skysight-inc/HackerNews huggingface dataset:
This may be true, but I have had US websites flat out refuse me access because they detect I'm in Europe.
Open up a thread here https://krita-artists.org/
Mining billionaire gets help from ex-spies in bitter legal fight
> "In France, Le Monde (most famous daily newspaper) requires you to send a paper mail (and not a regular mail, but a registered mail, which costs around 5-10€) to cancel your subscription."

What is it with French companies? BlueCity, the UK arm of the French "Autolib" car sharing service, had this same ridiculous "send us a letter in the post to cancel" policy. Since they charged to a credit card rather than use direct debit like most UK companies would, you couldn't easily cancel the payments through your bank either.

Since I'm quite lazy I never got around to sending them the letter and the £5/month continued (and I did use the service, occasionally). Finally a few months ago they went out of business and the charges stopped.
Neat list. Thanks.

I have chronic graft-versus host disease. Side effect of a bone marrow transplant. Mostly effects my skin, which changes color, gets thinner, and in advances stages hardens (aka marbleization).

GVHD is wicked hard to diagnose, monitor. Skin biopsies and normal digital photos.

I've asked my misc doctors (at FHCRC, SCCA, Univ of Wash) over the years about using UV to better diagnose skin conditions.

Now I'm wondering if OCT could also be helpful, perhaps for assessing the scarring.
Tails is a operating system that protects your privacy and avoids censorship
You can ask people here, https://krita-artists.org/
If you don't use SaaS blog platform and host it on a VPS it counts as self-hosting?

In this case shared hosting will be even cheaper and maintenance free. System, server, Let's encrypt cert, database and language updates will be taken care of. Many of those PHP CMS-es or blogging systems have a one click updates in place. Some shared hosting providers can also take care of this for you. You can get something with ssh access and rsync so you can be lazy and edit HTML with Word and just sync it or an SSG if that strikes your fancy.
Their is nothing like a bug free code as a result of the programming language used . RUST programmers are like the new version of those Haskell programmers that spams every functional programming thread with a message that tldr: "write everything in Haskell or die "
The transformation of the porn industry under coronavirus
I'm working on a service [1] that aims to make coding backend easy from your machine.
No need to set up local infrastructure, staging environment, or dev environment. Have a copy of your production data and just code and get real-time feedback.

[1] https://foundryapp.co
Freelancers and IT workers around the world know that too well
Good question: why is Krita not on F-Droid? Probably a matter of time and effort, not a technical reason. I guess they sensibly got into the most visible marketplaces first.
Sounds like https://observablehq.com/ ?
What are the downsides? And what's their business model?
You apologize for your actions, not because someone had a reaction to something you did. I suggest therapy.
> Indeed the goal is to limit the size of JWT tokens.

At work we just implemented some M2M auth using JWT[1]. The other party requires a full certificate chain as our identification and RS256 as algorithm, so our "compact" tokens end up around 8k in size.

At least the auth token we get back lasts a couple of minutes.

[1]: https://difi.github.io/felleslosninger/maskinporten_protocol...
This reminds me that Tesla itself is starting to offer insurance, and it can do so at a much lower rate. I assume this is because:

1) Teslas crash much less often, mostly due to autopilot.

2) Tesla can harvest an incredible amount of data from one of their cars and so they can calculate risk better
Very nice! Got it working on WSL and will have a look. Been looking for some utility to manage my tasks other than a piece of paper.
Thanks for sharing this
“I Am Only Earning $300 a Week”: Heres What People Are Making for Essential Work
> What can be done with this information?

It will reveal if they're working right now, what time they work otherwise, their IP address, their approximate physical location, their internet provider. A lot you can do with that.

> Most companies have e-mail addresses that are completely predictable

That's the point. Predict an email address, send it, find out if such a person works there.

If I email unusual.name@sis.gov.uk and they open it then guess what I've worked out?

