skysight-inc/HackerNews huggingface dataset:
Well its a reflection of the world previous generations have built to us - you have to study very hard, work hard, in US take massive loans even before entering workforce, no way a single parent can feed whole family like it used to before and so on...

People want more enjoyment out of life, and in the same time finding their place in life got harder. Have state support parentship more (ie sponsored kindergardens instead of horribly expensive ones), because modern folks often live too far from their parents. And tons of other supportive things.

Ie in Switzerland where I live, you are taxed more if you as a couple get married. Staying single brings more than 1000$ extra per month. Even with 1 kid, we are still worse off compared to not marrying. I mean, how more clear can the state be to giving you a massive fuck you as a parent? People here have kids despite state child support policies, not thanks to them.

If you don't feel that you have some support, kids are simply too hard for many. Although, subjectively, they are the best thing in my life.
Don't forget lptstr, lpstr, lpcstr, lpwstr, and a dozen more I forgot.
Both - even in this thread someone is getting downvoted into oblivion for calling me selfish:

> It's terrifying to me that selfishness and self-centeredness has apparently taken over that generation of young people.

It's a very common sentiment and it's usually older family/coworkers.

EDIT: now there's even more and weird "you're gonna die alone" comments in there too (which are common as a counter argument for waiting)... just look at this thread and you'll see exactly what I was trying to describe.
IIRC you can improve your singing
....Which might be one of the reasons Linux Desktop is so awful to develop for.

You wonder why people ignore your platform? Saying it isn't actually a single platform and instead is dozens of different platforms just means each of those platforms is even less relevant. Saying you're not just one platform with 10% market share but actually 20 with 0.5% each doesn't make the case for shipping on Linux Desktop any better.
Oh, haha, yes, that's much better. Great work, thank you!
The aerosapace community of "old boy firms" is very tight-knit. So tight-knit that there are people with stars on their shoulders who---even though these processes are ostensibly open-bidding---will start asking questions about someone's national security clearances and loyalty to the country if one of the blessed firms doesn't get a contract. After all, if one of the "old boy firms" goes bankrupt, there goes America's capacity to construct missiles and rockets in wartime, and then where would we be?

It would be a funny legacy of this White House administration if it succeeded in breaking up the traditional aerospace cartel by appointing someone so green to a NASA executive position they actually weren't aware of the politics here and ran the contracting process as if every player were on equal footing. It'd be the first I'd ever heard of it happening in aerospace. ;)
Facebook takes on Amazon with online shopping venture
Alternatively, you may distinguish between (a) objects representing one rectangle and (b) objects representing one rectangle at a time.

Object of type (a) have only getters in their public API. Setters imply type (b).

And, while each square is a rectangle, the set of all possible square is smaller than the set of all possible rectangles.
Just look at the number of pets being adopted by Millennials.
You're toggling between global stats and US specific stats.

For example Android is ~52% of the US market.

https://www.statista.com/statistics/266572/market-share-held...
It's still doable with enough effort. My best friend at 32 was able to conceive even with medical issues that would make it near impossible. It took 2 years but it happened.
There is media.peerconnection.enabled in about:config. When set
to false, WebRTC doesn't work but I'm not sure if there isn't
anything left active.

Also uBlock has an option "Prevent WebRTC from leaking IP adresses".

WebRTC should be disabled by default or firefox should ask
explicitly like with webcam-access.

There have already been reports where sites use your browser as a
peer in a P2P-network (without your consent). This can be really
problematic depending on where you live.
Space is big. Really big. It’s such a long way to the nearest star to Sol that I expect a billion people living in a floating Pacific seastead community before I the first hundred thousand reach the stars.

Unfortunately, once we do have proper cheap space access with e.g. a launch loop, the exponential nature of growth means it only takes 50 generations of 4-child families to go up each step along the Kardeshev scale.

After type II, population growth is limited by the speed of light.
On the contrary; I think it's rather selfless to pay for infrastructure and programs that help raise kids, when you have none yourself.

The real narcissism to me, is bringing a child into this world when you're not 100% certain in your abilities to properly raise it. It is a lifetime commitment you need to know you're ready to make before you do so.
Enter the Defense Production Act. When all the states declared national emergencies, that made this law obvious to invoke.

https://www.whitehouse.gov/presidential-actions/memorandum-o...
By definition, they are gravity wells proportional to the quantity of stuff they can offer. Smaller gravity wells are disproportionately easier to escape from, granted, but I'm not so sure the ROI of random asteroids will make up for that.
The Impact of a Coin Toss on Major Life Decisions and Subsequent Happiness
Is that representative of "modern" mainframe platforms, or is it just retrocomputing?
> No current way to get the user’s home directory. std::env::home_dir() is explicitly marked as deprecated, and the documentation encourages users to rely on the dirs crate (which is currently archived on GitHub).

