skysight-inc/HackerNews huggingface dataset:
Maybe clock skew is the wrong word. Basically we'd run the script every 10 seconds, which would use the Jira API to fetch any comments made in the last 10 seconds. So sometimes Jira would return the same comment twice, causing the script to send out two notifications, about 10 seconds apart.
> It handles it by asking "Do you want to trust this new server?"

That's basically how it works though; your OS packages a group of trusted CA certs. You can add additional trusted CA certs, even ones minted by you to ensure your apps trust the connection
Mostly the confidence comes from half a century of trying to find such "extra" visible mass! There's a long history of people looking for extra dust or gas or compact objects using a tremendous variety of clever techniques, and yet the deficit has remained. At this point, if you believe that there indeed is extra mass around, it kind of has to be dark matter by definition because it's been so damn hard to see.
POC means people of color means non white.

You taking the anthropologic perspective isn't scientifically incorrect - race doesn't actually exist, after all, in any meaningful way. However it is sociologically incorrect to call white people "colored."
It is important to him because it’s important to the other non-PoC people that keep thinking he should not be in the room

Re-read the interview anecdote: the interviewer, probably not having many black coworkers, thought that a black man would not be interviewing in tech

Nothing to do with job qualification for the job
West Coast Century
There's one thing that make me reluctant to use Godot though and it's GDScript.

Edit:
Seems like it's not a problem anymore, can't wait to try again.
Gaslighting at Work: How to Recognize It–and Stop It – Career Contessa
One thing to consider: in the wake of institutional violence (police treatment of BIPOC, US government mal-response to the pandemic) and the protests and concerns that violence engenders, this essay questions the legitimacy of those “narratives.” Why? Who is speaking here? From what basis is the author able to negate the narratives of others?
Having an OS which boots from hardware is always a feature to me - no matter how badly you screw up your system, you just do a hard reset (boot holding R) and get a working OS and GUI. You can still patch it by defining a boot app, but the core system is always there, safe from mishap and malware.

And yes, the OS was starting to show its age (both graphically and with its cooperative multitasking) by the time Acorn was broken up, but at its peak it was miles ahead of the competition, and was definitely an under-appreciated pearl.
Still no package managers on Windows?

Seems ridiculous that every program has to include its own update manager—on MacOS too but it at least has brew-cask.
I feel like, to unmask me as unempathic, you ignored the rest of my post that starts with "a leadership + empathy trait..." where I attempt to generalize the goal here instead of this myopic "POC" narrow-vision. My empathy doesn't need Sparknotes for who to help, just the built-in human radar we have where we can parcel out the social hierarchy of a group.

When you have the empathy I described, you don't need a custom rule engine for black people or women or indians. You realize that people don't have equal footing even among people you would think are equal peers. Nor a group of ten white twenty-year-old guys from the same suburb. Some of the individuals in that group may be enduring the full brunt of the suffering you're talking about. And there are groups where black men have the social power and have the power to cut others off, they don't need your white-guilt superhero help.

Most of us reading this aren't even the well-spoken social apex of the groups we're in and could be assisted by others with the empathy that I describe.

In another comment, you admit that you found yourself unintentionally talking over women at the workplace. Which can't be an easy thing to introspectively discover nor admit on a public forum.

Yet your reply re-focuses on POC, racism, KKK when my viewpoint generalizes over women, people of all races, people in your peer group, and groups of any composition.
One of the arguments that I've seen for shorter-lived certs is that revocations aren't honored particularly well. If we could fix that, then your proposal would make sense (but I'm not sure that's doable)
I'd say for a lot of people, their food budget decides what is on their plate.
Ask HN: Why many server-to-server communication today use HTTP but no HyperText?
HTTP stands for HyperText Transfer Protocol. It's meant to transfer HyperText between two nodes over a network. If you're not transferring HyperText, then you might as well use another protocol or a mere String-based transfer mechanism.
Why do you think everybody uses HTTP for their APIs and server-to-server communication today but you rarely see HyperText in it?