> Also how do you as an attacker know that it was user not a e-mail server checking those images?

Agent signatures.
This corresponds to the 30 days allowed for GDPR:

"Under Article 12.3 of the GDPR, you have 30 days to provide information on the action your organization will decide to take on a legitimate erasure request. This timeframe can be extended up to 60 days depending on the complexity of the request"

I deleted my account today and will issue a GDPR request if It doesn't get deleted.
I used DCC for years behind NAT, just forwarded a port range and configured my client to always use that port range. It takes a minute to set up, but then it's seamless.

I have UPNP turned off, but can't it do similar, automatically?
32 per cent? Is their % key broken?
Relevant: https://publiccode.eu
That's an excellent point.

While we should reach for prior art, something like this bit of python is good for the hip pocket for those moments when PlantUML might not support some zany requirement.
> Currently hndisq will load the comment posted by you only.

Well that doesn't seem to be the case, because on your blog post it's loading this discussion, including comments by us both.

> When your blog post page loads it will send two things to hndisq.

OK, so there is more going on than just the given parameters. You never mentioned that.

> One is the username (ColinWright) Another one is href of the current blog page. (https ... /BeingSlowToCriticise.html?te1...)

OK, so on page X you include the snippet. That snippet includes ones username. But when the snippet executes it sends that username and the referring page. OK.

> So I know your username now and I can get all the submission from HN based on your username.

Yes.

> And I will use the href to identify the correct submission.

What if the page has been submitted more than once?

> Once it found the submission it will use the submission id to load the comment.

Right.

So the questions that remain are:

* What if the submission has tracking information in the URL, so there isn't an exact match?

* What if there's more than one submission?
Anything using fossil energy also has such hidden issues.

And you have to consider the ecosystem:

- fossil fuel engines require much more maintenance than electrical engines, and now vehicules always embed heavy electronics anyway.

- fuel need to be transported at a heavy cost, which is now hidden by the massive demand. The day we use more solar than fossil, the whole fossil infra will suddenly feels very expensive

- most countries are not like the US and don't have oil on their soil. Countries don't like to be dependant on others for critical things. You may buy solar panels (or fuel engine) from a friendly country, but if things turn out badly, people can't cut sunlight from you one the initial setup is there.

Nothing is perfect of course, but I like the solar future we are hinted at.
I recall several European nations switching government systems over to Linux only to have Microsoft worm their way back in a few years later. Let's hope it's permanent this time.
Yep, Monday is a holiday (if you happen to have a job, and have a job that gives paid holidays)
Surveyed 892 people: Coping with sudden remoteness amid COVID19
The intro of the text makes it look more like a cost cutting measurement. Luckily the end states that “publicly financed software developed for the public sector should be made publicly available under a Free and Open Source Software licence. If it is public money, it should be public code as well.”
Debian - or Devuan if you don't want systemd - can be made as spartan as you want. It boots in those mentioned few seconds on my 15yo T42p (Pentium M@1.8GHz, 2GB). Use Sid/Unstable if you want more up-to-date software with the accompanying larger flow of updates.
If that is not a rethorical question, here are my thoughts:
Consumer protection laws/rules can actually help establishing a better marketplace.

Example: DSL Connectivity.

If there are only a few market participants and the allowed lenght for contracts is 24 months, it will be 24 months. This is bad for a number of reasons to me:
- First, a different (and hopefully better/cheaper/cleverer serivce needs to "endure" that only 1/24th of the customer base per month could change. That is also the problem for customers who have issues with the Provider.
- Second, this gives incentives for what I call "dishonest" offers: Marketed as "half off", its only half of the first year (or only six months), then full price for the rest. Hacker News is full of people who are good at math, but this appeals mainly for people who are not. Or who don't have the choice when they are already short on money.
- Third: Part of the calculation is the rate of people who might not use the service to moving, death, etc. - and I don't want the company or me be part of that.

