skysight-inc/HackerNews huggingface dataset:
It is hard to convey how "sustainable" this feels to me. For the first time, humans have gone into orbit in a spacecraft that was designed from the ground up to be a commercial venture.

All of the NASA missions prior to this have an ambience of "uneconomical but useful". Even the shuttle, which was supposed to be this cost effective space truck, turned out to be not even close.

And the last thing I'm feeling is the amazement at how much technology has evolved to get us to this point. I imagined as a child that the Apollo program would lead to a factory of rockets that launched people to orbit, to the Moon, and even to Mars on demand. And seeing what SpaceX has done to get to this point, it is clear to me that was never even close to possible. The Russian program is great in that way. It shows what that path might have looked like. And yes we could have refined the making of F1 engines, the construction of boosters, and just pushed that, but that leads to a steady state that is below what you need to run a program like this with a net positive economic outcome.

So very impressed guys, congratulations!
Huh, my spam folder is also full of what I consider actual spam, not just phishing and devious stuff. I consider what amounts to the email equivalent of junk mail to be spam.
And the best part is that this is only the beginning! God I hope I live long enough to see human beings set foot on Mars.
I strongly suspect they've given the matter orders of magnitude more engineer-hours of consideration than you have. Yes, they have many other things to consider as well; that's why they have a lot of engineers.
Raspberry Pi for a Pi-hole
What a moment in time! As usual, they make it look so effortless.
Surprising how the suits, simpler looking interiors and interfaces seem to be taking over the old physical buttons and wires and what not.
Hats off.
Wondering the same here. That plus Youtube compression artifacts made this a teeny bit less enjoyable to watch.
Depends on the mission, for something like this it deorbits fairly quickly due to the drag of the low orbit. To geostationary transfer orbit it takes longer but the periapsis (lowest point) is low enough to slowly deorbit it.

Then we have launches straight to geostationary orbits and similar, for those the second-stages will essentially never come down and they end up positioned in a graveyard orbit.
I agree, I'd been singing a lot since I was 7, including touring Europe when I was 11. I didn't stop practicing at any point in there but also never had access to professional voice teachers because of the cost.

Taking a single course in college that got me a little one-on-one attention (just one in a class of ten or so) improved my technique so significantly that I can compare recordings of myself from before and after that class and it's night and day. I don't think I'd have figured out what I was doing wrong without that attention, but they were able to hear it instantly and recommend solutions.

And that's with a solid decade plus of experience in choirs prior to taking that class, it's not like I was a true novice. It's just really not as easy or obvious as it looks.
where is the ptacek rant about JWT?!
"We live in capitalism. Its power seems inescapable. So did the divine right of kings."

- Ursula K. Le Guin
The dissent explicitly lists:

> "factories, offices, supermarkets, restaurants, retail stores, pharmacies, shopping malls, pet grooming shops, bookstores, florists, hair salons, and cannabis dispensaries. "

I think saying religion is equivalent to sports is pretty strange. People clearly place way more importance overall on religion than they do on sports, even in a country that's pretty crazy about sport.

I would definitely argue that church is more important than pretty much everything in the latter half of the dissent's list.
I tend to agree. Seems dealing with expiration dates is just another burden without real security. If something goes wrong you have to revoke now and not wait for another year until the cert expires.
There are two rows of physical buttons below the touch screens along with a large manual abort lever. The physical buttons are used for manual docking.
That fits into the tooling category but it is a serious company.

I found one blog post mentioning Haskell but without much technical details:

https://hasura.io/blog/from-zero-to-hipster-haskell-in-produ...

I hope they write more..
The previous video on this got a big discussion last year: https://news.ycombinator.com/item?id=21164014
The locality is all equally continuous in all these cases.

Someone near the black-hole horizon will see nothing unusual, and will not experience a horizon unless they are accelerating like mad to stay there. But someone doing that in flat space will see a horizon too -- see the Rindler coördinatization[1] of Minkowski space. It even has an analogous Rindler horizon, which seems to emit particles from the Unruh Effect[2]. I say seems to because particle number isn't invariant under acceleration. An outside observer will see a particle detector go off, but will interpret the accelerated detector as causing the particles, rather than the horizon.