I have a few theories, but I would love to hear more about HN perspective on it.
Godot will get to the point of competing with Unreal, no doubt about it. Especially since Epic do a poor job at making Vulkan renderer in Unreal work well, and Godot invested in Vulkan all the way.
WoT would fix that, unless the other coffee shop patrons have (directly or indirectly) trusted you.
People always show their best side on social media sites, especially LinkedIn. Trying to measure up to an image that someone has crafted of themselves to get a job is somewhat like believing that the pictures people post on Instagram match their daily reality. You are walking into a well-known trap.

Trust me - as someone who listens to coding candidates on occasion, the majority do not just come in and whip out answers in a couple minutes. Those people are rare. And we sometimes like the slower candidates better because we get to see how they think instead of seeing just a quick answer.
White House: The Chinese Communist Party’s Ideology and Global Ambitions
Add a . after .com; it should work.
No, but you can still accomplish what you want.

Annotations become part of the PDF file on disk. But they're stored as separate editable objects in the PDF that remain editable; for example, if you open an annotated PDF in Preview (on macOS) or in Adobe Reader, they are still editable. And so you can remove them.

Devonthink also lets you remove all the annotations. With your PDF(s), select Data > Convert > "to PDF without Annotations", and it will make a copy that has all the annotations removed.

I agree that it would be nice to keep the annotations separate. But fortunately the PDF format is flexible enough that it can preserve the annotations and not "hard code" them into the visual tree.
Citizen Politics in America: Public Opinion, Elections, Interest Groups, Media
Behind a proxy that is (optionally) configured to share this - yes. But what of a NAT[1] gateway.. most home (and many business) networks NAT your connection - to the destination server, all devices in that network have the same IP (or the IP is seemingly very dynamic if measuring hash(agent+ip)). Other than a server or a mobile-device on network data (assuming they aren't using IPv6) an IP will almost always represent a cluster of devices.

[1]: https://en.wikipedia.org/wiki/Network_address_translation
Pretty tiny: 10−5 to 10−3 eV/c2

Though the utility of a big collider would be in diversifying the types of decays observed?
>and publish a revocation via CRL if the validation times out or fails for 1 month + 1 day.

If you're in a position to MITM using a stolen certificate, you're probably also in a position to block the CRL response from going through. Since failing to get an updated CRL doesn't result in a security warning, your CRL proposal is essentially useless.
I have just one problem with this - it's only one page.
Doesn't Godot allow binding with multiple languages? You can even use Rust for that instead of GDScript.
I love that your front page made your front page.
For most people, they can be free, and replace themselves, thanks to Let's Encrypt and their automation tools.
Ah I see, thanks! Good point, and I guess basic auth would protect against such sort of attack.
So it seems it makes sense to use a token even if it's running as localhost, I could add an option, so it doesn't require setting up a separate proxy.

Either way, I hope I've been fairly reasonable about security so far, but I've mostly been concentrating on the 'plugging in the data' bit, so it's possible I've overlooked something (also I'm not a security specialist!). There is an open issue in case people have any specific concerns or spot something, happy to receive feedback! https://github.com/karlicoss/promnesia/issues/14
Not sure if relevant, but A1 is ARM, so not exactly the same.
There's a difference between largely unrestricted speech legally (being free from gov censorship) and having an unmoderated online community. Moderation is a good thong when done correctly, it raises the quality of the conversion by keeping bad actors and off-topic/toxic comments /post out. There's value in both tightly moderated and loosely moderated communities/spaces.
What defines 'linear' here?
Mysterious meme gets Tech Twitter to clamor for invite to app that doesn't exist
Yeah I saw a newspaper style interface for reddit yesterday here on Show HN and today one for Hacker News
We have had this conversation to death: https://doesmysiteneedhttps.com/
No matter the value of the actual article, it's so tainted by Trump that it can't possibly belong on HN? That seems to be your standard, and that seems a very narrow-minded one.
Rings true, around this period Haiti was indeed the single most expensive piece of real estate on the planet, due to its sugar and coffee output.
I'm sorry you were patronized. Nobody likes being patronized.

