skysight-inc/HackerNews huggingface dataset:
If you write something wrong on the first question, you are asked to make a pattern that matches “anything” - such a pattern would be the 8 letters “anything” literally.
Yep! Kids learn by observing.
In my tests with 10 people 5 needed TURN, ISPs in my country are really something special.
I guess with Flatpack it is the responsibility of producer of the package.

With apt/yum/etc it is the responsibility of the distro maintainers to package it.
U is underline AFAIK; what would "unarticulated" even mean?
Because it's often hard to put enough detail into a paper to capture everything that was done. It's not unusual for there to be a "secret sauce" to a particular technology.
Rocket Lab successfully launches its 12th Electron, with NASA and NRO payloads
> Yes, it's possible your linux box has been compromised if you use flatpak, we are literally talking about several months old public exploits. Ever opened an image in flatpak Gimp? The criticial vulnerability "shell in the ghost" was fixed in flatpak about one month after linux distributions.

There were some heavily up voted comments and posts on hn this year about how much people hate how snaps auto update themselves. Does this change anyone’s mind, or do those points still stand?
Excellent. Thanks for heads up and I’ll take a look. Especially, thank you for That video. It’s truly spectacular - thank you for sharing.
You need to look at the threat model. The threat model around eSNI public key substitution is a minor privacy invasion: Eve can see the hostnames you're connecting to. This isn't so bad because your DNS provider can already see the hostnames you're connecting to. Standards like DNS over TLS are being explored to make it harder for other parties to use this type of attack.

The threat model around TLS public key substitution is basically full read/write control over your requests. This represents both a major privacy invasion and exposure of auth secrets like your bank account password. Your DNS provider doesn't already have access to those things.

edit: You could deliver a cert this way, and authenticate the cert out of band e.g. through the CA system. This kind of approach is sound from a security standpoint, but there just isn't a lot of upside. There are fewer moving parts when you just deliver the cert the way we do now.
Not sure if it's still up to date, but I appreciated the Quantum Physics text by R. Shankar when I was studying physics as a supplement to the courses I was taking for 4th/5th year physics.
Thanks. I had to find Sydney, here is a reasonable one with the distinctive Bondi Beach (approx top-center): https://eol.jsc.nasa.gov/DatabaseImages/ESC/large/ISS005/ISS.... CBD and Harbour Bridge are covered by clouds.
Java had sandboxing from the beginning. There were some bugs that allowed client code to escape the sandbox, but it wasn't nearly as bad as some people made it out to be. I'd dare to guess that Javascript has had more sandbox-escaping bugs than Java has had.
File->Save is an extremely outdated workflow leftover from when disk drives took multiple seconds and you couldn't edit the document while you were writing to the disk.

Now your application should continuously save without any manual steps.
Sure, I signed up. Trying it out!
Slavery is a word for a concept, simply referencing it is not any more offensive than referencing killing. A the master/slave terminology in technology is not asserting that slavery is good, it is using the term to provide context.

Perhaps we should rename "kill" to "terminate" as well, because black people experience killings by police and may see it as offensive? Killings by police seem to be more disturbing to black people at the current time than slavery, or more raw at least. Even "terminate" may still be seen as offensive.

One might argue that slavery is more racially charged, but it's not any more than killing is. Millions of non-blacks were slaves across almost every single culture. If you look up news results for "killing" almost every single article is a bout a black killed by police, similar to how "slavery" would return news results almost entirely consisting of references to black slavery. If the meaning of words are fluid and more impactful to some than others, then "killing" and "slavery" are equally racially charged.
That may be, however you may be interested to learn that Ulysses was first serialised.
Make a baby, or adopt. Much cheaper way to wake up early.
So You Want to Start an Unpopular Blog (2017)
We detached this subthread from https://news.ycombinator.com/item?id=23499655.
XMPP Newsletter: 9 June 2020
> * I can refuse to use a specific tech company's product*

This is less true than you might realize. Consider that if a friend of yours is on Facebook, they might upload photos of you and tag your name, allowing Facebook to build a profile of you regardless of whether you use Facebook or not.