When it comes to other types of contracts (mobile operators, gym services, ...) the stabiltiy of income is still guranteed with shorter spans if you provide a great service. This is proven by markets where these types of protections exist.

And netflix shows that you can even go month by month. I believe thats also because people can buy dvds/blue rays, rent/buy online, go to cinemas, etc - so there are a lot of competing options, forcing you to excel in service. And thats vs. "free" bittorent, rogue streaming, too.
Totally 100 million %

All conversation starts with breathing and we pick up on all sorts of signals even when people are trying to pretend otherwise

I've often said whoever controls the breathing controls the conversation and I say this as a former professional conversation instructor

People don't take hardly enough advantage of their lung capacity maybe with COVID we'll start taking this into consideration

I have a story to relate

I was working at a large private software company, the largest in north America think SalesForce but not SalesForce

The CTO was giving what was intended to be a pep talk but for some reason maybe nerves maybe he wasn't warmed up on the mic we could hear his wheezing breath

Nobody paid any attention to the message all anyone could talk about was the quality of his breath -- anything he had to say was completely lost

This article is another example of the mainstream only now catching up to things which we all know and have known for ages

People communicate on the level of subconscious and physiological signals and it's useless to pretend otherwise
https://www.shape.com/fitness/cardio/4-minute-fat-burning-mi...

Tabata
It does enforce HTTPS - what are you talking about?
Even a small business might have an employee visit europe on holiday, and then you're screwed.
>Unlike the Windows and Steam store, we don’t ask for money for Krita in the store, since it’s the only way people can install Krita on those devices, but you can buy a supporter badge from within Krita to support development.

I wish more free software projects would do that. You can download Krita for free but if you want to support the project you can buy it from Steam or Windows Store.
There’s a small asterisk to this in that it says “No Native Dependencies”
.” This is true for Expo which comes with a couple of libraries for Reagt Native with native bindings to iOS and Android (and also for Web)

A lot of fluid animations and interactions in React Native are finally not that much of a hurdle anymore thanks to react-native-gesture-handler and reanimated, which are brilliant abstractions that fully offload work to the native thread and don’t interrupt interactions due to work on the main thread.

React Native’s own primitives, like Animated, can only go so far until they require intervention or activation from the main thread.

These libraries by Software Mansion have basically become a “must have” for creating compelling apps in React Native.
Google assistant circa 2012 felt a bit like this already... and then scope creep made things too dumb for me to even use.
What if it's a rental or a lease? In a fully automated car, that's basically a taxi. I don't think I should bear the responsibility of my taxi driver.

If/when we get fully automated cars, this kind of driverless Uber will become extremely common. Who bears the risk then? This is a complicated situation that can't be boiled down to "Of course the owner is to blame"
Show HN: Who Pays Technical Writers (Beta)
Shouldn't that exactly be appealing to the talent, not having to worry about the company claiming their side projects as their own?

I very often work on my side projects and it is quite an annoyance having to move around with 2 laptops or paranoidly erasing my personal work from company computer.

Also from my experience working at a fang like company they definitely don't seem to lick every penny. We have company laptops because of security reasons, but phones are bring your own which they pay for. Also they pay for WFH office equipment as long as you can reason it makes you more productive or is good for your health. Basically anything that makes you more productive or sustainable they will pay for.
Did the agent eventually stick their hand into X-ray machine to fish out the balloon? If so, did they have the sense to at least turn off the machine first?
Yes, they're loanwords.
In addition to open sourcing their own software, I hope governments and the EU will pay developers and maintainers of open source software they use.
That's the one! I should have been googling some combination of 'notebook' and 'magic' it seems. Thanks for your help :)
Always makes sense of having a separate card for online stuff (shop, subscriptions, etc). But having to go to the bank and renew, create a new one, the waiting lines.

Some banks have web/mobile banking where you can restrict actions/limits/transactions, so it's a good option too.

