skysight-inc/HackerNews huggingface dataset:
In this context it would be interesting to see how the current practices in affirmative actions would change under different metrics. For example, what if affirmative action was mostly calculated in terms of a combination of local Gini coefficient and yearly income. Would it in practice cause the same "re-leveling" of the playing field?

In the same line of thought there was a nice blog post on the (temporarily deceased Slate Star Codex) about how country of origin of ancestors in white Americans of European descent have strong statistical effects on income/class today. the same for African immigrants.

From this perspective the question becomes "can we improve the effect of affirmative action on fighting racial social segregation by using non-race based metrics?"
What if tomorrow physics depend on funding not available because LHC2 ate the budget?

Cf. "opportunity cost"
With Flights Banned, Son Sails Solo Across Atlantic to Reach Father, 90
Let's say we stop international conflicts, make successful demographic transitions in all countries, and concentrate our time and efforts in making progress in biology, physics, and all?

Yes I know that what I propose is impossible right know, but it makes me cringe that we are such an irrational species...
Thanks for sharing. It would be very interesting to know some of the examples when it payed off. Could you please share?
Are you saying a purpose is to fund physicists with jobs?
perhaps it would be a good idea to make it more visible / obvious to people that they would have that option? many of the people who are in vulnerable situations, may already be feeling powerless or have learned helplessness and may not even think to reach out via email. that seems like something someone who is normally quite empowered might think to try, but if one thinks of large internet companies like google or facebook, the idea of emailing to get a human being to help you seems impossible so people might not even think to try with HN in this age of algorithmic support.
Yep, it's a local HTTP server by default. It's also possible to expose it via reverse proxy, and you can set basic auth password in the extension's settings.

What do you mean by slurping here? Security-wise, a random website shouldn't be able to query a localhost because of CORS policies.
Hackers are/should be the short sellers of the Internet.
It's never too late to change, man.
There are multiple reasons why computer security is nothing like "trying to steal from stores to check if their loss prevention functions are working."

To start with, loss prevention is the store's problem. They have all the incentives they need to do it themselves. With data it's completely the opposite. They have your data and it costs you, not them, when they secure it poorly. Many of the entities with poor security are effectively judgment proof, so legal liability is ineffective. The users are really the only ones with the right incentives to poke around and make sure their data is secure. It's like storing your valuables at a bank, but if you notice a security vulnerability in the bank, not only is reporting it or informing their other customers likely to get you arrested, they're not even required to let you remove your valuables from the bank. (Try to get Equifax to delete your data.)

Then, the scope of what's considered "hacking" extends far beyond things that cause actual harm. The sort of things investigative reporters have long done to humans with a telephone are a felony if you do them to computers with an internet connection, even if no "harm" is done to the target other than to reveal their misconduct to the world.

Then, the penalties are unconscionable. If an investigative reporter goes past the "employees only" door to take some pictures, that's illegal, but the most common result is only that they'll be removed from the property, and even if charges are pressed it's only a misdemeanor in most places. Do the same thing with a computer and you can expect federal prison. It discourages people from testing the fences, even though you want them to.
The CEO did not in fact donate to a hate campaign. Please avoid defaming someone with mischaracterizations of their opinion. He is a religious man who believes that marriage is a religious institution between a man and a woman. You don’t agree with that position. Neither do I. And it might be hurtful. But this is not the same thing as a hate campaign. Eich does not hate gay people. Many who opposed Prop 8 (and the majority opposed it, don’t forget - it failed) did so more or less on semantic principles. They supported equal rights but objected to using the word “marriage” specifically, as they felt that it was redefining a religious word. Some undoubtedly did hate gays, but viewpoints of the opposition were nuanced and varied. It’s not accurate to conflate them all with hate.

The Thiel boycott seems futile, because I doubt you’re also opposing facebook, paypal, spacex, stripe, spotify, and dozens of other SaaS that is powering services you use.
I know a lot of forms out there that will accept any input. The standard to improve upon here is often rock bottom.