[1] https://en.wikipedia.org/wiki/Rindler_coordinates
[2] https://en.wikipedia.org/wiki/Unruh_effect
My understanding was that hollow point bullets allow the shooter to hurt someone without risking the lives of the people behind them. Not hurting “people just behind [your enemy]” is presumably less a concern in a war zone (than in a civilian setting) because they are presumed brothers in arms.

Did I understand that right?
From what I saw of Italy, the Pope was perfectly cool with waiting to congregate.
Oh ok, it seemed like different submissions, though. One is the livestream, while another is the actual video/tweet of liftoff. No worries though.
Even when boarding commercial flights, crew tells you not to fasten seat belts if they’re still refueling. Just in case you need to evacuate (of course it’s just a token concern, I would t expect to survive an airplane bursting in flames even if still docked.)
Feels low given the impact?
This is an amazing bug, I am indeed surprised this happened in such a critical protocol. My guess is that nobody must have clearly specified the protocol, and anyone would have been able to catch that in an abstracted english spec.

If this is not the issue, then the implementation might be too complex for people to compare it with the spec (gap between the theory and the practice). I would be extremely interested in a post mortem from Apple.

I have a few follow up questions.

1. seeing how simple the first JWT request is, how can Apple actually authenticate the user at this point?

2. If Apple does not authenticate the user for the first request, how can they check that this bug wasn’t exploited?

3. Anybody can explain what this payload is?

{
"iss": "https://appleid.apple.com",
"aud": "com.XXXX.weblogin",
"exp": 158XXXXXXX,
"iat": 158XXXXXXX,
"sub": "XXXX.XXXXX.XXXX",
"c_hash": "FJXwx9EHQqXXXXXXXX",
"email": "contact@bhavukjain.com", // or "XXXXX@privaterelay.appleid.com"
"email_verified": "true",
"auth_time": 158XXXXXXX,
"nonce_supported": true
}

My guess is that c_hash is the hash of the whole payload and it is kept server side.
Probably for the same reason their username is "mumblemumble" rather than "Ted Anderson from New York". This isn't Facebook; don't ask people to dox themselves.

If you want people to name and shame, ask for a list of offending institutions, not individual examples. (Also, fact-check that list, rather than blindly accepting accusations made by internet randoms, but that should go without saying.)
Why does the SpaceX droneship camera cut out?
Even the ISS needs burns now and then to stay up, so yes at that altitude it will fall down eventually.
Once Hawking radiation is produced at all, those are the same process.
How cool is it that we have a live view of the space capsule?
Lots to be learned at https://blog.golang.org/ismmkeynote
Even then there will be more flaws. I don't think it is possible to build a 100% secure system in the modern age of 22 abstraction layers between the atom to the data center.

Perhaps you do not understand the staggering complexity that lies behind watching a cat video on your iPhone. There are almost uncountable ways to break into the system. This is why there is a bug bounty program from every company - from Stripe (you could argue as a major software company in payment systems) to Microsoft, from Apple to Gitlab, every company has a bug bounty program. Why do you think they give out $1m for a serious bug? If they were not serious about it, that sounds like a big waste of time.

This kind of entitlement attitude is usually from people who've never developed a complex piece of software such as an operating system.
> Heck, you can literally run BitTorrent on a website using WebTorrent. You could force users to download and share copyrighted movies or other illegal material in the background without their knowledge when they visit your website

Yes, I wrote this a few times in threads like this but for some reason
this is mostly ignored. Having WebRTC enabled by default can get you in
legal trouble (at least in a country like Germany where lawyers send
you letters based on IP addresses).
That may be the case now but it was either different back then or neither their Oracle-trained DBAs nor their Oracle consultants was aware of it.

