skysight-inc/HackerNews huggingface dataset:
That's really just a HTTP problem though, isn't it? If you use HTTP, you're exposing yourself to MITM attacks; that's on you.

Is there any possible way to face this vulnerability without either 1) linking to a resource over HTTP or 2) loading a resource from someone else who linked to another resource over HTTP?

Case one is the devs fault for doing it; case two is also the devs fault for not even checking their dependancies.

As infrastructure grows, there will be tools that either extend the environment to block/log HTTP stuff, or catch HTTP URIs in static analysis. Both of these, specially in combination, would be more than enough.
Looks like Stainless Scala, mixed with Rust, and given a C++ syntax.

This mix looks interesting as such.

But of course Wadler's law applies: Why THIS syntax? Looks like a blast-from-the-past, bloatty and complex. Modern languages go mostly for some more lightweight look-and-feel. Usually more "pythonic". This would be imo also here the better idea.
Open to some extent, yes.

On others, not so much. There's been much discussion on HN with how it handles users from shadowbans, hidden rate limits, story weighting and so forth. I don't personally have a problem with those concepts at all, but it does seem weird to me that people here blast Reddit for doing the same things that HN does. There's been instances here of mods editing titles in order to appeal to the trolls (in hopes of removing flame wars, but an appeal nonetheless) for example.

Now there's a full different discussion with how HN and Reddit use these tools to try and curate quality however.
wow, just wow

unsubscriber: a system of telephone bills and their fees which can be charged only to subscribers
"every item is charged with the unsubscriber"
isn't reddit open about it? mod names are published on every sub.
I agree about the arbitrary renaming just to make the language syntactically a bit distinct from other languages, while messing around the user. It really is not a big issue but the fact they chose to make it an issue at all by picking a new name for an existing concept is worrying.
Hey JasoonS, I might agree with you, styled-ppx isn't feature complete, would you mind explaining which edge cases aren't accounted?

I'm doing great progress on it and don't want to miss something that is crucial for you.
A particularly short article with no real look into how or why the conspiracy theorists are winning beside Russia, or beyond the president being one.

Small quotes from an Egyptian preacher immediately following 9/11, yet another recap of a cultured interview with Alex Jones in a Tex Mex restaurant, and Donald Trump is, of course, a terrible president.

Yes, I’m aware the town is being flooded. But between the folks who now have beachfront property, the ones who have already drowned, and the others congregating in the local gym, I’m not sure anyone is left to read this and take anything away from it.
Yes, that is why it is futile to try to have an exact copy of the production server because the smallest difference will ruin your performance profiling, to be absolutely sure you have to do the profiling on the production server itself.

Usually every developer has their own login user on the development machine, but that is enough to skew performance profiling, because usernames populates environment variables & that will change memory layout of any program that the shell executes.
Me and my friend have been building a Social Sampler to make music over the internet. Now that the quarantine happened we managed to get a beta out, its taking up most of my free time: https://miidbaby.com/
At this point any new systems language aiming at productivity has to prove itself not just superior to C++, but superior to Rust, without being significantly worse in any aspect. It’s already suspicious by virtue of having a hand-wavy "Int" type (what size/signedness is that?) and it appears to be object-oriented (so we have to rely on compiler optimisations to remove dynamic dispatch) and garbage-collected (so by default any non-trivial type is heap-allocated). These are just ways in which it is worse than Rust as far as performance goes, since "ergonomics"/"productivity" is so subjective. It seems to improve on C++ only by taking the most common C++ patterns and building them into the language so the language doesn’t have to be so immensely complicated, while also improving the syntax. That’s simply not enough for a modern language to be competitive.
The NHS model accounted for these attack vectors by saying that on the server-side they would do some risk modelling to try and identify bad actors and stop those reports from being sent out to 'exposed' users. Specifically, they used an example of someone sitting outside a hospital all day.
Touchy subject. As expected, downvoted by the Brotherhood of Defenders of a Holy Round Bracket.
Well, my main side project is the same as it's been for the last couple of years, an animation/vector editing tool written in Rust: https://github.com/logicalshift/flowbetween

It's sort of starting to make the transition between a pile of ideas and an actually useful tool at the moment. The whole idea is to be a vector editing application that works more like a bitmap tool when it comes to painting, so there's a flood-fill tool and a way to build up paths just by drawing on the canvas rather than having to manually mess around with control points.

The way I built the UI is unique too I think. Choices for UI librarys for Rust were quite limited when I started so I built it to be easy to move to different libraries. I don't think there's any other UI library in existence that is as seamless for switching between platforms (or which can turn from a native app to a web app with a compiler flag without resorting to something like Electron)
Thanks, yes the area I think is relevant to Gary Bernhardt's presentations. Thanks for the link.