Yeah, this is a bit of a farce. On the one hand, it seems fair to me to not have this in the standard library - it's not something that needs special cooperation with the compiler or runtime, it's not something universal (what would it do on an embedded microcontroller?), and it doesn't matter if different crates use different implementations. On the other hand, deprecating a standard library function in favour of a crate owned by a random user seems like an unforced error.

There's discussion here:

https://www.reddit.com/r/rust/comments/ga7f56/why_dirs_and_d...

Including the fact that there is an actively maintained alternative:

https://github.com/brson/home

And a clue to why those repos are archived:

> I was wondering the same thing and contacted the author. He said that some people had "lost their shit" over some of the things he mentioned about rust and that to help them calm down, they will be archived until 2022.

!
"I'll presume that everyone who reads this believes the same about their own lives."

That's an enormous assumption, in my opinion.
Baseline trim Toyota Sienna has this and it isn't even an electric vehicle. Very simple, very useful feature.
That's sort of the complaint, why I accused them of "doing their own weird version of EEE". When faced with a choice of "make everybody else do a whole bunch of work so that they're not forced to use your entire project-umbrella" or "make some minor changes to our architecture so things aren't as tightly coupled" they almost always choose the one that forces you to use systemd.
> They'll have someone to take care of them later

This is probably the most longterm bet any human makes, but it's also very dependent on culture. Sheltering with and caring for your elders is common in countries like Japan and India, whereas in the U.S. it usually amounts to depositing them at a nice nursing home.
Now I have to watch it... God damn it! Because your comment I mean.
In case others got confused by this thread (I thought for a minute "how do you know which private key goes with which peer", is PostUp per peer, etc)... There is only one private key per interface on the server (or anywhere for that matter) and all the other peers are public keys.

I might be the only one who confused myself :)
This is a great community. Everyone is very friendly and there's tons of useful information!
> You claim I am being "self-centered" but the fact is if you don't provide something that the distros can work with

Alternative view: distros don't provide a stable platform that developers can target.
I use PiHole with a DoH upstream. I want all devices on my network to use my DNS server. Mozilla's implementation is easily managed using their canary domain "use-application-dns.net" but Google doesn't have this option. I do not want any queries sent to Google. It is not feasible to manage chrome flags on every device, especially mobiles. Does anyone know if Chrome will be using their two public IP's, 8.8.8.8 and 8.8.4.4 for this new DoH service? If that is the case this will be easy to block at the network level. Thanks.
Wish HIBP accepted PayPal, guess they're being ironic.
That's the point I was making, yes.
ninjam should work, although I have not tried it myself, anyone else?

https://www.cockos.com/ninjam/
If you push out the whole distribution of child births, some of those would-be child births will not happen. Female fertility falls rapidly after 35[1]. It's not something you can simply delay across the population and expect to get the same total reproduction rate. People will have fewer kids than they otherwise would have.

[1] https://en.wikipedia.org/wiki/Age_and_female_fertility#Quant...
or like... turn the TV off during a power outage.
No, webpage javascript is limited to using websocket protocol [1] for connections. That means your database or IP camera, or VoIP phone or router are safe for now. Though the websocket connection establishment seems to allow the javascript to differntiate between a closed and an open TCP socket and a TCP socket that speaks websocket.

[1] https://en.wikipedia.org/wiki/WebSocket
I didn't read that as the point the commenter was making. I understood it as: if a certain percentage of bills listed as being made in X year are counterfeit, then it is rational to prefer more recent bills, as the potential counterfeit pool is smaller. I suppose this would also hold for preferring only bills from a specific year, but 'recentness' is easier to grok.
This is bad and should be blocked IMO, at least by default, but can a site do anything other than find out which ports respond to a websocket request? AFAIK they can't send arbitrary network packets. The websocket will only open if the port they are trying to talk to speaks websocket back. This is mentioned in the article.

I'm not saying that's okay. I still don't want them scanning ports on my machine. There might be some services that offer a websocket connection like Plex for example, or the Kinect driver, or Leap Motion. I also don't want them cataloguing ports that are open.
I've been able to read WSJ links with the Bypass Paywall plugin, Firefox, and UBlock Origin.

* https://github.com/iamadamdev/bypass-paywalls-firefox
The alternative is to ask the user on a site basis.
This guy Just has it wrong when he calls port scanning an adversarial technique. It's Just a way to discover Services. You can then use the result to do malicious things but it's not like the only or even main purpose. I humbly refer to this: https://koeln.ccc.de/ablage/portscan-policy.xml (Google translate can help with the german)
No one mentioned roamresearch.com?
That's what CORS is for, but it appears that there is no CORS for WebSockets.
[Article sourced from the Financial Times.]
You don't have any information about where the customer was on the cattle/pet divide, nor if the general advice to "treat servers as cattle" even makes sense in their case. Regardless, the whole point of the exercise was to find the root cause and prevent it from happening in the future. Sometimes you gotta dig in and do the work.
> Creating another person is one of the most carbon-intensive actions anyone can do [...] Best to do that when you're SURE they will have all the resources they need to be a productive and helpful member of society...