You may have learned to cope but not all coping is equal and not everyone can. Again, the argument isn't for baby talk. It's for adult strategies for adult issues. Be it ensuring that a woman can have her voice heard in a meeting or an autistic employee can have a desk in a non-busy part of the office. Non-patronizing, reasonable, and aware methods to improve inclusivity and be an ally.

An ally doesn't take over the fighting entirely, they simply aid.
Given that it's the literal definition and common usage of “indefinitely” (without fixed or specified limit, not precise or exact), I don't think it's a big jump at all.
Wow. I have really bought into a line sold to me subconsciously haven't I.

Yeah. Let's have proper regulation and policing.
Jesus! Do they control the illuminati too?
Sadly CertSimple just disappeared all of a sudden. Not much real use for EV certs though - the only thing they can be a little helpful for is if you want to do cert-pinning at the CA-level
Gaslighting should definitely be understood by more people. There are many who use it to take advantage of others.

This piece is a quick intro with references to more. Highly recommended, wish I could upvote more.

Thank you for sharing!
You don't seem to be paying attention. I see borderline Marxist stuff here rather regularly.
How about creating an API that geenrates a list of image urls?
In Beyond the War on Invasive Species By Tao Orion, the author gives facts and numbers to back this up.

People are destroying native plant habitats, and creating the perfect conditions for invasives. In fact 90+% of native species aren't threatened by invasives. The invasives actually help heal the soil for native plants.

The author then asks, why then is there a war on invasives? And that's where the book gets good imo.

https://www.goodreads.com/book/show/25782048-beyond-the-war-...
I mean yes, browsers have amply demonstrated they don't care about secure local device communication at all. Mostly from ignorance and disinterest. It's their loss, just means everyone has to install an app or that smart lightbulb only talks to the vendor cloud.
You're looking for Ungoogled-Chromium. Or honestly. Just mitigated Chromium.

Privacy is not as important as security, because without security you potentially lose both.
I'd like to write a comment but I generally prefer to have read the entire article before I do... see you in a week or so.

Jokes aside, I agree with the author (I think) that DARPA has been a surprisingly effective org in an age of frequent failures of other orgs with similarly lofty goals.

DARPA is effectively what things like the SoftBank Vision Fund should've been (wanted to be?). It would certainly be interesting to see what it would look like to have a privately run clone of DARPA if you injected as much cash as the Vision Fund did. Per the article, about $400M/y is spent on actual R&D by DARPA, where as Vision Fund has injected that amount into single companies many times over.
watwut is not an amigo. I know that from reading her comments over the years.

We wouldn't expect you to know that of course, but we do expect you not to be an asshole to your fellow community members. Please see https://news.ycombinator.com/item?id=23670678.

https://news.ycombinator.com/newsguidelines.html
Sabine's point is rooted in physics. It's that there are no hypotheses that are tested by the proposed energy levels of these colliders. It's just a fishing expedition. Quite frankly, having seen tons of fishing expeditions in biology (which individually cost way less, on the order of 100k to 1M), not doing it is the correct decision. Come up with a testable hypothesis that the collider will address, then build it.

Here's the result of just one of the fishing expeditions I saw (Dr Murray is a saint: https://onlinelibrary.wiley.com/doi/abs/10.1002/pro.2339)
Why Companies Still Struggle to Incorporate AI into Existing Business Models
If you want to follow the workflow used with Github, Gitlab, and others, it is hard to beat Gitea. Heck, I like it so much that I even posted bounties for a few features.

If you set it up correctly, maintenance is low, and resource usage on the server is slim. Quite the apposite of Gitlab, for example.

However, after using SourceHut[1] for the last couple of months, I am convinced that their workflow is superior, and highly recommend using it. Using git send-mail is a joy compared to pull requests, and not having to enable JS for everything, even more so.

I am currently using their hosted version, but looking to self-host it for my company.

[1] https://sourcehut.org/
looks around

Psst..hey buddy, you want some RSS? ;)
definitely on topic though
How to install Big Sur to Mac Mini Late 2012 and other Catalina-capable machines
If I was the bad actor I would simply purchase google ads in the name of the target business sending traffic to my own site with wonderful green padlock - it's cheaper and has bigger reach than trying to hijack TCP/IP traffic.