If I find the article I will reply again to your message.
It looks like what Opera was doing over a decade ago. IE8 also introduced coloured tabs based on tabs opened by others.

Firefox tried something similar to collections for those "tab collectors" with their Panorama (which is not available anymore these days), which was basically a visual 2d layout of tabs within groups. That's what got me the popup "are you sure you want to close 200 tabs" whenever I accidentally hit the close button.

All earlier attempts by non-Opera browsers seem to have failed so I wonder how long it'll take before Google takes this feature away. They're not a company that keeps new products or ideas around for long if they don't take off. I wouldn't get too used to having it.
No monetizing scheme so far. I think even if it ends up as a public service, it will be good enough.

I still don't know how to visually convey sugar. In a matter that is more dramatic. Working on some animations for now.
> Again, no interaction with the outside world? Or are all inputs recorded during the entire execution?

Inputs would need to be cached (eek, if there’s a lot of state loaded from external services or databases, or if that state is sensitive and you want to control where it may get persisted), but more importantly, output needs to be not output on the rerun (eg database writes and api calls).

> So recursion cannot depend on input from the outside world?

I’ve made a few mini languages (mostly for fun or for myself, but also external DSLs for end users) and I’m a big fan of not allowing unbounded loops. (Although bounded by a dynamic value like an input or the length of a runtime list is ok, so not quite the same thing as described here, it just needs to know the number of iterations before the loop begins) It makes it much easier, in my opinion, to prevent bugs, but of course it does mean you give up expressive power, so while it works for DSLs it’s not great for general purpose languages. I’m also a big fan of synchronous programming languages. I made one that basically runs inside a database transaction and reruns on conflict.
Out of interest; what kind of "full experience" is provided when I do disable my ad blocker? Are ads part of the experience?
I'm doing something similar. In normal times, I go to the gym every day or two and work out for an hour and a quarter. Since I'm now home all day, I've been doing bodyweight and dumbbell workouts next to my desk for fifteen or twenty minutes several times a day. They break up the monotony and refresh my mind for the next round of work. I also fit in extra exercise during Zoom meetings that I only need to listen to.

The result has been that I am staying in shape despite being indoors all day. The staggered workouts may be more effective at building muscle than my usual gym sessions, too.

The greatest benefit of the exercise, though, is the mood elevation.
I've heard this broadly expressed as America being focused on (abstract) rights, when most of the rest of the Western world focuses on justice (of outcomes).

A pointed example of this is the criminal justice system, where people in the US have the right to stay silent, talk to a lawyer, etc, but still get screwed sideways with profoundly unjust outcomes due to plea bargaining, mandatory minimums, etc.
Hey, Firefox tab groups!
There are maybe 10, 20 reddit accounts that I recognize. Most of them come from fitness subs. Everyone else might as well not have usernames.

The problem with forums isn't that they are dead. It's that you are trying to have them do what reddit does right now, which is endless content and interaction 24/7. But that just doesn't work with a smaller number of people. Forums make sense as the thing that you visit once or twice a day and browse for a bit in a relaxed environment. I guarantee you that doing so from your phone during your commute or your 10 minute break isn't the same. It won't create comments of the same quality.
I hope you are right, and yet I have a feeling that pollution from cars may grow. Why? The coronovirus pandemic may make more people use cars over trains or buses (and planes) - a perfectly natural reaction to avoid densely-packed enclosed spaces. Of course if more people are allowed to work from home, perhaps there will be fewer cars on the roads.
> I was worried (unrealistically) that I’d get too many users too quickly

20 year old me after putting on some AXE body spray
what does that mean? can you dumb it down at all for a non-signals person?
First-class TypeScript support is the thing that excites me the most about this. It's so annoying when you want to navigate TypeScript code from a dependency in Node and it kicks you to a TypeScript-definition file instead of the actual TypeScript source.
So, where are the federated distributed alternatives to reddit? I only know of lemmy https://github.com/LemmyNet/lemmy/
That's a unanimous opinion? You're speaking for all 66M of your citizens?

>Some rights we have voluntarily abrogated in order to meet what we believe to be more important responsibilities

This would be handled by our 10th amendment rights.

So I'm looking for a source of what rights Brits have and it's sort of difficult to understand... This [0] outlines several dates of ratification but I'm not really sure which currently apply. I figure at least these [1] apply but maybe you can give me better information. After looking at some of these articles of rights, I'm not overly impressed, most of these "rights" have asterisks on them. Not to mention how often these say "necessary in a democratic society" when talking about the restrictions, as if they know you're not going to be convinced when reading it.