Consider that credit rating agencies buy your loan history in order to rate you as a customer, regardless of whether you check your credit history with them or not. Consider that Google buys your credit card purchase history to build a profile of you.

Consider that Google takes pictures of your house regardless of whether you search for it on Maps. Consider that GM and Ford collect and sell your location data from your vehicle. Note that vehicles that don't do this are getting more difficult to obtain because the price of vehicles is becoming increasingly subsidized by surveillance.

Technology is ubiquitous. Not all technology is a product sold to consumers, and you don't always have a say in how it's used. GDPR covers all of the above situations. Its effect on websites is peanuts.

> A corporation doesn’t have the power of the state to threaten to take away property or liberty.

Automated systems are currently part of the decision-making process in hiring, firing, choosing to loan, choosing to rent, policing, and determining prison sentences. A corporation that offers "fraud detection" services has a surprising amount of power over your liberty and property.
Really great food for thought.
Mathematically, you can think of "linear" AI problems as "easy to solve", and non-linear as "difficult". That's part of what the parent means.

Some function being linear means it's easier to guess. If a real world phenomenon is tied to a linear function, then it's easy for AI to guess/approximate.
mtgp1000 says>"mathematical modeling that is 3-6 orders of magnitude faster, we are already talking deployment."<

How seriously can we take that phrase? Please mathematically model the Covid-19 pandemic's next 6 months. The epidemiology community dropped the ball and you can hardly do worse. Take the "Covid Challenge!"

mtgp1000 says>"These next few decades are going going to see a phenomenal acceleration that's already starting ...assuming we don't hit some unforseen[sic] limit or block."< -

Nobody can predict next year's economy and certainly nothing beyond 5 years! You're predicting for the "next few decades"?

mtgp1000 says*>"But even with what we've discovered now, we have more than enough in the way of new tools to refine across industry and society for decades."

Spoken like a true non-English marketeer!
As others have mentioned about different levels of research having different levels of secrecy let me tell you about some of the research I've done.

I work in HPC and people are getting into machine learning now. Lots of papers are getting published that do not contain enough information to reproduce the work and source code is held tight. That's not uncommon is a lot of the sciences. Results are public, but how to get the results are not exactly. I've also been in the engineering and physics fields. Papers there are really not reproducible. They may detail a high level overview of how to do the experiment but they leave out all the "secret sauce". This gives them an edge.

So with the other post that made the front page, just the other day, it detailed how someone got stopped at the border for lying on the visa and that that person was sending pictures and very low level detailed explanations about the lab and its setup. This is essentially the "secret sauce" we're talking about here. If these researchers want to turn their results into a company (say you invent a new drug) you can only do this if you don't tell everyone every detail (which you can't reasonably do in a 10 page journal paper).

This all is especially true for medical work and semiconductor work. The US government is funding many of these labs because they actually want them to do the low level research, make a product, and market it. You can think of it as angel investing (except you don't have to give up shares of the company). But they want it to be a US company that builds and makes the product because that helps the US economy. If the US does the "angel investing" and then the product is created in China by a Chinese company, then that investing was not nearly as useful.
Zoom Just Caved in to China on Censorship
+1 for this -- requiring the docker image to be built/managed on the machine it's being deployed on is the simpler architectural choice (easier to debug, etc), but it doesn't necessarily make sense for production.

I wonder if there's a ticket about this on dokku already

[EDIT] - Couldn't find anything... Some tickets about how the containers are built and changing the base image but not much about.

I wonder if you could jury rig something like kraken[0] and make sure wherever your building images is a peer or something... Of course the simpler solution might be to add a CI step that just pushes the image (via the working `docker save` method) to the deployment machine(s)? Maybe if you have a staging environment, let CI push there, then if that machine is peered (via something like kraken) with production, production will get the image (though it may never run the image).