A lot of developers do not know that data should be validated.
No for-profit company is your friend. Only as long as they can extract value. Not a cynical view. There is plenty of evidence.
I would be happy if my router supported letsencrypt.

Why would I even bother copying and distributing self-signed certificates if I can just properly get a certificate for my own personal router?

It’s idiotic that people still trust pure HTTP and have no option of switching.
It was not my intention to call out anybody (I don't think the person I responded to was angry, so there was no call-out here.) Anger is something I used to have a lot of trouble with. At one point, somebody took me aside and explained that anger is something I can control, if I have the will to do so. That's a favor I try to pay forward.
two key grafs:

"Professionals today would never self-identify as bureaucrats. Product managers at Google might have sleeve tattoos or purple hair. They might describe themselves as “creators” or “creatives.” They might characterize their hobbies as entrepreneurial “side hustles.” But their actual day-in, day-out work involves the coordination of various teams and resources across a large organization based on established administrative procedures. That’s a bureaucrat. The entire professional culture is almost an attempt to invert the connotations and expecta­tions of the word—which is what underlies this class’s tension with storytelling. Conformity is draped in the dead symbols of a prior generation’s counterculture."

Conclusion:

"Absolute pessimism is almost always a sign of a lazy narcissist, and narratives of inevitable decline are used by those who want to absolve themselves of the obligation to act. Possibility has opened up before us in a manner that is rare in history. We need stories which encourage action. Our leaders must rise to defeat a global plague and in the process test whether or not there still exists, in this underused husk of a nation, the capacity for vigorous action—the capacity to produce the types of heroes who will inspire future generations. Now, more than ever, we need a story."
They didn't say 'all', they said 'many'. So your one example doesn't 'beg to differ' much in the way of OP's point.
ordered containers exist in most standard libraries. e.g. C++ std::map. Java TreeMap. So it's not a question of having containers ordered. But C++ and Java use red black trees (though avl trees satisfy the requirements set by the C++ standard). These are equivalent to BTrees with a small fanout. I would rather have something like B+Tree with an enormous fan out so the use of being ordered (ranged reads) gets better cache coherency.
Good. I know too many places (large, established places) that could be using ACME but currently just put up with manually replacing 2 year certificates which means every 2 years the live certs are expired for at least half a day.
> Like when someone performs a racist act, how should we respond in a modern society?

You'd first have to define what a racist act is and who gets to decide that it is so.

We have a working system for these matters - legislative and judicial branches of government.
> Is the fault of the university that they became corporatized?

Yes, and specifically the kind of bureaucratic organization-man corporatized that the article discusses.

Tuition keeps skyrocketing at multiples of inflation, yet post docs and adjunct lecturers live in near-poverty. Where's the money go? "Administration".
Are common certificate validation libraries honoring these constraints?

When I tried to use this many moons ago, most things ignored the constraints; although I could mark the extension critical, and then some (but not all, yay) of the things that didn't understand would refuse the CA.
Covid-19 could mark the end of the super-jumbo jet
It looks awesome, thanks!

Bad thing is that the website has almost nothing on it. I don't know if it's a service, a downloadable app, a self-hosted web app, or anything.

And the text on the website is light grey on a white background so it's very difficult to read.

I found more information on the github, but it still needs screenshots and information on how to actually use it (download? self-host on server?)

https://github.com/oschettler/knowfox
CPAP is not something to avoid but to embrace. I love my machine. I sleep on my back again. I hardly wake during the night. I can breath fresh hair even with a pillow over my head. It's just lovely.
Yep, this is called Binet formula, and actually all linear recurrence sequences have one.
Some features require Secure Context. Browsers just don't enable those features in a context that isn't secure (HTTP is only considered "secure" on the loopback network to your own machine). If it's a Javascript API it returns an error, if it's an HTML or HTTP feature it doesn't work. "Here's a nickel kid, get yourself a secure context".

