skysight-inc/HackerNews huggingface dataset:
> In seriousness, this is all because websockets aren't bound by CORS, for good reason. https://blog.securityevaluators.com/websockets-not-bound-by-...

As far as I can tell, that article only explains that WebSockets aren't bound by CORS. It doesn't provide a reason (good or otherwise) why WebSockets were designed that way. Personally, I consider that feature to be a design flaw. If WebSockets handshakes respected the Same-Origin-Policy and CORS headers the same way every other HTTP request on the web does, none of these vulnerabilities with poorly implemented WebSockets servers would exist today, as they would be secure by default rather than "insecure unless the server properly validates the origin header on every handshake".

Probably too late to do anything about that anymore though. Changing WebSockets to respect the Same Origin Policy now would break a ton of websites.
It has quite a lot to do with many people's first experience of prolonged WFH, though.
> tried to convert it by renaming the HEIC file to PNG. Changing a file’s extension does not guarantee that it will be converted, but Spencer was still able to submit the demo test with no problem.

This should really say that changing a file's extension will (almost) never mean that the file is converted.

Anyway, it seems like today's students have missed out on the arcane knowledge of renaming a jpg/mp3/whatever to .docx, submitting it, pretending that it got mysteriously corrupted, and getting an extension until whenever the professor realizes the issue. (I've never done it, but I've heard legend.)
Again, not everyone wants to progress all the way to the top in their careers. The higher you go, the more your job changes into helping people help people help people do the actual work, which isn't all that appealing if you chosen a particular career because of the lower-level work being done.

It's like in Star Trek, with this common advice to given to captains on the show by their friends/colleagues: never let yourself be promoted to admiral, because you'll be taken off the starship and put behind a desk to push paperwork, and that is just boring.
Isn’t Facebook competition?

But I don’t see why that matters. If I can’t get published in the mainstream media, but I have plenty of options in the alternative media, is that censorship?
I'm disappointed today's general purpose CPU's and microcontrollers don't come with some integrated FPGA space, similar to how you have SRAM and other peripherals. Intel talked about it a few years back [1] but I'm not sure anything materialized.

The closest I've seen in popular chips is a few gates worth of programmable logic. Are there any hidden gems I've missed out on?

[1] https://www.nextplatform.com/2018/05/24/a-peek-inside-that-i...
Here are quotes from some Google Books (not all particularly poetic)

"The dim glow of the light revealed a pair of feet"

"The dust revealed a group of riders returning"

"an inrush of air, clearing the smoke, revealed a scene of utter devastation"

"When a 30-MW Q-switched ruby laser was focused into water, the resulting spark revealed a blackbody-like spectrum with a temperature of 15,000K"
People are a lot more capable than you think. There's a pretty vast oversupply of talent and not enough jobs to fill them. As a result, you have people who are capable of becoming so much more ending up in menial, low end jobs.
It's probably good for hiring, but awful for freelancing.

They still have $1k of my money (well money I earned through a client) because they banned my account without explanation!

I haven't used them in years, maybe they have gotten better.
Sabre. Which was originally part of American Airlines. Sabre's mainframe still powers American's booking and operations infrastructure.
Best Homebrew Packages for Mac
No, it's not.One won't enter the market today,as it'd take 6-12 month to get to the point where you know the basics. Such a person wouldn't be competing with those from Uber,as the level of seniority is completely different. 100% junior dev jobs may be hard to come across over the upcoming months, however there are tons of jobs out there that would absolutely benefit from having someone who can write even basic scripts.
This to me is the real argument: those who can demand a high salary regardless of geography, and those who can only demand a high salary _because_ of geography.

The mistake is many people in the latter group think they are in the former.
>Total censorship doesn't happen overnight. The gates slowly close little by little.

beautifully stated. Or the more common "boiling a frog slowly"

If we do not fight for our freedoms, our children will get used to the reduced freedoms as a 'new normal' and it will only get more repressive
One of the most interesting aspects of the VexRiscv is the way it's implemented. The VexRiscv is written with SpinalHDL, a hardware description library in Scala. But that's not the main thing: in additional to Verilog and VHDL, there are other ways to write RTL, from Python to Scala to Haskell.

What's really special is that the VexRiscv is constructed from a large number of plugins that split up the design 'horizontally' per feature instead the traditional 'vertical' way that is pipeline-stage oriented.

It makes it possible to implement all aspects of, say, a new instruction in one file, instead of spreading it over many different files.

I've written about that here: https://tomverbeure.github.io/rtl/2018/12/06/The-VexRiscV-CP....
> LanguageTool: By default, this extension will check your text by sending it to https://languagetool.org over a securely encrypted connection. No account is needed to use this extension. We don't store your IP address.