[0]: https://github.com/uber/kraken
I blame the Mayans.
Agreed! I upvoted both of your comments too.
It's (basically) illegal in the US as well.
Please don't post flamewar comments to HN. Even though the other user broke the site guidelines worse, you started it and you provoked it further. We ban accounts that do that, regardless of how wrong the other person is or you feel they are.

I'm not going to ban you for this because it isn't repeated a lot in your account history, but please don't do it again.

https://news.ycombinator.com/newsguidelines.html
I've banned this account for repeatedly doing flamewars. Would you please stop creating accounts to break HN's rules with? You're welcome here if, and only if, you sincerely want to use this site in the intended spirit.

If you don't want to be banned, you're welcome to email hn@ycombinator.com and give us reason to believe that you'll follow the rules in the future.

https://news.ycombinator.com/newsguidelines.html
Can’t we instead change “white” used in racism to something vague or indirect like “matte” or “pink”?

To me those “identifying as 'white'” people getting weird ideas from that name of a color to harass others is annoying.
Dear HN: I don’t care about the downvotes, but it’s showing some really ugly biases that are going to have real harm to other victims. Someone on here asked questions and it was a lot more productive than just dismissing victims in anonymous downvotes. You can learn from this.
Please don't respond to a bad comment by breaking the site guidelines yourself. That's explicitly in there also: https://news.ycombinator.com/newsguidelines.html.
You can't do this here, regardless of how strongly you disagree. Perhaps you don't owe the other side better (perhaps you do), but you definitely owe this community better if you're posting here.

https://news.ycombinator.com/newsguidelines.html
Those points are completely unrelated to flatpak taking a long time to release patches. Whether flatpak forced updates or not, from TFA it seems as though it's still months behind Linux distros.
Black Spider Menace Psychedelic Protocol
>Use the excess summer power to fill up a near empty dam with desalinated water?

Pumped storage hydroelectricity is the biggest form of power storage at the moment, and has efficiencies around 70-80%. The losses for desalinization (pumping through media) are ruinous compared to just pumping uphill, and storing desalinized water means you can't use it without spending potential power. There might be good reasons not to mix desalinization and energy storage.
This might be an unpopular opinion, but here goes anyways. I know there are some on HN that share this unpopular opinion.

The IA treated this situation and decision like they’ve treated all their decisions. They archive data without permission. They share this archived data without permission. They have no official instructions on how to remove data from their archive. There are some flimsy instructions about robot rules, but it’s not clear if they work.

Not everyone agrees to have their old forum posts, yahoo posts and other info from the early days of the Internet still available in an archive that’s searchable by the government, employers, etc.
Ask HN: How do you do quick and painless API integrations?
I always dislike doing integration with 3rd party APIs. Other than Stripe, the documentation is almost always terrible. It's not tailored to my language, there's too many links to other things I don't need to know in the beginning, and asks me to make choices on things I don't know anything about yet.

Then, I have to pick from a variety of client libraries, some of questionable quality, because the service couldn't be bothered to maintain an official lib (I'm not using esoteric langs), and then authentication is always a pain.

That's all before I get to the good stuff of just getting to play the data. And that's when I actually care about getting to use the API.

Other times, I just want it over and done with, because it's not the core of the product, and I feel like integration is just this long slog and chore.

Does anyone else feel this way? How do you deal with getting through integration quickly or painlessly?
Google has shown time and time again that it is not in the search business, but the ad business.
Episode #6 – Caps for sale, three different types of caps
I don't know too much about Stockholm - although I loved Helsinki.