Both Chrome / Chromium and Firefox have explicitly set policy that new features (as opposed to tidier ways to do things that already exist like DOM improvements) will require Secure Context, and there's already a weak assumption that even some tidying up will go into secure context when the rationale for not doing so is shaky (e.g. some of the web crypto features that needn't technically require Secure Context do anyway).
The validity time is part of a process where browser vendors have tightened rules for CAs over time.

We got plenty of gradual improvements over time. Validity time does not stop incidents, but it makes the impact smaller and allows ecosystem improvements to propagate faster.

Take for example Certificate Transparency, which is one of the most important ecosystem improvements. It was required for new certificates in 2018. But we still can't rely on Certificate Transparency logging for all certificates, as the certificate lifetimes were so long.

In the future such improvements will take maximum 1 year till all certificates have them.
As far as I know, Home and Pro editions of Windows 10 don't differ in regards to telemetry. They both offer two settings: "basic" and "full". Enterprise and Education editions can go one level below with the "security" setting.

(Edit) The settings are now called "off", "required" and "optional": https://www.computerworld.com/article/3532008/microsoft-elim...
There was also a very good interview done with him (~1.5hrs) a while back https://www.youtube.com/watch?v=Eua5iPUKw6Y
Banging rocks together has been a very fruitful method which is always limited by the technology.
Many physicists believe that the rock banging should be an ongoing exercise which itself guides the theoretical directions.
They also believe that there is an almost guaranteed chance of finding something, if their advances to higher energy are achieved.

All we need is one anomaly in the vast data processing. There are many things which are expected to be seen at higher energies. If they are not seen, it still says a great deal and will guide theoretical discussion.
I heard perfect forward secrecy is intended to prevent decrypting past traffic.
Less labour intensive for whom?

Anyone using email validation now needs to click a link every month, or their cert goes away.

I used to have the unfortunate task of managing a massive SAN cert used for white-label hosting with a bunch of our customer's domains.

Getting every single customer to get their tech person to look at the mailbox and click a link was often a multi-month process.
The point isn't that you shouldn't validate data. It's that telling developers to validate data doesn't help them. It begs the question of "how" to validate data, and the answer to that question is so big that it encompasses most of software security. Meanwhile, left to their own devices after that one instruction, developers come up with silly input validation schemes, like password fields that don't accept SQL metacharacters.
Show HN: An app to track your reading
Hello HN,

I made an app to track your reading progress. I've tried to use Goodreads for this but their UI is kind of complicated.

The basic functionality is quite close to what you'd do with a spreadsheet. The only difference is that the app is quite simple to use and doesn't try to stand in your way.

You can also export all your data to a json file.
Really cool.

No HTTPS, though? :)
In my case no. But I tend to use the big guns. I'm willing to learn though
I think the metric Epic would be interested in would be the amount of royalties they would collect, so it would include the number of developers scaled by the financial success of their games. The financial success of the developers whose market share you capture matters a lot.

Godot is more likely to be used by people whose games wouldn't earn enough to cross the threshold where they would owe money to Epic had they used UnrealEngine, so keeping them away from Unity makes a lot of sense.
If better models of climate change allow us to predict more precisely what will happen, we may be able to get people to care more. If we can say with a high degree of certainty that City X is going to see 4.5x as many terrible hurricanes every year, then the people of City X may have a more vested interest than if we say "there will probably be more hurricanes".
I don’t think it even necessarily matters whether the chicken is sufficiently conscious. If we asked “why does the chicken have a red comb?” it would be clear we weren’t asking for an explanation of the chicken’s conscious choices.
Like others here, I did a lot of learning via a game and via a typing class in high school. But one thing that helped me a lot was doing some imaginary practice away from a keyboard as well. For example, if I was a passenger in a car I would read road signs and imagine typing out the letters. Sometimes I would physically move my fingers, and sometimes I would just tense the finger involved while I imagined reaching to the appropriate key. I practiced this way anywhere I was hearing or reading words and had the spare mental cycles to do it.

