experiment
Yes, that's how he was able to build his house around a custom-built pipe organ. Also, though, many men of his generation leave the toilet-cleaning up to their wives. But he says he and Jill each have uniforms for this purpose.

(My toilet looks and smells much better now.)
Surprisingly, the discussion of Crank.js on Reddit is a lot more prolific: multiple framework authors/contributors (React, Mithril, Solid.js) chiming in.

https://www.reddit.com/r/javascript/comments/g1zj87/crankjs_...

A new frontend framework is typically only merits a yawn, but the occasional one like this which introduces new approaches - generators and async generators - is a breath of fresh air.
Cool thanks :) I think that's still helpful.
It's not exactly what you're asking for, but maybe Sandstorm.io might be useful.
> I'd accept an interest free loan if they would offer it to my business. They did approve me for a loan but want a fee upfront + a slice of daily sales until its paid back.

Genuine question... is the interest really the major issue with the loan they offered?

The amount of interest in the “slice of daily sales” is not that much (relatively speaking). That slice is just a loan repayment, which you would have to do whether it was interest free or not.

Maybe Stripe could do something like temporarily lower their fees or maybe reduce the up front fee, but I imagine that their current loan offer to you isn’t far from what you would get even if they had a net zero expected value from your loan.

Am I missing something?
Bridgecrew announces $14M Series A to automate cloud security
Sad to see that almost all companies have to implement their own string because of the difficult to use and slow performance std::string.
magit? Why not?
I built a website to occupy people during quarantine that updates midnight UTC
if they can just cut off office space like that they must be renting flex space ... which is expensive. but yeah, 200 * 300,000 still only comes to $60MM.
Building a Rust Web Browser (8-part series)
It is worth noting that this is the i9-10900F, not the i9-10900k (thank you, Intel, for the lovely naming scheme). I'd expect the -k variant to be at least as fast as the i9-9900k.
I guess marketing is the one thing they really excel at? :)
We've noticed a few things --

- Enterprises pivoting -- brands going direct-to-consumer, malls pivoting to online business models (seriously), and other things like that.

- SMBs going online: see this thread[0] from a French fruit seller, for example, or this thread[1] from a bar in Milwaukee. The restaurant down the street from where I used to live is now running a rapidly-growing online wine club.

- Totally new startups are getting started in response to new needs.

[0] https://twitter.com/FlorentSchmahl/status/125028359535832678...

[1] https://twitter.com/danimalnelson/status/1240004111669460992
There's an iceberg of Ruby jobs that don't exist in the most obvious places to search, and because other languages have gained more spotlight (including anything that even smells of ECMAScript) there are fewer people searching for Rails jobs so the number of Rails jobs is pretty well matched to the number of job-seeking Rails devs. Also, early stage startups tend to hire from people they know, not from job search sites. Finally, there are many "full stack" jobs where work on the backend means Rails.

A simplistic metric like "job listings on angel.co" (especially if you're specifically looking for Rails in the job posting title) don't tell the whole story.
How do you get pixels on a screen from VM/CMS?
Once you understand basic Lisp, (e.g., have worked the first half of the Little Lisper or the Little Schemer or the first few chapters of Structure and Interpretation of Computer Programs) the official Emacs Lisp manual [1], M-x describe-function and (progn (info "elisp") (Info-index topic)) are all you need. At least that has been my experience.

My favorite thing about writing Emacs Lisp code is that it is easy (e.g., just an 'apt get' on Debian) to install the aforementioned manual locally -- and the other resources I mentioned a part of the basic Emacs install -- and once I have installed that manual, I don't need internet connectivity when I am writing Emacs Lisp code. (Not having internet connectivity means I waste less time browsing around aimlessly.)

[1]: https://www.gnu.org/software/emacs/manual/elisp.html
Reminds me of me learning surfing and taking videos. Finally got to surf a wave without falling, felt like a hero. Then I saw the video and realized the wave was at max 20cm :(
So far in 2020 we have a near-war with Iran, a global pandemic, a locust invasion in Africa, Krakatoa erupting in Indonesia, and now a radioactive wildfire, and it's only April.
I can feel the pain reading that post.

I'd suggest it might be easier and "good enough" to just use symmetric encryption. Tell your friend the password you both will use and just use "gpg -c plaintext.txt".
There’s nothing dishonest about just straight up charging, as long as you’re honest about what you’re charging.
A simple visualization of the Covid-19 pandemic
> I'm going to switch to truncating articles this evening, and linking to a single article page.

Ah, much better now.

Paper newspapers do this in spades, so this behavior shouldn’t surprise most people.

I hate to say his, but you might have to turn on justification to make it look more paper-like. In doing so you can get rid of many of the vertical separator lines (but you might need to be more conservative with max columns)
> The browser extension Mailvelope provides end-to-end encryption for your existing email address.

Seems like a browser extension for PGP encryption.
Ehh, based on what I've seen (from various YouTubers, anyway), I think the Fusion has been a very well-received innovation from them.
Maybe, try this, https://youtu.be/87q-TTG48Ew
If I say "Public private key cryptography" it is like music to my ears. The term is near poetic. The experience is so hard to explain I think I have to make a drawing.

https://i.ibb.co/DgQ82kt/gnuPG.png
The ability to create a docker image from multiple sub-images is pretty useful. I think you could also use Dockerfile multi stage builds for that, but it’s not as clean.
Coffee Lake and newer has mitigations for that apparently.

https://www.anandtech.com/show/13450/intels-new-core-and-xeo...

I'm unsure if a "fix" is actually possible with a pure hardware solution.