Honestly I'd pay good money if someone invented a competitor to this, Grammerly, or Ginger that was all local (an actual usage for machine learning/NLP!). It doesn't need to be perfect just better than the bad spelling/grammar solution built into Firefox, and more private than these services.
I understand and certainly see where that could be the case, especially for steady-state companies. All I'm saying here is that in the context of the current situation, where you have companies transitioning from non-remote to remote, it's likely in your best interest to wait a bit while the company has to deal with how to evaluate/train/communicate with a mostly remote workforce. In the worst case you have to deal with the office for another year or so with no change. In the best case, you are better positioned for a promotion/raise. Either way, you will learn how others are managing remote work throughout the year.

I'm on the long-term-remote path, but I want to see how this plays the rest of the year before making the jump.
Wall Street is pitching in for the climate crisis
Social and legal norms give parents astonishingly broad powers over their children's lives; this is indeed an important decision, but not any more important than the other things parents can decide uni-/bi-laterally.
"open source tool"
Extension devs are notoriously lazy in that they just build first without thinking about the bare minimum permissions that they need to function.

I believe Pushbullet got caught using too many permissions recently.
>Wondering if The Intercept belongs in the nether world of "news" organizations (read: thinly veiled propaganda outlets) along with InfoWars, RT, etc.

It's worth noting that the submission is a link to The Gray Zone, which in my view falls squarely into that category. Their founder Max Blumenthal is a frequent contributor to Sputnik and RT. He also attended the same expenses-paid 2015 gala in Russia, celebrating RT's 10-year anniversary, at which Jill Stein and Mike Flynn were photographed sitting with Vladimir Putin. Flynn was later caught lying about taking payments from the Russian government in connection to the event:

https://www.motherjones.com/politics/2017/05/flynn-putin-din...

One month after attending this gala, Blumenthal founded The Gray Zone. Its funding sources remain opaque. He also did a 180 from his earlier anti-Assad reporting to become one of the dictator's biggest supporters:

https://www.commentarymagazine.com/articles/bruce-bawer/usef...

He's also published pro-state narratives for other dictators. Here's a 2019 video of Max cheerfully receiving honors from Venezuelan President Nicolás Maduro, who has ruled that country by violence and decree since 2015:

https://twitter.com/NicolasMaduro/status/1156588153945427970

And here's a piece that goes into detail on errors in The Gray Zone's reporting from Latin America:

https://medium.com/muros-invisibles/grayzone-grifters-and-th...
For me I don't think it's meeting fatigue, I have about the same amount of meetings as before. But I also noticed a similar productivity spike. Unfortunately what I think is happening is that we are using up a built-up "social capital" from when we were in the office together. Many of the people I know to ask for quick questions/favors I know because of hallway/lunch conversations. As new remote devs rotate onto my team I feel the team is becoming more impersonal and I am more reluctant to ask them things or help them. And likewise I think they are less likely to ask for help to get unblocked, than they would be in office.

But FB people ops (or beyond) aren't stupid and hopefully they can come up with ways to intentionally replace this. Won't be the same but something is needed and will be better than nothing or ad-hoc.
> The iPhone is the best selling model in the United States.

That's an interesting (and slightly misleading) way to present that statistic. Apple has the best selling models, but does not have the majority of the market by operating system, which is what matters here. It's close, but Android is still supposed to have over 51% of the US market.[1] (If the graph itself is occluded, see the summary below it).

> It is on College Board to support its default image format.

It's a minority platform. It's only a slight minority, but it is one. If you want to make a case that they should support any default format for a platform over a certain percentage of usage (or "almost half"), that's fine, but you can't rely on the obvious argument that it's the dominant platform and thus should be supported, because it isn't the dominant platform.

Edit: Whoops, forgot to include citation

1: https://www.statista.com/statistics/266572/market-share-held...
>From the other responses in this thread, it seems like the admin of the nodes/cluster is not overly onerous. Would you agree with that statement?

Yes.

>is there any tradeoffs to running Rabbit on Windows, as opposed to Linux?

Should be fine to run on Linux assuming you (or you have) people are who are comfortable admin'ing Linux servers. I think that a Windows admin would get frustrated to setup/configure RabbitMQ on a Linux server. There's also a container advantage as RabbitMQ is published to Docker only with officially maintained Linux images.

>We're not ready to jump onto a PaaS solution for the things we've grown accustomed to managing, but for something brand new, I think my company would be open to it.

I'd push you to figure out why Azure Messages Queues would not work for you. If there's no compelling "no" argument then you'll thank yourself later.

>Architecturally, we'd lean on it initially for background job processing, which is currently at a scale where our homegrown, db-backed solution is starting to show it's weaknesses.