I used this technique again when I switched from qwerty to colemak. You'll still need some dedicated "coursework" like a game or program, but this approach lets you fit in some extra practice over the course of a day.
Kudzu is medicinal. I grow medicinal herbs in my farm and so I get to ‘hear in’ what herbalists discuss amongst themselves.

Kudzu in combination with other herbs was considered for covid during early times. I subscribe to homeopathy myself rather than herbalism and found Byronia Alba a close substitute. Altho I use it as a prophylactic. (Not medical advice. It’s just for my own constitution and supports my constitutional remedy. Not falsifiable)
This is awesome! I just started using the WorldBrain Memex and was trying to solve the issue of accessing other data sources, so perfect timing -- thanks!

Looking forward to trying it out.
Ooops. I used PACE based STB by 2002 and they had booting problems. I have blame the OS for 18 years. But that explanation about EMF makes sense.
There's a 21-feet distance supposedly required for a trained shooter to draw and fire a gun before a knife attacker can close in. Sure, they had guns drawn, but you still cannot "wait" until they approach.

And, frankly, this "didn't need to die" perspective is alien to me, and I bet most people. If it was my life on the line, I wouldn't even allow a 1% increase in risk - the guy readying to, and obviously willing to, attack someone with a knife deserves to die. Does he "need" to die? No. Maybe event if he's literally in the process of stabbing someone, it would be wonderful if we could freeze time and just take him to a mental ward. But is it acceptable for him to be killed? Without a shred of doubt, yes.
Society generally gets more out of research than a bunch of gainfully employed physicists.
The whole "Let's Encrypt should solve all your problems" attitude is arrogant and short-sighted.

1) In my experience the user experience even for technical admins is still flakey on at least some popular platforms. In other words, it's not as incredible as you think.

2) It's not available to a host that doesn't connect to the internet but does occasionally get connected to by a local browser (eg. IoT firewalled inside my LAN is one obvious such case; I'm sure there are others).

And most importantly:

3) You'd have to be insane or naive to accept an architecture that leaves you dependant on a single vendor (especially if you need that vendor more than they need you!).
Watch more what GIFs – comiciano
In fact, I'd argue that anybody who's not explicitly anti-fascist is at the very least comfortable with fascism.
For some reason, iOS Safari won't do like all the other browsers, show a warning and then let you access. No, it outright rejects self-signed certs. You have to go through the trouble of installing the root CA into the phone, which is not practical.
It’s free to own a certificate today, so doesn’t matter.
Really. This: https://jamielinux.com/docs/openssl-certificate-authority/ gives you a CA in about an hour. HashiCorp Vault will give you a CA in 5 minutes. certstrap will give you a CA in 15 seconds. It’s 2020, it ain’t voodoo anymore.
There is progress toward Jurassic Park.
1. Gene edits turn a bill into something like a dinosaur snout: https://www.livescience.com/50886-scientific-progress-dino-c...
2. early birds may have been baby dinosaurs that stopped developing, yet could produce off spring, according to another recent DNA study I can't locate at the moment. Now if that development process could be turned back on in a bird ...
After, reading your comment. I cross checked result and found out that 3 is most optimal size. I even ran fib(40) on it. with size 2, There are many misses but after 3 and on wards misses are constant(if fib(40), then misses are only 40 which emulates DP approach of O(N)).

Why 3 is optimal, because of how recursion and LRU work. I wish i can explain it using animation.

You can play with it. https://repl.it/repls/NocturnalIroncladBytecode#main.py
>Browsers and HTTP servers are adding all that functionality anyway

I am going to assume things will improve one HTTP/3 is finalised. But right now I dont see QUIC from non-google server at all.

And I cant help but think ( May be it is just me ), are we trying to over-engineer the Internet?