I was working with an even worse Oracle product (Hyperion) which had a convoluted homegrown script restarting all of the services on a number of servers to work around their inability to reliably handle database connection failures lasting more than a short interval. Before do that, they’d tried to get rid of the backup window but were told that wasn’t possible unless they could come up with a large amount of money for the license.
Not going to lie, I'd feel compelled to either completely fill, or completely empty that column.
The ruling wasn’t about whether churches should abide by restrictions. And it is ridiculous to frame it that way. A case like this probably would never make it to the Supreme Court. The question was whether it is discriminatory to open some non-essential businesses but keep churches closed.
No worries, we’ve all asked questions that can be resolved by a search at some point. :)
> I'm okay with Google trampling on my rights, in exchange for the things it gives.

That's fine, you're a consenting adult renouncing your right to privacy, and that's perfectly fine.

The problem is, Google is trampling on the rights of _all_ users by default, without any consent (consent, by definition, must be an INFORMED choice).
Thankfully our uptime services spotted this earlier in the week. I'm terrible with certs, so no idea why a cert we brought this year is even using this root ca.
To be honest, things like let's encrypt or cloud services which manage ssl is a great help
> How boring is it to produce something of the same shape over and over again.

Same applies to any text written. Yet, few people would argue there aren’t any artists among novelists, screenwriters, and poets.
A Philosophy of Software Design.

Very well-written. At 190 pages, quite likely finish-able in a weekend. But if you get 70% of the way through it, that is still very valuable. It makes sense as an underlying set of principles that explain why you would use design patterns.
Less "cannot" and more "are rarely". I've encountered a few odd mixes personally.

There are sources (US SSN and census especially) of first and last name frequency by decade, though not so much first/last pairings. Gender also.
Winget Install Learning
Please don't step into religious flamewar on HN.

https://news.ycombinator.com/newsguidelines.html
I'd would love an invite as well. vpul<dot>chaudhary<at>gmail
AFAIK Laravel is built on Symphony components.

Also, PHP is probably not a terrible language or that's subjective at a minimum :)
Are you using (or have been subjected to) Firefox enabling DNS over http? IIRC it's auto enabled for users in the US.
Oh god, today was an interesting day. 8am, updating thousands of servers CAs...
My company uses it all the time. It's an absolutely rock-solid database and I've never had any issues with it. They just released their new containerized version a few months back and have recently simplified their licensing rather significantly.

One of my favorite features is the "time travel" query. If you enable this feature on one or more tables you can essentially say "give the results of this query as it would have been at time x". I don't know if anyone else provides that, but it's pretty great stuff.
This looks nice! https://jonas.github.io/tig/ is another command-line UI for Git with similar two-column layout.

git-fuzzy seems to also support two-column diff view which isn't in tig. Good job.
EDIT: See kevincox's reply. Rust will bitwise copy the containing type, which is typically very cheap. For example, it you move a String, it will copy the String struct, which contains a couple pointers and a length (or something along those lines). Importantly, it will not copy the underlying char array.

I was thinking of the following code, where I believe the assignment to y is actually free. Though apparently this isn't called a "move".

let x = <<large owned type like [char; 1000]>>;
let y = x;

More info: https://doc.rust-lang.org/rust-by-example/scope/move.html
You have misunderstood Sutton's argument.
Quoting Rich:

One thing that should be learned from the bitter lesson is
the great power of general purpose methods, of methods that
continue to scale with increased computation even as the
available computation becomes very great.

The point isn't that improvements in our algorithms is unnecessary or unhelpful, rather that the algorithms we should focus on will be capable of scaling with arbitrary amounts of compute/data.
Such as, for example, neural networks, where we see an almost constant rate of improvement (for the appropriate architecture) as more resources are added.
Fair enough.

To your second point, do people use WhatsApp because of encryption, or because of its other features / community lock-in?
It has a very limited set of seed names (or did last I checked), though can be handy.
I am a dark mode believer, but I absolutely cannot focus when the background is true black.

