skysight-inc/HackerNews huggingface dataset:
You’re talking about different things. When you shop credit card offers, you are comparing issuers (eg Chase vs Capital One). That’s not the same as the payment processor aka card network (Visa vs MasterCard).

Of course it’s endlessly more complicated then that but it’s important to make the distinction.
Actually, gitlab is open source and the majority of the features aren't pay walled off. You can self host ~70% of the gitlab features on your own hardware, without paying a dime. Or you can self host and pay a subscription to enable all the enterprise features. At work, we use this for code which is too sensitive to host outside of our infrastructure. Closed source development needs management too.
People who pay in cash are subsidizing the store’s costs to handle cash. Paying employees to count the cash (usually after closing), putting it in the safe, distributing the cash to cash registers, refilling when they run out of change, paying for the security service (Brinks etc) to deliver cash to/from the bank, insurance against robbery...

Cash is not free for a store to handle. Stores pay transaction fees on credit cards, sure, but they save on all the costs of cash. A hypothetical store that takes credit cards only would not have any of these costs and their vulnerability to robbery/theft would be limited to merchandise and capital only, saving the cost of insurance against theft of cash. For some types of businesses (services rather than retailers), this makes their office a pretty unattractive target for burglars and eliminates employee theft of cash.
This seems like a pretty complicated attack with relatively low value, but maybe I don't understand something important. So let me run it back by my understanding.

You're proposing a TLS MitM (maybe plausible in a corporate environment that has this configured anyway) which downgrades the authenticator enrolment to have less protections, and then passing the resulting credentials to the real backend which will assume it has two factors without checking?

And later you steal the device so you can now use it without an additional factor because it wasn't enrolled using multi-factor anyway.

This would work as an element of the over-complicated schemes in an Oceans movie, but it doesn't feel very plausible in the real world. The skill sets to "Steal someone's iPhone" and "Obtain fraudulent Web PKI certs" don't overlap very much and this attack doesn't scale so it would need to be targeted.
Are you from abroad?
I turn that off whenever I setup a new computer. I too want my packages to be exact. It has only ever caused me pain. Mainly around a package author introducing a breaking change in a minor/patch version (which I actually don't fault them for).

I see ranges as "wobbly" foundation and the more dependancies on dependancies you have the "wobblier" your foundation becomes. I've spent hours tracking down some mid-depth dep that was being installed with a range that had deps that had a range that had deps that had a range and because of this a new "npm install" or update causes a massive jump in version of some very low-level library that DOES have a breaking change that propagates up. It's all a house of cards.

Any package manager I use for software development I lock down versions as tight as I can. If I have a problem I'll go read the change log, commit log, release notes, etc for the library in question to see if they have a fix for the issue I am having but blindly hoping everyone follows SEMVAR to the letter and doesn't just miss something they didn't test for is laughable.
There is nothing natural nor reasonable about absentee ownership. It has always been upheld by force. By kings, feudal lords etc. For other cultures, like for example native americans, the entire concept was completely foreign.
Why are you talking about Marxists, right now specifically?

As it happens I made a long rambling comment about certain politicians peddling propaganda narratives like "antifa" have switched to "marxists" when discussing things like Black Lives Matters protestors or the debranding of things like Corn Syrup Black Lady.

A week or two ago I noticed that suddenly the spigot of antifa hysteria stopped: https://trends.google.com/trends/explore?q=antifa&geo=US

Replacing this was the threat of "marxist protestors" and such: https://trends.google.com/trends/explore?geo=US&q=marxist

Why are you talking about Marxists now? Where did you pick up your script? And no offense, but were you involved in peddling scripts about antifa or similar tropes recently? I am honestly interested to know.
I think the same advice applies to a lot of potential moves.

If you can, AirBnB at least a month before actually making the move.

Far cheaper to do that and realize your mistake early than actually move and realize you screwed up. As an additional benefit, if it turns out that it is a place you actually want to move to, you will have a better idea of the sort of neighborhood you might like.
>you immediately notice that black people aren't there

Black people in the US disproportionately live in the south-east. And they have IT jobs there. You can work where a whole department has one white guy if that.

I'm not patronizing you by saying you should go do that, or that you would find it tolerable there; just that it's easy to get carried away making universal statements about how things are.
I came here to say this. College towns are my favorite places to live.

I think a big part of it is that the faculty and staff both create and demand culture more than average people. They also appreciate and support public schools and libraries.

And since academia doesn't pay well, there's less cost of living inflation than in private sector tech cities.
The flip side of this advice is that unless you really don't mind being tied to a single metro center, try to avoid becoming too specialized. Even if you like the city, one problem is that even during industry boom times, rising cost of living is likely to eat most of your career gains.