Do those have solid startup / tech communities in your experience? Any more details you can share?
I believe both your comment and the parent comment are true. Laser comm has been done at fairly high speeds (both sat to sat and sat to ground station), but it's relatively cutting edge and Starlink isn't currently doing it
I am too tired to de-construct this in full, just a few short points:

- It's about where the goal post is. Let's not forget what the original discussion is about. You invoke a lot of 'emotional imagery' ('why not be kind'), we are talking about long standing naming conventions that can be thought of as being non-racial and no one had a problem with 2 months or 2 years ago, now becoming a problem because people think they are doing something positive here, while it's not addressing ANY problem regarding racism at all ...

- software is both, living and artifact - we are not talking about a new program written in 2020 using some weirdly offensive and arcane naming conventions, we are talking about retroactively updating naming conventions in programs. Regarding societal norms we always play catch up, should I vet my code once a week to check if it is still conforming to PC-culture?

- software is a technical thing, we programmers like to think of it as non-political ; like I've said multiple times I think already: when I read source code thinking about racism is so far off my radar, that it's insane to see 'master' and 'slave' and think of it (for me, at least). Which also ties in with the point I tried to make, that some people are so ingrained in their social justice war, that I think they just see 'racism' and 'bias' EVERYWHERE.

- a lot of people feel 'pressured' into complying with what they regard to be ridiculous changes (when it comes to technical merit) because there is a certain amount of people who view non-compliance with whatever their current crusade is about as 'unkind' - if you think me using master/slave terminology has something to do with the topic of racism in the United States, I refuse to make that connection I guess.

- ultimately: it's probably more about people patting themselves on the back, for having done something, and for having changed nothing - and I deeply resent that. In other words: blind activism at its best.
STUN fails under symmetric NAT, not strict NAT. That google document makes no citations of that 92% figure, but I assume that's for desktop traffic only. Pretty much all mobile/cellular connections would require TURN too.
If we're talking about fundamental physics I'll mention fusion research. If you go to the DOE Chinese citizens are highly restricted around locations like NIF. You don't need any kind of clearance to work at NIF, but people have different restrictions. Same is true for CERN. China doesn't have full access to everything that happens at CERN, which is a fairly open lab.

Most research isn't classified, but that doesn't mean most research is open.
I read most of the comments, but I'm still wondering if, since CDL is so similar to conventional, analogue libraries, isn't there a "right of way" type of argument to be made for CDL? Like, you didn't challenge it for decades, it's gotten an established place in society, no dice? (I'm specifically asking for CDL, not unlimited.)
I've gotten sucked into this in the form of MS Power Automate, and it just seems to make everything more complicated and confusing. I spend most of my time looking for workarounds to try to get back the ability to do stuff that any programming language allows. I only learned Access and VBA about a year ago, but I tend to agree with the people who say Microsoft has broken up parts of the functionality of this reasonably useful workhorse into various products, all with their own learning curve and without caring much about covering all that you could previously do.

I'm beginning to think it's just a scam, where Microsoft and others sell a vision to people who can't judge it because they don't know what programming is...and the point is to have an incredibly convoluted and random licensing system where every little thing requires paying more money. It feels as calculated and predatory as a casino.

What "no code" boils down to, it appears to me thus far, is you don't have the version control, the refactoring ability, the ability to reuse code, the ability to see a reasonable amount of logic at once, the ability to easily copy and paste, the security of an editor that won't randomly mangle your code (sorry, it isn't code, it's...uh...JSON) it's just on and on, things you can't do, and nothing added in exchange except the label of "no code". And I don't see how anything complex can be maintained; it merely has the political advantage that you don't have to designate a developer to maintain it...but in reality, it's if anything harder to understand.
I think that happened for awhile in the early 2000s. I know we purchased a lot of UI component libraries back in the day.

But I think we all had a enough of those component development companies go out of business or deprecate the version we were using that we are gun shy on doing it again.

I know I stick with opensource only at this point for that very reason. At least if they decide to stop supporting me, I can support myself.
See the sister comment to yours
20-year-old lost 700k on Robinhood options, takes life
Here we are in 1989 again.