We pursued RabbitMQ for very similiar reasons (queueing mechanisms via SQL Server tables and stored procedures). Keep in mind that you still need something to submit the job (initiate the background task). RabbitMQ is not going to automagically schedule anything for you. We have a couple applications that use the tool Hangfire for job scheduling and in one case, the Hangfire job simply sends a message to RabbitMQ.
Qt, Xamarin or Flutter? Which is the best tool for cross-platform development?
I have been a Qt developer for quite some time and I love the Qt ecosystem, however I always felt like I haven't really explored the other options in terms of cross-platform development. I hear a lot of buzzword with Xamarin and Flutter, but never really wrote anything significant with them. To those who have experienced Flutter, Xamarin and Qt what has your experience been and why would you choose one over the other?
Name a better location to monitor a terror organizations activity (for investigators). Makes the feds' jobs easy.
I watched an interesting, somewhat, kind of related video on this today. Although it doesn't quite answer your question about what happened to him, interesting watch nonetheless and quite informative. https://www.youtube.com/watch?v=p8N0xN0ihMA
I suspect you are right and most of the top talent is in major cities but even then most faang jobs are in the bay area. Anecdotally (and with all the caveats that go with that) I wanted to work for a faang but turned them down several times until an opportunity came up in DC. I have other friends in cities like NYC and Chicago in the same boat. They dont want to leave their current city and even if there is a faang presence it may be small (chicago) or their area of focus doesnt match with the teams in their local faang office (nyc)
Firstly, I agree with rcoveson; there are a lot of complaints to be made about your second paragraph. Including that "a teenager ... that might die" is emotional misinformation - they almost surely won't.

The difference between governments doing it and YouTube doing it is that people do have the practical choice of leaving YouTube if the situation is deemed intolerable. Up until that point there isn't a practical difference between YouTube and China if they employ the same censorship methods.

> And that YouTube isn't taking steps to cover up what they've done.

The Chinese government isn't exactly subtle; they are promoting peace and harmony through censorship. A lot of people died in the last Chinese revolution & aftermath - they do have a reasonable argument that unstable government will kill people. It is just we know from experience in the west that transparent democracies are more stable because problems tend to get dealt with when they affect large groups of people.
Waiting in Asyncio
> I've read a few of these work from home related articles here on HN and I have to say, I'm super surprised by how many people are both vehemently against the idea of remote and generally pessimistic for what it would mean for society.

I can think of one big reason why HN readership is suddenly worried about the prospect of universal WFH: they realise that the supply in the labour market is going to suddenly double. No longer will companies be able to justify paying them huge amounts of money because people from all over the world are just as good and able to work for much less.

Remember a lot of people here are now addicted to money. They don't much else in life besides that.
My Journey from ‘Zero to One’: Engineering & Analytics
I built my career in engineering & Analytics and now venturing into Machine Learning and startup. Follow me on twitter to learn the latest.
I think the dip might be a blip because they were profitable for 8 years before she bought them a couple years ago, and they were continuing to do great until the pandemic.

It's a difficult question because I don't think she should be able to have this much power in the first place, so it's hard to say what the most ethical way to wield that power is. I don't think she is obligated to employ as many people as possible for as long as possible.

My basic point is that the magazine is still reaching more people than ever before, it's still achieving its journalistic purpose, so why not use a tiny portion of your immense power to keep these people around for a year or so and see if economic conditions improve. If there's a fundamental shift in the business and, for example, it seems like live events are never really going to happen again, then it's time to let those people go.
In the UK there's the common law notion of a "reasonable expectation of privacy".

If you're in public then you don't, generally, have a reasonable expectation of privacy, but if you're at home or at work then it's a different story.

As far as I'm aware, though, this hasn't been tested in court since the GDPR has come in to effect, but I would be surprised if the (UK) GDPR is not interpreted with that principal if and when it does.
The perfect to do app is the one that forces me to use it after I forget about it and lose interest.
Wait. There's a way to get safari to upload HEIF without conversion? All my photos, which are HEIF on my phone, turn into jpeg when I upload them. I've been trying to get the original HEIF off for months.
It is much worse than that. Some of these mods are on the moderator list for 1000+ subreddits, many with 100,000s or millions of users.

They obviously don't have time to moderate all of these subs.
No. My claim is they are failing because everyone with a single neuron in their head already knows their position on this issue, and they do not seem to be capable of offering a perspective on anything else anymore. Their "reporting", if you could call it that, is 100% predictable, and is, therefore, not worth wasting one's time on.
Thats a good point thanks
this actually makes sense. Maybe I was wrong about PHP. But maybe not :)
Are there many applications that would benefit from having it on die versus across a few PCIe lanes? AFAIK putting it on a card would still grant it the same full speed DMA it would have being on-die with the CPU.
With the transition of compute from performance focussed to performance per watt focussed (due to cooling usually being the limiting factor), the niche for the FPGA has almost vanished.