More to the point - if I am running a collection of Karl Marx works it is highly unlikely that he would request payments.
For those who have trouble with the link:

https://archive.vn/HNc2B

https://archive.st/archive/2020/6/archive.vn/s5o9/archive.vn...
WebSockets are not cool if you ask anybody who's worked with them in gaming. :)
Deno is a JavaScript runtime built in Rust, so I guess it depends what you mean by "types". Definitely not a strong typing, although the example could be rewritten to TypeScript, which Deno supports natively.
I use Deno sometimes, so it was of interest to me to compare it to the advancements presented here for Go.
How fortunate, then, that LE isn't the only vendor. Not even the only ACME vendor, nor the only free vendor (https://zerossl.com/features/acme/).
I took a side gig teaching at a community college. I had to talk to a dean to get white board markers. And it wasn't like that dean approved and made a phone call and I went and picked them up. She physically walked me over to a locked drawer with the department name on it and handed them to me.

A dean. Absolutely laughable if it wasn't so sad.
Thanks! Created an issue https://github.com/karlicoss/promnesia/issues/115
Is your company requiring hour or even minute accuracy of the estimate?

In my whole professional life, I have not been put in such situation, even when working as consultant where we charge by the hour -- we simply estimate by week or day then multiply.

The art part of estimation is setting expectations, or more precisely, adding and justifying buffer time, and form an acceptable narrative when the schedule deviate from plan.
Speaking of assholes, your recent comments have been so full of assholery that I banned your account. I decided to unban it, and just warn you instead, because you've also posted interesting things.

It's dismaying and shocking to me that such an active HN user would feel free to poison this place as badly as you have been doing: attacking other users, pompously dissing the community while participating in it, denunciatory name-calling...none of this is ok here. If you want to participate in the commons, please stop pissing all over it.

https://news.ycombinator.com/newsguidelines.html

Edit: it turns out we've been through this multiple times before. If you want to continue participating here, it's time to start doing so respectfully.

https://news.ycombinator.com/item?id=23047709

https://news.ycombinator.com/item?id=22859403

https://news.ycombinator.com/item?id=21966283

https://news.ycombinator.com/item?id=21909746

https://news.ycombinator.com/item?id=20490008

https://news.ycombinator.com/item?id=20430846
> MC overall seems far nicer than FAR

On Windows, use FAR, not mc. Some aspects of mc I think don't work on Windows (last I tried), and frankly, FAR is significantly more powerful.
Chocolatey has U.Chromium
David Foster Wallace on commercial literature and reading in the US
The main reason for PayPal success is that credit card providers don't offer secure one-time payments, and a way to cancel recurring payments.

Nobody really wants to give out details of their credit card (except maybe in the US) to random sites, and there is no alternative to PayPal.
> best way to get familiar with Python for a C# developer?

Diving directly into the code.

Writing Python is very close to writing pseudo code. Google "how to do X" and check the official doc when you need it.
But you can't shout fire in crowed theater with the intent to cause chaos. You can shout fire in a crowded theater, if there is an actual fire.
Do you know of a reason that this can't work with firefox, or is it probably just a matter of someone putting in the work?
In practice it's probably already true or very close to true that names from certificates in the Web PKI that are intended to be publicly accessible are all logged. As you observe if the name listed is a wildcard this doesn't tell you which (if any) of the names implied by that wildcard actually exist, and indeed no names for which certificates were issued need necessarily exist, the rule is only that if they did exist they'd belong to the subscriber.

Although the Chrome mandate only technically kicked in on 30 April in practice most CAs were considerably ahead of that date, in addition some of the logs are open to third parties uploading old certificates, Google even operates logs that deliberately accept certain untrustworthy certificates, just because it's interesting to collect them.