The cycle keeps repeating. A new advancement in computing power, networking, or algorithms means there's a new batch of low-hanging fruit for AI to pick, so we pick it. Investors say "What about the high-hanging fruit?" and we say "No problem. We just need a slightly longer ladder."

Two years later everybody finally realizes the high-hanging fruit is on the moon.
Yes. Twilio and maybe Jitsi.

We open sourced our implementation.

I am still wondering if we missed some simple solution.
Mean age for morning types was ~56, for evening types it was ~54. Seems unlikely that changing grey matter volume with age is explanatory here.
Nice catch and great show of initiative there! It's actually not overwritten by the prompt but rather by the "hack"/post-execution handler itself, depending on where the glyph was emitted (which in turn depends on if the command output included a trailing \n or not) when the line is cleared after guaranteeing we're at col 0 of the next line. If the glyph wrapped to this line, then it would be cleared. If it didn't, it'll show on the line above.

I think the missing clue is that the hack is followed by `^[[K` (clear line from the cursor to the right), before control is passed to `fish_prompt` to paint the prompt or whatever else.

Here's some sample output (stripped of the hack spaces and any ansii escapes):

mqudsi@ZBOOK /m/c/U/mqudsi> echo -n hello
hello¶
mqudsi@ZBOOK /m/c/U/mqudsi>

`fish_prompt` isn't called until the cursor is already at column 0 and the line is clear; the "missing line ending glyph" (here ¶ rather than ⏎ because fish correctly detected that the latter is likely not supported by the font used by my terminal emulator in yet another hack) is emitted at the end of the previous line.

You can see all this and more by piping the output of a `fish --interactive` session to `xxd -C` or `hexyl` or whatever (that'll disable tty feature detection and force ansii escapes to be emitted that you can then inspect).`

(You can also verify by simply using `sleep 1` as your fish_prompt - you'd expect to see the glyph appear at least while the `sleep` was running if fish were waiting on/expecting the prompt to overwrite the glyph.)
I don't think Google should be removing torrent sites from their search. That being said, as highlighted in the article they should at least do a thorough job and remove the fake torrent sites as well.

There is nothing good coming out of sending people in scam paradise because you don't want to give them what they are looking for.
Leaving aside the question of whether other software will work reliably with non-contiguous subnet masks (which led to this recommendation), in general, most software does not deal well with NameConstraints. Some libraries ignore it, some libraries fail hard if a constraint exists, and in general, I'd expect a certificate chain involving NameConstraints to be poorly supported at best and insecure at worst.

I wish that NameConstraints were better supported, to make it easier to support intermediate CAs; for instance, prove you own example.com and you could then have a CA restricted to *.example.com. But right now, that just doesn't seem feasible.
> Human beings are tremendously better at driving than machines

Human drivers: 1 death per 88 million miles traveled (in the US) [1]

Tesla Autopilot: 5 deaths per 3 billion miles [2]

[1] https://www.iihs.org/topics/fatality-statistics/detail/state...

[2] https://electrek.co/2020/04/22/tesla-autopilot-data-3-billio... and https://en.wikipedia.org/wiki/List_of_self-driving_car_fatal...
Unfortunately, doesn't look like there's a Mac version in the works. It's awesome that people are still working on this kind of stuff though. I somewhat wish there were equivalent screenshots of the games as seen with the original resolution for comparative purposes.
Could you elaborate on the Slack-Linux-Japanese thing please?

I have no problems with it, and was wondering if maybe an update broke it?
Pipes are like one of the best experiences you’ll have whatever you were doing. I was debugging a remote server logging millions of Logs a day and was aggregating a little on the server. Then all it required was wget, jq, sed and awk. And I had a powerful log analyzer than splunk or any other similar solution on a developer Mac. Which you think is awesome when you’re paying a fortune to use Splunk. And for getting some insights quick, Unix pipes are a godsend.