> Article 10: 1. Everyone has the right to freedom of expression. This right shall include freedom to hold opinions and to receive and impart information and ideas without interference by public authority and regardless of frontiers.

> 2. The exercise of these freedoms, since it carries with it duties and responsibilities, may be subject to such formalities, conditions, restrictions or penalties as are prescribed by law and are necessary in a democratic society, in the interests of national security, territorial integrity or public safety, for the prevention of disorder or crime, for the protection of health or morals, for the protection of the reputation or rights of others, for preventing the disclosure of information received in confidence, or for maintaining the authority and impartiality of the judiciary.

Notice how the conditions are vague, ambiguous and longer than the right itself? That's going to be a big fat no from me, bob.

An interesting difference with the American Bill of Rights is that it's largely full of implied rights, as it doesn't expressly grant rights to people, rather it's written in the form of "government cannot do xyz".

> Amendment 1: Congress shall make no law respecting an establishment of religion, or prohibiting the free exercise thereof; or abridging the freedom of speech, or of the press; or the right of the people peaceably to assemble, and to petition the Government for a redress of grievances.

The end. No asterisks, no vague conditions, no ambiguity.

[0] https://www.equalityhumanrights.com/en/what-are-human-rights...
[1] https://www.legislation.gov.uk/ukpga/1998/42/contents
SC and the styled API from emotion are identical syntactic-wise and performance-wise. SC used to suffer from performance and big bundle size but these last 2 versions are very balanced. The same way as the sx prop from Emotion it's the css prop from styled-components.

Just to clarify and sell a little my ppx, styled-ppx supports the css prop as well, many people prefer that over the component api.
I think this is what people did some centuries ago: Wake up in the middle of the night and do some stuff, then go back to sleep for a couple of hours. See [1].

I also have issues sleeping. When I sleep at my parents house, I sleep excellently. I did sleep there for a week a couple of months ago and I never felt so good. The downside is that my girlfriend gets upset when I sleep there for a week (and my parents think I'm in a fight with my girlfriend).

Things that might explain why I sleep so much better at my parents house are:

- It's darker

- It's less noisy

- There's a better bed

- There's no-one sleeping next to me in the same bed

- Maybe I feel safer if I sleep on the second floor of a big house instead of right next to a street?

[1] https://en.wikipedia.org/wiki/Biphasic_and_polyphasic_sleep#...
Thanks, let me know if you are using it!
I left that world a long time ago, but what held is there was no problem buying site licenses for big software, not as much "I'm a research assistant and I'd like to buy X for $Y,000 for my project" The difference being buying something with broad appeal used by lots of people within the university, and buying something that I'd like to try for my project. Especially when there's already an established method which doesn't involve spending your PI's grant money.
I only hope that at least they got the proper UVC lamps and not the fake led ones
https://patchgirl.io a REST client that allows you to play scenario of http requests to test/setup your project
I sure wish Steve had lived to create the great TV interface he was enthusiastic about.

I want my "wall screen" to let me same-screen collaborate with others in the same room, since we can all see it. I want room level video conferencing to be easier.

I want a gesture based user interface, or some other interface that allows for complex applications being used by one person or multiple people collaborating. Not a little TV remote.

Watching videos should be like phone calls, still important but a fraction of what a computing device can do.

----

I also think Steve is rolling over in his grave while Tim Cook says "yes" to producing TV shows. What a waste - work that many other companies already do, and which Apple is an un-innovative follower from the beginning.
> How long do you think I'd actually walk around with that phone?

Sure, you could also just turn the phone off completely. The problem is that you'll need a phone eventually, and buying a new one would be a no-no if the Feds are watching your bank account (which is more or less accepted practice at this point). Even if you manage to secretly get a new phone, all it takes is one person to report you to burn that one too. Having a cyber-warrant out for your arrest effectively bans you from owning any smartphone ever again.
well, most of Deno marketing is that it is safe by default.
In 2020, not enforcing a secure protocol to share source code is a no go at all. I really don't get your point here defending something that has not made any sence since the end of last decade.