If you're going to bet your whole career on an unrivaled mastery of the minutiae of Postgres performance, then you better like the Bay Area. If your focus is to be a maestro of credit derivative trading, then I hope you don't mind spending your life in New York.

But general-purpose skills like sales, management, and accounting are likely to be valued almost everywhere. And therefore give you the freedom to live nearly anywhere. It might be scoffed down by the ultra-skilled industry professionals. But a guy who knows how to run an ice cream shop in many senses has a lot more career freedom and stability than a Google engineer or Goldman trader.
But who draws the "human liberty" line? Where and how does "human liberty" and "individual liberty" intersect? Is the Non Aggression Principle the doctrine on this? Or something more progressive that helps ensure minority rights? Some other option entirely?

Liberty and humanism are topics built on millennia of context and nuance. Blanket statements like yours, while passionate, risk being so reductionist that they distract from the important substance of the conversation.
I'm guessing that when the parent says "custom options" they're referring to libraries providing their own customization options via "crate features" (https://doc.rust-lang.org/cargo/reference/features.html ). Not only do libraries have an incentive to test that their own feature flags work, but also these feature flags avoid combinatorial explosion (and are easier to test) because feature flags must be additive due to how Cargo is designed: every feature flag must function the same even in the presence of any combination of the rest (flags must not be exclusive with each other).

On the other hand, I'm guessing that by "custom flags" you're referring to compiler-level flags that influence codegen, which rustc doesn't have that many of, and most of the ones that rustc does have are for controlling things that people might reasonably expect to be nontrivial work to change in the first place (e.g. linker/symbol options, cross-compilation/platform options, LLVM/gritty optimization/instrumentation options). Of the rustc codegen options that ordinary users might want to play around with, I see only two: one for turning off arithmetic overflow checks (which makes all integers act like their overflowing equivalents from the stdlib), and one for determining the general strategy of what happens when a panic occurs. The latter is unlikely to cause problems because the default behavior is a superset of the configurable behavior, and for the former any silent problems in misconfigured users would manifest as panics for everyone else, so there's a good chance the problem would be fixed upstream regardless.
>> it is much more difficult to opt out of these insidious and unnecessary web APIs
> I don't know what you mean by this. A native app has far more access to your machine than a website has. If you've installed untrusted native code, it's game over.

You're either trolling or clueless. Everyone needs a web browser. There are basically 2 of them. These are used (or necessary) to access a lot of things in today's world, from ordering a pizza to accessing government publications. Nobody NEEDS one particular web app. We can avoid installing apps, but not standards compliant web browsers.
Well, technically there’s a difference between born citizens as those are the only ones who can hold the highest office of the president.
mega censorship!
Please tell me how that argument could be applied to the UK's press, or Canada's, or any country in the EU's, or Australia's...
This is literally the soap opera model. Soaps actively solicit fan feedback and run productions with composable sets and flexible casts.
Really cool idea. What sort of accuracy did you achieve?
It sounds pretty simple and enticing. Any problems convincing the team of this route?
I hope you the best.

Be sure to check out HNs monthly "who is hiring" and "who wants to be hired". Get accustomed to the style and post early on the next one.
Comcast SecurityEdge – DNS Hijacking being sold as security
I personally wouldn't distinguish between them at all if I could help it.

The usual term is "foreign born."
Considering the recent crisis that's brewing between the two, it's a rational move for India to not let China get more intelligence data so easily.

From a humanitarian point of view, everyone in the world should uninstall these apps as they help collecting data for censorship in China [1].

Also, apart from being a spyware, TikTok is simply a dangerous app which brings much harm to society [2].

[1] - https://citizenlab.ca/2020/05/we-chat-they-watch/

[2] - https://nypost.com/2020/02/13/the-dumb-dangerous-challenges-....
If packages are "trusted", how would NPM ensure that they are continually trusted as new versions come out? I've read those stories with packages whose developers hand them over for maintenance, and then a new update comes out with malicious code
I don't get it -- bringing up Amex and Discover is like bringing up Bing and DuckDuckGo when people talk about the Google monopoly.
How the customer settles with the card issuer is not really relevant here. Many US card transactions draw from a checking account instead of a line of credit, but from the merchant's perspective it is just like any other Visa or Mastercard.
Rise in opioid deaths serves as reminder Covid-19 isn't Canada's only health
I doubt they can audit close source software.
Show me the reversed code... and show your work in reversing FB, WP, IG. This is how security works you need to show actual reversing.
In a marketplace of ideas, unpopular views would get... unpopular view counts (on Youtube and elsewhere).