There are very very very few compute tasks where an FPGA solves a problem with better performance per watt than both a CPU and a GPU.

I would bet that emulating a RISC-V program on x64 is far more power efficient than running a RISC-V core on an FPGA for example.
Also, if Redis 5 is already part of your stack then you should look at their Streams feature before adding anything like RabbitMQ or Azure MQ.

Unfortunately streams were released after we introduced RabbitMQ to our application and I really wish we could just focus on Redis.
The bay area offers a guaranteed supply of qualified employees.

A tech firm in Boise might not be able to hire and Elixir developer at any price.

In SF, there will be employees as long as you have cash. Not so elsewhere.
It depends what she did instead. If she just left her money in the bank, no, that's worse. But it would have been more ethical to spend her money in a way that wasn't exclusively dedicated to making more money. Maybe start a collectively owned media organization where power isn't concentrated in one person. Or donate to an existing nonprofit media organization, where revenue is more closely correlated to social impact than the economic health of third party advertisers.

Basically just stop trying to make more money. You don't need any more. Do something to make the world better.
In most cases, less than €500M.
I just created an account just to answer you.
Yes, endmyopia.org is great. The same way we develop myopia, we can revert it naturally in 99% of the cases. I was really skeptic at the beginning, but if you participare in the forum, read a lot and follow thousands of people taking part of the process, you will belive it for sure.
This already happens. FB employees working in London make less money than those living in the US because adjusted to the local market.
The fact that it fits in the 35T version with room to spare is pretty huge, especially since certain packages of the 35T start as low as $35 for a single chip, no MOQ.

I could see myself dropping one of these on a homemade project if I ever spend the time making a reliable reflow oven...
It's probably about time we start discussing as a developer community how to take meaningful actions to curb this behavior. Putting the particular topic details here aside, I think everyone can agree it's very troubling that a platform with as much power as Google is actively censoring speech they do not agree with.

Not sure what the best action points would be, but I'm thinking we start by speaking with our companies about redirecting ad-spending away from Google, pausing any active development related to integrating Google products and seek out alternatives, removing/replacing Google analytics (since this is where tons of value is created for Google and allows them to follow users basically everywhere), and seriously talk about unionization next-steps. Thoughts?
That was so much more perfectly succinct than me. Thank you for capturing it so well.
These microorganisms convert light into energy using a purple compound: https://en.wikipedia.org/wiki/Haloarchaea
I could see UBI as an alternative to federal government spend.

E.g. every time I hear about the U.S. sending billions to the middle east, I wonder how much more effectively it could be spent in the hands of thousands upon thousands of americans.

It’s almost like implementing something closer to direct democracy instead of representative republic democracy in regards to spending...
Read here: http://archive.fo/8TepH

Almost a year old, BTW, though I doubt much has changed. It does anecdotally seem like pro-Trump people are a lot more chill about differences.
> Can you expand on what that means?

Not OP, but the way I understood it was that the court already holds hard evidence confirming the statements to be undoubtedly true.
Language Tool which you linked to is open source, GPL licensed. It's "okay".
It is a common social custom in my circles to not use one’s phone when visiting the homes of others as a guest, a faux pas on the same order as bringing an uninvited stranger along as your guest in a visit to someone’s home.

Taking non-macro or identifying photos, especially of the residents or other guests, would be quite rude without advance permission.

I grant that many of my friends and associates may be more privacy-oriented than most, but it isn’t just tech/nerds-who-use-Tor.
there's free libraries, I used a bunch of them. I guess I'm just asking you to trust me that's its not nearly as good as in Java. C# is a better language, there's no question. But I jumped off the MS bandwagon years ago because there just wasn't the community support that Java has, for better (or probably) worse
Actually, it was data-driven. She reportedly looked at how many people who were WFH were actively using the company VPN.
What's the insight here? Since customers pay the business (read the owners) the least amount it costs them to replace the company with another qualified business.
I don't know what immigrants mean here. Like migrant workers or illegal immigrants?

Otherwise, we are a country full of immigrants who have become citizens or legal residents and would benefit from UBI.
People look at "modern frameworks" and they're so easily impressed by what it can do. But, it's very short sighted. If you're project expects you to implement a feature that doesn't work in that framework, all the sudden you're going to have a huge productivity disadvantage.

It's better to learn actual web development: HTML/CSS, javascript, jQuery. Learn how to manipulate the DOM and not expect a library to do everything for you. In the long term, it's much more productive.
Everything you have said is generally true. My point is that there are scooters driven where I live, that most of them are driven by low-income people who are in the presumably-uncomfortable position of a scooter being their best option, and that noise regulations would be an indirect regressive tax against them.