Others have virtual cards for this purpose, but these are not offered in a lot of countries (revolut, privacy, yandex money, etc).
past, https://news.ycombinator.com/item?id=4756898
Got an email. About the RBI bit - possibly, but I don't think I remember one without OTP or a password (it was verified by Visa I guess or something).
Even more fun if you're a foreigner visiting and no constitutional protections apply to you in the first place.

Haven't had my phone searched yet but the last two times I've crossed the border in the Niagara area for short ski trips I've had my car searched, been held for an hour, and a bunch of hostility directed my way.

The fear that the next time around they'll force me to unlock my phone and waltz through my Facebook profile etc. means that even after the border closure and lockdown is lifted, I just won't be coming to your country and spending money there anymore.
That's hard for humans too. I think we need to give up on the idea that fully autonomous driving will be perfect.
There's enough accessibility guidance and testing tools in the world, especially now that Deque have added premium features to AXE. The problem is product teams/squads not actually using the guidance and tools available to create fully accessible user experiences, the root causes of which are many.
I think there's an app called phone app or something.
What you say echoes my experience, I see a lot of apps on the Play store say "pay 1.99 here or get it for free on F-Droid", which is fair. I usually even pay the money even though I have F-Droid installed, just to support the dev.
> 25(2). The controller shall implement appropriate technical and organisational measures for ensuring that, by default, only personal data which are necessary for each specific purpose of the processing are processed. That obligation applies to the amount of personal data collected, the extent of their processing, the period of their storage and their accessibility. In particular, such measures shall ensure that by default personal data are not made accessible without the individual's intervention to an indefinite number of natural persons.

You may wish to consult your privacy attorneys; you'll likely be the subject of a number of GDPR complaints considering the above.

My interpretation of the above if you were to do it within the letter of the law (again, talk to your attorneys; I'm just a security director):

1. opt-in via settings page (or a modal on next login) for all people who already have accounts.

2. opt-in during registration for all people who choose to register accounts after the roll-over date.

Again, talk to your attorneys. If you successfully roll over without having taken the suggestion to talk to your attorneys, your conversation with your attorneys may change from "how to best implement this" to "how to avoid getting fined."
I’m not so sure about that. With enough dedication and time I think you could target a specific company from HN. Start writing a few good blog posts that would appeal to your audience, only run attack when some attribute is true to that company (i.e. their Corp IP addresses).

You could even combine the two. Post the blog to hacker news, then send phishing email pointing to HN post. That is a trusted link. Then the user will likely click the source link in HN.

Obviously, a lot harder and lower chance of success, but not impossible.
Ever since Weber took it over the app is a piece of shit.
Several have noted email rules set up to flag phishing simulation emails. Anyone care to share one of those rules?
If I pay for something, I want to own it. Revocable-access[1] subscription-based services are just a form of rent-seeking, and I'm deeply concerned about how this affects our society. As such, I'm not a direct customer[2] of Netflix and likely never will be.

That said, I think it's important to acknowledge when people you disagree with do good stuff--this is how we make sure that our disagreements are based on principles and logic rather than grudges.

Of the subscription services out there, it's my impression that Netflix is one of the best. They avoid a lot of dark patterns, and this latest action of not charging customers who don't watch is a very upstanding action, especially since it cuts into their profits in a really direct way.

There are still complaints I have about Netflix[3], but the real heart of the issue is that this cannot last forever. There's simply too much counter-incentive for a company to walk away from a revenue stream like this. And with a subscription business model, there's nothing to keep them honest, because Netflix has all the control.

[1] This is a term I'm basically inventing on the spot, based on something I've been thinking about lately. Physical print newspapers were subscription based but they weren't revocable-access: you received the newspaper on subscription, but once you received it, you owned it. This differs fundamentally from web-based subscriptions. With web-based subscriptions, if you let your subscription lapse, the site revokes your access to content which you previously had access to.

[2] Most people around me have Netflix subscriptions, so I end up watching a lot of Netflix with people, despite not having an account myself.