Edit: I just check on the clients side. Turns out Safari 14 may be the first browser to ship with HTTP/3 enabled by default.
What is an example of a “White Supremacist” message on there? Not seeing anything supremacist in the first 10 or so top messages.
Honestly I'm fine on the job and I'm usually not stressed like I am when I do leetcode. I'd be fine keeping my current gig but the TC increase even if/when I get promoted is lower than the average Google new grad offer.
You can use a 3rd party service like dashlane or bitwarden
I finally created my first Python package Need some feedback to make it better
So I've been into Python for almost a year now, I used to be a Java guy before but I don't how this transition took place but starting with Tensorflow, then Django, Flask and dozens of other wonderful frameworks enabled this transition probably.

Either way, I was just working on some of the CSES problems the other day when it struck me that maybe I should try building a package in Python, I had never done that before so I started with something that could be made really quick and provides some sort of utility to the users so I ended up building a utility that lists the directories like a tree. It's like the `tree` package available on homebrew but this is 10x more lightweight.

I'd love some feedback, feel free to open PRs and issues on the repository, I feel like this could be made into something new for fun.

Github : https://github.com/arthtyagi/dirtreeutil

PyPi : https://pypi.org/project/dirtreeutil

Install it using : `pip3 install dirtreeutil`
That bleak graphic at the top with all the out-of-business signs captures one of my biggest long-term worries about the pandemic. This passage, while not quite so bleak, sums it up:

There is something utopian about Reef’s project, which inspires visions of greener, less congested, more accessible cities, in which delivery fleets zip around on electric bicycles and people congregate for cocktails in rooftop gardens, planted atop defunct parking structures. It is also a little sad. Decentralized, delivery-only restaurants—to say nothing of the WeWork-ification of restaurant kitchens—point to greater problems and complexities, like widening inequality, the high cost of living in coastal cities, the tenuous financial model of restaurants, and a culture in which, whether by preference or necessity, people prioritize convenience even in their leisure activities.
> You may not be aware but this is a common alt-right strawman argument opposed to Black Lives Matter.

Just argue the point. This kind of insidious smear-by-association is what I despise so much about the current state of public discourse.
> People are free to live anywhere they want, but they still create those communities and prefer to live among their own kind

I disagree

In some some cities in California, a former mexican territory, there were property deeds that explicitly forbade selling to mexicans

Where do you think mexicans ended up living?

Then someone can come along and point and say look every race prefers to live among their own kind
Ways to Make Your SaaS Customers Hate You, Ranked
I remember a few years ago when kudzu bugs first showed up. There were swarms of them, and I remember for a few weeks I'd get them on me when walking from the car to the front door.

Then the next year I thought they'd all vanished, until I looked at a kuzdu vine and noticed it was covered in them. It's almost like they didn't know where the kudzu was when they showed up, but now that they've found it that's where they stay.
> there is no system today where you press a key and that key appears on your screen in less than 8ms. Xi achieves ~16ms on the right platforms

How does one measure this? Say for the text editor I'm using (Emacs) or for Chrome/Google Docs?
I keep hearing this “not salvageable” but this seems odd to me. Wirecard has been issuing physical cards for many companies and runs the payment systems for many large companies. The cost of switching off that infrastructure is high.

Why wouldn’t someone want to acquire a miniature wirecard after the bankruptcy is through?
And being a doctor is a mindset too? To find a vaccine for corona virus which mindset do you need? Maybe we don't have it
Seems like a small price for trying to answer "What is the universe made of?"

Similarly for space exploration (even if we weren't in need of a contingency plan) to know what's out there and satisfy natural curiosity.

If there were projects to answer "what is our purpose for existence?"/"why do we exist?" or "do we exist?" I'd fund them too.
Here: https://rationalwiki.org/wiki/Racism. Rational Wiki is a good resource for exploring arguments against bad ideas.
Free dynamic DNS, no need to log in or register