If you want to keep with this analogy, censorship is a form of protectionism, so your marketplace of ideas is not a free market.
There's certain projects that you could leave and come back to after a few years and they're largely the same. But it's amazing how much more reliable, efficient, and user friendly KDE Plasma is even in a few short years.
This has always struck me as one of the more blatant and out-in-the-open financial inequalities in this country.
It's this benevolent concern for the welfare of black children that underlies his complaint that 'relentless propaganda for "white women with black men" would serve to lower the average IQ of the offspring'?
> if they haven't started the violence first

You mean physical violence. Physical violence is not the only kind of violence. It seems common for people in the "nazis get to talk too" camp to forget or ignore that.
Or just use one bathroom scale, and a lever to adjust weight of a single wheel to within the scales limit, then measure each wheel individually and add the results.
Some of them were in an almost ready state, just that anxiety kicked in and I would feel too scared to release it.
Robotics startup Botsync bags seed funding from Wong Fong, Seeds Capital
As student, this site is invaluable.
Infosys is not the highest office of the president so it makes no difference here.
It really depends on how you define the term pull request/merge request/request pull. The end action is to merge the code in the set of commits into a local branch, which is what all three allow you to do.

The ability to discuss code changes, etc, is separate from that. In my opinion, the terms pull request and merge requests are not entirely accurate. For services like Gitlab and Github, it's essentially asking the maintainer to review your code, so it really ought to be called review or change request.
I'm not convinced that nationalism not based on some intrinsic attribute of its people (like race) is even mostly bad.

1. : loyalty and devotion to a nation
especially : a sense of national consciousness (see CONSCIOUSNESS sense 1c) exalting one nation above all others and placing primary emphasis on promotion of its culture and interests as opposed to those of other nations or supranational groups

This, to me, reads that nations should advocate for their own interests first and have that as their primary concern - which seems pretty reasonable. Much in the same way that we have state and local representatives that advocate for the state and the locality in their respective governments, the higher levels up do the same for their entire citizenry on the global stage.

There's nothing inherently icky or oppressive about this kind of mutual self-interest, and it need not imply any kind of dehumanization. It is, of course, possible to take too far (see: xenophobia), but that strikes me as a problem of implementation and general human failings, not as an intractable problem with the concept that deserves it being compared to objective evil.

If the antonym of nationalism is globalism, I think that mindset has bigger problems.
Your primary iCloud email address is meant to just be your main email address, including non-Apple email addresses.
My masters project would likely not have been possible without overleaf (though I ended up compiling locally). Thank you for the product and good luck.
They don't obfuscate the email address you use with them.

I don't share my "real" email address with Facebook.

My Google account isn't my main account, it's a throwaway I use for things that require email to sign up.

This is a general problem for all OAuth IdPs.
Sacramento. Totally undervalued. No one seems to see this!
I'm fairly rusty on 1970s CPUs, but digging back into the recesses of my memory I have a feeling that the PDP-8 used single-byte instructions. (or maybe I am remembering the EDUC-8 project that was based on the PDP-8.)
https://floodfactor.com/ is the flooding open data site from the article, which is a project by First Street Foundation nonprofit.
To repeat myself, I know that this is more than possible to implement. But you're also hiding a lot of complexity about redirecting from your app to a browser, managing state, custom url schemes, etc. If you want to turn your curl request into an actual app, there's some nontrivial code you have to write and test yourself. And this code is important - if a user can't sign in, your entire app is broken.

And to what benefit? This is the point of the article. Sign in for apple is extra work and extra complexity for no benefit (to the developer, at least). It's an immature project and the fact that Apple is putting in the bare minimum effort into the docs does not encourage me to adopt this feature.

Google, in comparison, has a working sample project and step by step guide for implementing Google sign in on iOS[1]. Google sign in is just as much a "curl request" as apple sign in, but they put in the effort to give a high quality, well integrated, and native example.

Apple can't be bothered, which discourages people like OP from adopting the feature.

[1] https://developers.google.com/identity/sign-in/ios/start
I think it's similar to when someone switches jobs frequently and complains about every company they've worked at. At some point, you have to realize it's you not them.

To me it feels scrum is the person switching jobs constantly and saying people don't get it.
Crpyto isn't mainstreaming but you are having a mainstream-ization of non-CC digital payments.

Venmo is the thing in the US, but China has Alipay/Wepay, SE asia has various digital payment apps, Japan has had a huge "cashless" push in the past 12 months....

If I were running a retail shop in the US I definitely would accept payment by Venmo if I could.
Ending the duopoly is easy: create a payment processing system that charges nothing. However, you start peeling the onion on that and you wonder if it's just easier to create a new search engine.
Unsold Guinness beer used to fertilize Christmas trees during the lockdown
>The reward is that the product exists at all.

Why do VCs get any return from startups? Isn't the reward that the startup exists at all?

Better yet, why does Gilead get to write a press release explaining the reason they're asking $3k per person for the drug is so they can "invest in scientific innovation that might help generations to come"? Isn't the reward the money they initially got from the government?