> Is it that I have to give it more time

It did take me a few weeks to get used to dark mode, but every human is different. It may just not be for you.
GDPR’s Biggest Failure
All my applications use a component that watches certs configured (everything in cert and trust store) and returns warning in telemetry from the application if any of the certificates is less than a week from expiration. This is checked periodically while the application runs.

This not only makes sure we don't miss expiration but also ensures we don't forget to configure any of the application.

We had a situation when the cert was replaced but the file was placed in incorrect path and was not actually used by the app. Having the app report on what is actually being in use is the best way to prevent this from ever happening.
Schedule deep conversations with friends so you feel less tempted to scroll facebook.

If applicable, get actual psychiatric treatment for ADHD and work with a coach.
Saw a diagram showing that the 2nd stage should deorbit and splashdown somewhere in the Indian Ocean. Not sure when, precisely, though.
This is what it should have been a decade or two ago. The infusion of expertise from gov-sponsored / R&D to commercial should have been accelerated long ago. Happy to see Lars and others matching up with entrepreneurs and a new generation to get things done.
It's still used in a lot of places because either some bought in ERP system requires it, or because internal software was developed on it WAY back when, when either Postgres didn't exist, or didn't have as many features and no companies providing paid support.

They now have a problem - and it would probably cost more than the yearly cost of Oracle to migrate.
Actually, the whole "create database" is misleading when comparing the two.

For Oracle, a "database" is the a server instance; you create the database when you install the software (without creating a "database" you don't actually have anything running). For postgres, a database is just a level of data organization/segregation.

In an oracle instance you only have a single database. The equivalent of the postgres "database" would be "user/schema" in Oracle.
Yes, I loved learning Erlang (and later Elixir was a breeze). It's a good experience in learning how to build apps using the Actor model (they predated it before it was called Actors) and building resilient, multi-process based systems where failure is part of the design and fully accounted for.

It also has a really small and simple syntax and wonderful pattern matching heavy approach to code, which is something I've took with me to other languages (and a feature sorely missing in most major languages).

OTP is a bit of a beast and feels overwhelming at first, for example when you download an HTTP server to run your app you actually "run" the supervisor which spawns a bunch of processes. And this is all within your own application which is a group of isolated processes.

I'd personally use Erlang/Elixir for everything if it had strong typing. And I still might anyway for my next project.
What you are referring to has significant overlaps to my concept of “libertarian paternalism,” more familiar to me as so-called “benevolent paternalism,” and was popularized by the book Nudge: Improving Decisions about Health, Wealth, and Happiness.

https://en.wikipedia.org/wiki/Libertarian_paternalism

https://en.wikipedia.org/wiki/Nudge_(book)
On further reflection... I'm curious about how allocators would handle this -- if you return from this context only to make another heavyweight object, it seems like you'd be trading glitchy timing with allocator contention.
I watched the "Everyday Astronaut" Youtube stream where he said that those are IVA suits (as opposed to EVA) and can only hold pressure for a couple of minutes, enough time for the capsule to return safely to earth in case of an emergency.
Ah. So this creates a valid JWT for any email you want, but it is now associated with your own apple account?
> Crew Dragon can be rated for hundreds of days and doesn't have the volume/mass/cost to spare.

Mass is often an issue with spaceflight. We're arguing about what's better overall, not what's better by all possible criteria. Crew Dragon I'd say has more mass to spare than earlier spacecrafts - because at least of economy of scale and more mass-efficient subsystems.
Yes then credit to azure engineers not open ai people
A 3-minute summary for those who missed it: https://www.youtube.com/watch?v=U1mlCPMYtPk
I'm glad that the space age has been rekindled. I wish Europe would do something similar.
https://flightclub.io/live
I think you might misunderstand me with what "bash is not installed by default" means. On the systems I'm mentioning bash is not on disk anywhere in the base install and you have to install it extra. I don't think that is the case in Ubuntu.

I'm typing this on FreeBSD. It's in /usr/local because it came from ports.