If you're excited to know what names exist, the Passive DNS suppliers can give you that information for a price today, their records will tell you about names that aren't associated with any type of certificate, and lots of other potentially valuable Business Intelligence. They aren't cheap though, whereas harvesting all of CT is fairly cheap, you can spin up a few k8s workers that collect it all and store it wherever (this is one of the tasks I did in my last job).
There's C# and C++ support, with third-party bindings to other languages (Rust, Python, etc)
https://zerossl.com/features/acme/

Free, even.
Thats why i celebrate the move on that spectrum with care :D ... i remember the 2000s.

I just hope the trend continues and gives us more
“Now imagine being a 50 year old black female programmer and getting hired.“

If one showed up, you know very well she’d be hired. At least, that’s my impression of what would happen at a large company.

“Anyway I’d welcome colleagues of any color and gender.”

Yes.
I don't intend to "unmask" you as unempathetic. I apologise for writing that way. My intent is to challenge whether you truly understand what a minority population of your team goes through.

Everything I'm saying here I've learned through conversations with POC and women coworkers. I want to comment in a way that convinces others to have those conversations. If we "ignore color," we never have those conversations.
The solutions form a vector space
I actually plan on getting a paper scanner too (aside from the slow, crappy multifunction printer thingamajig i got), however, the pricetag has scared me away until now - do you have any other recommendations for maybe cheaper options?

That being said, scanning stuff is only part of my plan - i also plan on putting things into Mayan EDMS or paperless, OCR'd up and searchable...

https://www.mayan-edms.com / https://github.com/the-paperless-project/paperless
Bet Awards 2020 Live Stream Watch Online Full Shows(Virtual Event)
BET Awards 2020 Live Stream Watch Online Full shows(Virtual event) https://www.nbcrightnow.com/calendar/live-streaming-bet-awar...
Oh, the start of the war was awful in so many aspects, there were no rights. Second Polish Republic was aggressive state [1], [2]. It partitioned Czechoslovakia with Germany and Hungary in 1938. Soviets border on Poland lies about what was defined in Treaty of Versailles [3]. It does not excuse anything just show mixed things were. Have no idea about other parts of the German Soviet border [4].

[1] https://en.wikipedia.org/wiki/Polish%E2%80%93Czechoslovak_bo...

[2] https://en.wikipedia.org/wiki/Polish%E2%80%93Ukrainian_War

[3] https://en.wikipedia.org/wiki/Treaty_of_Versailles

[4] https://en.wikipedia.org/wiki/German%E2%80%93Soviet_Border_a...
There’s no substantial evidence of Wi-Fi radiation being harmful to us.
> If you accidentally leave DNS pointing at an old IP that gets recycled to someone else, you've authorized LetsEncrypt to issue a certificate to the lucky winner.

Yeah, but only for that particular subdomain. Sounds like a pretty contrived attack. For it to work, it needs to be some website that you forgot about, but still have enough users that it's viable to attack it.

>Most old school CAs do domain validations against the root of the domain, so it's a lot harder to accidentally delegate that.

Source for this? If there's even a handful of paid CAs that validate at the subdomain level this is a moot point.
I always thought the beauty of RISC OS was in the UX not the underlying OS. The three most important things were:

1. Task bar / dock thing. This was well before Windows 95 and Mac OS X both adopted the feature.

2. There was a dedicated menu button on the mouse. This was the only way to get a menu, there no menu bars anywhere, freeing screen real estate. The other two mouse buttons were select, which behaved like a normal mouse button, and adjust, which did the sort of things you need to resort to shift-click on other platforms.

3. There was no file open dialog. You just double clicked a file to open it, or dragged it to the app that you wanted to open it with if you wanted to open in not the default. To save you would be presented with an icon which you could change the name of, and then drag to a finder window. No duplication of the folder system structure in a finder and in every app that handles files.
Please cite.
Ha! That's the most difficult question of all and there is not one best answer; it's highly contextual based on the individual's circumstance. The goal is to eradicate the bacteria; this is usually achieved through antibiotics, antimicrobials (think herbs/herb oils), and prokinetics (to increase regularity). It can be a chronic and reoccuring problem in many individuals and is much more difficult to treat than the apneas, unfortunately.