Knowingly leaving this kind of things in the codebase totally invalidate Deno being secure. There is not possible discussion in 2020 about https not having to be enforced. People thinking otherwise should not be allowed near a computer for their own good.
How to improve search, get better answers, and do less work
That's not even true. It's still very early days for Reason VSCode tooling, since you might find a few extensions that support most of the cases but lacks a few key features that you might be used to while writing JS/TS.
For the latter, press the "Write Your Own" button and it'll do exactly that

In general, I don't fix a random seed so in general you can get different definitions (sometimes: I cache data)
I see the sass / node-sass fiasco all over again...
I use the no-explicit-any Typescript ESLint check and tsconfig no-implicit-any, never turn them off unless absolutely necessary, making this is a non-issue. Not that I’m not interested in Reason for other reasons though!
The word cheating pretty much means unethical practices by definition of the category. So obviously the people who make the rules consider it wrong. And someone needs to make a common set of rules for grades to mean anything. The student handbook is basically a contract which sets out the ethical system you agree to abide by.

As for victims, ultimately you would probably defraud future employers presumably, by taking their money under false pretenses, and damage the school's reputation. Perhaps also kill people when the plane you designed crashes or something.
I've been busy building splitbee.io
I also acquired my first customer during this time!
I've been trying to control my tab hoarding in Chrome by limiting the amount of open tabs with the xTab extension[1]. It seems to help, even though I can bypass it by opening another window. As a side effect of this my browser windows tend to be organized by topic.

[1]: https://chrome.google.com/webstore/detail/xtab/amddgdnlkmoha...
Oi oi, do you have a license for that hot opinion?
Most of the time the article is just the trigger for the discussions in the comments. A lot of times I'm just reading the comments and only read the original article if it's mentioned as being valuable in the comments.
It doesn't really help that much with TypeScript native NPM-packages being published with JS and D.TS (TypeScript-definitions) instead of the original source, does it?)
My theory is that when we talk or in some cases even think about future plans, it gives us a sense of acomplishment before having done anything. Then we keep doing it because falling in love with an idea is easier than putting in the work to do it. And before you know it it's been a year and you're still just talking about it.
Ah that makes sense, thanks. I think this is the bit where we disagree:

I think the communication is worse than the potential problem

In that I think the communication is really bad but the 'potential' problem is more than potential and also really bad.
> you could argue about its correctness

Yes, I do. But as you say, it’s in circulation. I guess I dislike it in the same way that I consider ‘literally’ and ‘figuratively’ to be antonyms, but how the former has unfortunately come to be considered a synonym of the latter, which basically hobbles the language permanently.
I'm designing analog guitar effects.

I only had a few courses in college concerning analog circuits, but if you understand the principles, it's easy to learn from the schematics available on the internet.

So far I've been exploring the use of MOSFETs - I found that the 2N7000 transistor is as cheap and abundant as BJTs, so I'm using it.

This type of transistor is less predictable and has a more complex working principle than a BJT, but with that come additional possibilities.

My last non-idiomatic-but-working design is a MOSFET-based A-class buffer that maintains an optimal operating point using a BJT differential amplifier as a comparator for the feedback loop, maintaining the DC output before the coupling capacitor at exactly half the supply voltage.

It's not linear, but that's the idea - if you plugged in a guitar to it the difference wouldn't be really noticeable, but doing the same with a bass should give a "sweeter", enriched with low harmonics tone.
> The incumbent candidate wants to reopen. Because the election is near, it's especially important for the other side to portray whatever he does as wrong and incompetent and life-threatening. So you then have a major political apparatus pushing the argument that reopening is dangerous and publicizing any instance of any authority saying anything negative about it. They don't benefit from a nuanced or moderate position.

This same debate is happening in every country in the world, including ones that don't have an election in six months.

So, no, this is not just a bunch of political wankery that's aimed at making Orange Man look bad. It's a very clear consequence of what the two parties value.
Writing your own crypto is a bad idea, but in research sometimes the goals of your research require you to become good enough, and by good enough, I mean a notable expert in the "writing your own crypto" equivalent. Which in this case would be something like writing your own linear algebra library functions for research you plan to publish.
Applets weren't necessarily standalone software, though. I built several professionally, and they were all integrated into a wider web page, not just a self-contained program.

The changes by the plug-in developers were often unhelpful in the final days before we gave up on those technologies entirely, but let's not pretend they were the root cause of the plug-ins' demise.
Rust FFI – Building an ASN1 Codec
I've done a lot of work on my opensource collaborative whiteboard, WBO: https://wbo.ophir.dev/

During lockdown, many teachers and companies are looking for new ways to work online, and google searches for "opensource online whiteboard" have exploded. I noticed a surge of activity on the site, and that motivated me to spend more time on it. The tool has also received its most significant external contributions since its inception several years ago. I just hope the interest will not fade away once the pandemic is over.
Or use something like Nexus or Artifactory to host a private copy of dependencies.