I totally get the sentiment, but history stubbornly is full of people born into abject poverty who somehow rise to the occasion. Take a look on Wikipedia at inventor profiles. Our best, life changing inventions came from people who were born into less-than-ideal situations. In many ways the impact people have on the world is a dice roll and not a matter of proper financial preparation.
I addressed this in my response. You're right that redirection does little more than just blocking the traffic, on account of the certificate check, but if the attacker can force a fallback to regular DNS, that's a problem.
Hi, great tool to find trends. Do you also extract trends from YouTube as well? Would be super interesting to see it. (I don't know of a tool that does, for me it is an important feature in a trend monitoring tool). I like it that you can use the product without registering or submitting an email, nice.
Try not to discount the external pressure the current generation faces.

Real wage declines, often dual incomes required just to keep up, two major recessions during prime career building years, primary equity channels increasingly unaffordable, cultural mal-adaptation in many semi-rural/small metro areas to support children in dual-income situations, poor financial literacy as a part of core education, punitive judicial system engendering classism, and more. Not all these problems are new. However, they have increased and are the daily reality this generation faces.

Want to see more people have children? Encourage, vote for, and adopt policies that reduce the external costs of child rearing and birthing. Only then, if low birth rate remains extant, can doomsaying and despair over cultural selfishness be acceptable. Until then, focus on bug-fixing the social platform.
To my knowledge, a lot of effort has been put into the design of CORS (and related APIs) to specifically prevent misuse like that. A well-behaved Websocket implementation should not give the calling script any indication why a connection failed.

I know timing oracles are difficult to avoid in many cases - but the technique shown here seems to actually exploit different kinds of exceptions being thrown by the browser.

This seems like a straight-up bug and pretty serious security vulnerability to me.
it's another example of the same phenomenon. a mcdonald's quarter pounder is not the same everywhere. the sandwich itself is the same, but the location is an important (and sometimes expensive) part of the whole package. how much would you pay for a big mac that happens to be located a hundred miles away from you?
Blazor Finally Complete as WebAssembly Joins Server-Side Component
Building a “Maintenance Mode” with Terraform and GitHub Pages
First of all, fraud detection seems like a legitimate use case here. And WebSockets has many valid uses.

HOWEVER -- how the hell is localhost port scanning allowed to happen without my permission?!

This feels no different from a website trying to check the existence of named directories on my file system or something.

Does WebSockets not require permission to function at all, or shouldn't it be limited to some kind of CORS-type policy or something to connect without a permissions dialog? Or even if it's allowed to port scan the entire public internet, at least block your local machine and network without explicit permission?
I'm okay with this. To me, Rust is a tool for writing a small number of pieces of very serious infrastructure: kernels, drivers, firmware, high-scale daemons, etc. These feel like works that should be executed in a mood of sober seriousness, rather than joy. Rust is a double bass, not a saxophone.
In normal operation, very uncommon. Many protections to prevent it from happening in the normal, day-to-day activity.

However, in diagnostics it is extremely common, because it's how debuggers and a ton of other necessary tools work. Debuggers go in even more deeply than that, they can pause execution and single step it, etc. So it's hard to remove the things these tools use to work.

Beyond that, Windows has its own weird concerns here. At the very bottom layer of the way Windows was designed, all windows were in a common space on a single-user system (think Windows 3.0 era here), and all windows can send arbitrary messages to each other, and those messages are often very powerful commands. Not quite literally "set this memory value to that", but things like "set text to this" or "redraw yourself" or "terminate yourself", plus any additional arbitrary things the programs added for their own message loop internally. While Windows has had the basic process model protections of not allowing direct memory access to other process, etc., historically speaking being able to send Windows messages to arbitrary processes has any number of ways of escalating to code execution, even before we get into buffer overflows and such (though there were plenty of those). It has been a long and bumpy road securing Windows against all of these issues to make it multi-user safe. While this particular hack doesn't use windows messages to do all of the work, note that there can still be some legitimate surprise at how much access a program can get to Notepad just by sending messages, like, directly telling it to run its rendering loop to redraw its screen.
I've found that the lag impacts even day to day speech. Turn taking cues are all out of whack, and I notice that e.g. my teammates interrupt each other significantly more. It makes conversations in groups larger than 4-5 people very awkward.
> I see a certain shallowness of perspective that, in retrospect, I myself was guilty of. None of them ever really grew up.