$ which bash
/usr/local/bin/bash

Now I try my OpenBSD machine. It's not installed at all.

$ which bash
which: bash: Command not found.
Eh. I’ll take a found and fixed security issue in a feature aimed at keeping my email address private over Google and Facebook’s invasive behaviors.
To revoke a certificate you must keep a list of revoked certificates. Without expiration date that list would grow infinitely. And that list should be downloaded periodically by every entity which wants to verify certificate.
There are a thousand different techniques to learn how to sing and many people stick to their "tribe". If you're smart, you'll look beyond whoever teaches you first and stay open to other techniques with different approaches or opinions. Stick with what feels good for your body. If your throat hurts, stop.

Now, having said all that. I have had really positive experiences with a teacher who teaches CVT (Complete Vocal Technique). I'm sure a huge part of this was the individual teacher I found, but every lesson I walked away feeling like I had learned something new and had improved my technique. If there's a licensed CVT teacher near you, I'd highly recommend trying them.
It avoids it if your type has no-op drop implementation. So if you use typed-arena for objects which don't own resources, they all get dropped in one massive deallocation and don't have to be traversed.

EDIT: and then I noticed that you mentioned RAII... Right, if the object own some sort of resources that doesn't apply.
About 10 years now before irreversible climate change. After that any of the gains of the last 50 years will be eliminated. The (grudging and pitiably disproportionately small) increases in supply of food and medical support to the developing world were based on an extreme and rapid expansion of CO2 emitting industrial production. Unfortunately that comes with some (forseeable) consequences.
IMO, there's a bit of a design flaw with curl here. There should be an easy flag to say "trust the particular certificate with this hash, no matter what's wrong with it", but there isn't, so people instead use the one that says "trust whatever certificate you get, no matter what's wrong with it".
As noted in the first post, the Z80 is still much easier to generate code for than the 6502.

I see everyone there seems to be referring to free/open-source compilers, but I know of one commercial compiler for Z80 (IAR) whose output is quite good, and I have linked to in this previous comment I made on a different article about Z80 C compilation:

https://news.ycombinator.com/item?id=18902501

If one didn't know better, it would look almost like handwritten Asm.

On the topic of architectures which are difficult to compile C to, I can also think of several more: 8051, low-end PIC series, and these: https://cpldcpu.wordpress.com/2019/08/12/the-terrible-3-cent...

...and most of those have C (or at least C-subset) compilers too.
How does that answer the question? So what if you can replay logs of all attempts? How can you prove for any specific log that it was the “real” user making the request, and not someone using their email maliciously to make an identical request?
...till he opens his mouth in public and provides yet more fodder for the world to ridicule silicon valley libertarian techno-utopianism.
Somehow, the papers have also decided that one should care about his bizarre child naming schema, like some lumpy paypal Kardashian reduced to the gossip PR pages of Parade Magazine...

Tesla seemed rather an IT brand until he became just another spoiled corona-minimizer driven by blatant greed, which is odd, considering that he devalued his own ass $400 million trying to be cool on the Joe Rogaine show, but I digress, as I am wont to do. (often)
I really think this was more about crippling the browser experience to benefit native apps and P2P apps. Supposedly Sqlite, which is widely revered as one of the best engineered pieces of software maybe ever made, doesn't have an "alternative implementation" so it can't be used, but some guy at ORACLE comes up with a lackluster nosql solution and we're all good?! Not buying it...
Not very Kerbal, good job and goodspeed!
a) You're skipping right past my point, that dismissing a conspiracy theory by calling its proponent mentally defective is intellectually dishonest. Also, it comes dangerously close to an ad homenim, if not done right.

b) NSA surveilance was a conspiracy theory 15 years ago. Was that nonsense?
it’s more like blue m&m’s than an actual requirement
I have no measurements to share with you on that question, but I think Pinker is mainstream, NPR, NYT background thought.
When you run an .exe file the file may start a different program (2019)