[3] a) Patterns that manipulate dopamine response. b) Glossing over credits so content creators don't get credit. c) Monopolistic practiced with regard to tethering content creation and content distribution together.
Pepsi is not the official sponsor of the pandemic
LAMP for the win
Happy to get feedback!
Hi HN,

This is a list of 42 publishers known to pay for technical content. I hope it can serve as a resource to people who want to write articles and tutorials on programming and related topics.

Please use the contact form on the site or leave a comment here to let me know what features you would like to see and which publishers are missing from the list. This project is still in its early stages and I'm hoping to make some big changes to help people find good clients.
I think I'm in the same boat. I have a rpi, installed home assistant before, I do devOps/sysadmin stuff, setting up virtual machines, docker, creating and contributing to open source etc etc...

... buuuuuuuut, having looked at the article, my eyes started to glaze over, and a sinking despair sipped in quickly... I want to love this, but I just can't bring myself to. I guess I'm at this point of giving in and getting a Sonos :(
Batteries degrade while in storage and they degrade with every cycle.

The best you can do is never store it fully charged. Never discharge it fully. Modern tools never let you do that, but if you store a "discharged" battery it will fully discharge(by self-discharge) over time.

The best way is to charge it to 3.7V and then store it and check it at least yearly.
I've had a German collection come after me for 2 years with payment notices. I had unsubscribed by mail (which they got) and some email.

They stopped last year after I wrote to them I considered I didn't own anything (a human probably read the file and dropped it).
Pretty much all misconceptions named there can be avoided by following the advice that every Rust programmer will give you: read the damn book, it will save you a lot of time.

If you are in the category of users that never RTFM, then I guess this article might be for you, but then kind of by definition, you won't read this article either, so...

---

For example, in C++ a generic `T` can only mean an owned type:

template<class T> void foo(T t);
template<class T> void bar(T& t);

You can't pass `foo` a reference to `T`, you'd need to pass it an owned type like `foo(std::ref(t))` instead or similar.

In Rust, when you write

fn foo<T>(t: T);

you can call `foo` with an owned type or a reference, no problems, generic types are... well... generic.

So if you start writing Rust code with a C++ background without reading the book, then you might probably think that generics in Rust work like templates in C++. One couldn't be more wrong about this, they are in fact completely different language features. They might solve very similar problems, but they are as different as Python is from Haskell.
In the US the culture is imploding, and 20% are without livelihoods, which might explain the opposite effect.
As always, you don't really want to go entirely by the headline. The mural did a bit more than trespass on a political vision:

Then, the World Telegram newspaper ran the headline: "Rivera Paints Scenes of Communist Activity and John D. Jr. Foots the Bill." Pliego says Rivera then decided to add a portrait of communist revolutionary Vladimir Lenin to the mural.

"He sent his assistants to find a picture of Lenin because, he said, 'If you want communism, I will paint communism,' " Pliego says.

On top of that, according to David Rockefeller Sr., Rivera added a panel that the family felt was an unflattering portrait of his father.

"The picture of Lenin was on the right-hand side, and on the left, a picture of [my] father drinking martinis with a harlot and various other things that were unflattering to the family and clearly inappropriate to have as the center of Rockefeller Center," he said.
As a security guy, this python seq diagram view would be super valuable as essentially a markup language for BAN logic for documenting encryption and key management schemes.

https://en.wikipedia.org/wiki/Burrows%E2%80%93Abadi%E2%80%93...

Oddly, I've never heard this called "security protocol notation" before, but apparently that's a thing as well.
https://en.wikipedia.org/wiki/Security_protocol_notation
As a non-dev intruder I have to say that I love SQLite. I do a lot of data-analysis and it makes everything easy, from fast SQL Wizardry to sharing the DB just coping a file! Just how amazing is that?!

It must sound naive to some of you, but the first time stumbled upn sqlite I was so excited!