... And there's the condescension I hinted at. Get over yourself.
Each string in Rust has a specific purpose. OsString, for instance, is for storing data which might be in, say, UTF-16 instead of UTF-8.
You're selectively quoting me. I'm pretty sure I spent a bit of time talking about tolerance and what it means.

They could have easily said we don't allow illegal content and that would be the end of it. I would be fine with that. It would mean a jury of my peers would determine if whatever was said violated our societal values.

That's not what they said. That's not what any of them say. Instead, they very clearly state that they will determine what is and what is not allowed by their standards.

They are within their legal rights to do so ... but I am in no way in support of that. I do not want Google, Twitter, Facebook, Amazon, etc. in charge of what we can and cannot say in public. We, as a society, should frown on that and those working in those companies should speak up during meetings when that is proposed.
I stand corrected. I think yours is the correct approach.

How shall origin be defined? I can envision the likes of Microsoft which have many, many second-level domains making calls between them.

We can’t allow the site itself to grant access. How would this be managed, other than “please stop and think what a domain name is supposed to be before spraying your product across twelve of them?”
I'm not sure they do to the extent you suggest.

But I agree, if you open a public service you can't not rent to blacks, you can't not serve gays nor Democrats. That is how it should be.

When you open an upload streaming service to the public, _particularly_ if you have the majority market share, you have certain obligations of non discrimination. This should include religious and political viewpoints as well as race and sexual orientation.

Maybe Jones does cross the line from political discourse into trolling and incitement to violence. Not sure because I haven't watched him except on Joe Rogan. But we need to be very careful about moving that line.
Daniel Goes Dark for Good
Websockets are nice for some things. I hack on Mastodon and it uses WSS for streams and they're very helpful.

But WebBluetooth, ASM, etc are all fairly insane. WebRTC feels like a massive security issue (I've seen a demo of someone using WebRTC to find computers on an internal network at a security conference years ago. Even if that hole is fixed, it's still a hacky solution to video streaming behind NAT).

I agree; most of this stuff needs to have ways to disable it, in the base configuration screen of the browser (not hidden somewhere in about:config).
ZoteroBib
If nothing else more humans increase our collective potential intelligence to solve problems.

It's my my main issue with the anti-natalist movement: If theoretically everyone who believed in climate change agreed that anti-natalism was the solution, by definition within a generation the largest voting block would be the children of climate deniers. Which would actually make climate change much worse.

We don't need fewer humans, we need smarter/better institutions and more efficient technology. Every life born is one more potential option for a breakthrough.
Get things done quickly with app shortcuts
> injecting `AsRef` everywhere adds a lot of visual clutter

I agree!

`fn foo<T: AsRef<str>>(s: T)`

This is so difficult to read, one has to jump back and forth with eyes to make any sense of these. Why couldn't there be easier syntax for "AsReffing"? E.g.

`fn foo(s: @str)`

I invented @-sign there.
Add to that, it's a research mission down another gravity well.

There are so many practical advantages in a Moon base that I don't know where to start. It's very surprising to see them ignored in every discussion about relative merits of the Moon respect other options. Maybe they've been forgotten because much time passed since Apollo.

The main point is probably that the Moon is not another gravity well. It's a much much weaker gravity well. Take a look at the Saturn V and then to the LEM. Of course the former had to carry the later and the other modules. But still, only the upper half of the LEM was needed to put two humans in lunar orbit:

https://youtu.be/sj6a0Wrrh1g?t=171

Another important point: you can cover habitational containers with regolith to provide a good protection against micrometeorites.

Eventually factories will be made. Unlike humans, you don't need to take stuff from Earth, saving tons of fuel. The only things that seem to be a problem to make there are fuel, and oxygen because there's no water. Solar energy is even stronger while not at night, obviously.

Oh and "research project" is a way of talking. You can say "exploration" as well, eventually "industry".

Edit: a couple of advantages more, that I don't see mentioned. One that the Moon has gravity and a surface. That means that humans can work more like on Earth and storage is much cheaper to build.

And another one: if a way to make ships or fuel from lunar materials is found, it would help any other mission. Taking cargo from the Moon to Earth orbit is much cheaper than doing that from Earth surface. Even if you plan to go to Mars or the asteroids, a Moon base is a great thing to have.
It's been pretty effective up to age ~13. I'm not really sure after that, as I don't really bother to monitor.

I've blocked malware too by having DNS controls, presumably that won't be possible with DoH: Chrome (without addons) might check to see if I've set a local DNS provider but ad-/app- embedded malware won't.
The CyberTruck will have power outlets on it's bed and the reason they are adding the bidirectional capability now people are guessing is because they are on the verge of coming out with their so called million mile battery that has negligible degradation unlike current batteries which makes all the features you describe have negligible effect on battery life.
I'm sorry if it sounds condescending. It really is the truth. When it comes to a child, it's only after experiencing both sides that one can truly decide which is better.