I am getting pretty sick and tired of public money getting used – and rightly so – to fund innovate medical research, and then any and all benefits or profits from the results of that resesarch being privatized.
Love it. I hate it when I'm presented with a "sign in with Google". I feel pressured to have a Gmail account or a Facebook account (which I honestly don't want).

I get the fact that login is broken across the web and there is no centralized login authority, but sorry Google/Facebook are not it imho.

We can/should look at other ways to authenticate, but thats a larger discussion.
> China has a similar idea with the "One China" rule, and how it basically does not consider Taiwan to be it's own nation. Except, unlike India, it's quite clear than China is willing to invade Taiwan at some point in time (unclear when, but the tensions will never cease).

I can understand China's fascination with Taiwan under One China principle. But this One China principle doesn't extend to South China Sea or the artificial islands it created. Nor does it extend to China Occupied Ladakh. This is where their principle falls apart and becomes expansionist. They even claim Arunachal Pradesh in India to be theirs when the people of Arunachal Pradesh have since ancient times always had affinity with Indians than with Chinese.

> Have you read about the history of the U.S in the 1800s? Manifest Destiny may not have been written into the constitution, but it was absolutely the policy of many leaders of the U.S in that era, and calling it "a cultural thing" actually dumbs down what is an extremely powerful idea behind the forming of the U.S as a nation.

True. But that was 1800s and this is 2020. Times have changed. People change. Politics change. What was true then is not necessarily true now. USA had slavery in the 1800s too. Doesn't mean it follows the same policies now. We need to understand that Democratic Nations always undergo changes. The Obama era is distinct from the Trump era which in turn is distinct from the Bush era. That is the beauty of Democracy! So what US was in the 1800s isn't going to be the same in 2020s.

> However, what else would you call all out war, military occupation, hanging the president of the country, etc.? BTW, occupation continues until this day, in both of these nations.

Define "occupation". Having an army base in the country is not "occupation" by any means. If that is considered occupation then what would you say when India sent its Army (called the Indian Peace Keeping Force) to Sri Lanka to fight the LTTE terrorists in the Sri Lankan Civil War? We had our Army stationed there for years (1987 to 1990) until it was called back! The LTTE terrorists consider it an invasion. They assassinated our Prime Minister in response. So yeah, this was not occupation neither was when US invaded Iraq and Afghanistan. Was it an invasion? Yes it was! There is no doubt about it. But to call it "occupation" is stretching it to be honest with you.

US has an army base in Japan, South Korea and Australia. So is US occupying Japan, South Korea or Australia?
Go would have compiled an order of magnitude faster still. The compiler is less safe, and thorough than Rust's, but still.
Ha!
Reminds me of https://news.ycombinator.com/item?id=9224
Ah I wish people would stop using WhatsApp. It's not secure by any means. I'm really sick of facebook advertising products based on conversations I have in WhatsApp.
I had never heard of AnyList and this makes sure I will never use them.

Before Sign in with Apple, I uninstalled most apps that required me to sign up before I could even try them at all. Now I specifically look for apps that support it.

I don't want to give my email to 100 different companies (I get spam on the aliases that I did hand out long ago to apps that aren't even around anymore).

Though, all these hitherto obscure companies jumping into the spotlight just by setting themselves up as the underdog against the Apple world tree gives me an idea of what to do when I want a quick boost in popularity.. :)
You're tired because your lizard brain knows that Zoom meetings aren't natural
I'd like to see Apple allow users to use "Sign in with Apple" to maintain Apple ID account and purchase hardware/software? Imagine if they had to go through what they're asking all the services on their platform to go through... yeah... never gonna happen. Bravo AnyList for calling Apple out for pushing immature software ecosystem harmful software agenda.
I sit them down, pull out the list of conspiracy theories which turned out to be proven true, and explain to them that these are the only conspiracy theories that deserve any time and attention. All future conspiracy theories should be rejected instead of analyzed, and we should always try to align with the mainstream.
All of them good points. I'll add another wrinkle; for some reasons I can barely remember, I have 2 different Apple IDs. I was a paid .Mac user when it was a thing, but I also had a different account to make iTunes purchases back in the day. Currently I need to log in with both in my devices; one of them is used for purchasing in iTunes/App Store, the other one is used for iCloud Photos/iCloud Drive. However you can also make purchases in the Books app (which I use it to sync PDFs), so this always trips me up. There's no way to merge two Apple IDs, and setting up a new device is always an adventure. Knowing when to use which Apple ID can be confusing (don't get me started on 2FA, I'm afraid that having 2 Apple IDs will eventually lead to me getting locked out!).

I liked the concept of Sign in with Apple when I first heard about it, but at this point it might be too confusing (I also never check my "main" Apple ID email).
John Oliver on Evictions [video]