skysight-inc/HackerNews huggingface dataset:
Lots of reasons:

- passwords would end up in version control repositories. A whole article could be written on this point alone but to summarise: those credentials will then be in your projects history forever more (or until nuking the history becomes more important than keeping the history)

- you can’t then change the credentials easily without having to push a new version of the application

- you expose the password to developers, which might be fine in smaller teams but larger organisations might separate those duties. You might also bring in contractors who you wouldn’t trust with DB access or shouldn’t have access for data compliance reasons

- you make it harder to have different credentials for different environments (Eg dev, UAT, staging and production). There is no workaround for that doesn’t introduce other problems....aside from removing hardcoded passwords.
deb and rpm packages provided at https://bitbucket.org/russng/russng/downloads/ .
This is like reading books with one's reading glasses on for a while, then off for a while, then on again for a while.

In Web analytics the medium to long term trend almost always trumps individual data points. Those don't mean a thing and can actually be bad for the business owners if "corrective" actions get taken based upon them.
DNA Inherited from Neanderthals May Increase Risk of Covid-19
China is aging.

China population https://www.populationpyramid.net/china/2020/

vs

India population
https://www.populationpyramid.net/india/2020/

China will never develop a consumption based economy with its aging population. It takes Europe, decades for its population to age. It only take Japan 25 years to age like Europe and China's one child policy is not helping and its on track to age like Japan.

It's only a logical decision to go to India for its young population and most Indian speak English. If only India is more friendly to foreign business and can do what CCP did. (central planning) I think India can surpass China to became number two largest economy.
Biosphere 2: A lockdown experiment that went horribly wrong
Using Grok with Elasticsearch to add structure to your data
> "Maybe everyone should have a burqa on hand..."

Or, we can just stop 'selling' women?
FF's market share on Android is very small. Chrome is the default browser and does not support any kind of adblocking. Oddly enough, Samsung's built-in browser does support adblock through an extension.
- The static site is actually just html/css (and js, if you have any). any ideas on how I could make that more explicit?

- It's pretty optimal. It's not minifying the HTML so you can see the tree in Github and see changes. But PurgeCSS gets run on the bundle before it builds out, so your css should be as small as possible.

- Hadn't considered that, thanks!
env vars are not collected by default within containers.
if OP's alternative is to use docker for every service then the whole problem is nonexistent since containers cannot access the host env.
Desktop: Kubuntu LTS

Server: Ubuntu LTS

My employer's standard is Ubuntu servers. For familiarity, parity, and ease of development I've settled on the same.

I've experimented with Arch, Debian, Fedora, and Ubuntu (non-LTS) over the years. I've moved to LTS because I don't want the hassle of upgrading regularly (I've been burned multiple times). The only problem I have with Ubuntu is Snap which I purge upon first boot.
>Build to Github: Anytime you make code or content changes, a blazing fast static bundle gets built out to Github where you can deploy it to your host of choice.

In light of the recent outages on Github it will be anything but blazingly fast.
This does look very good. I could easily see this becoming a real COSS alternative to SquareSpace et al, which I feel is sorely needed.
I use ALE, which I believe includes Rust by default.

https://github.com/dense-analysis/ale
There is a solution for websites. Band together and ban Googlebot at the same time. Post a message that the site will now only be searchable on, let’s say, Bing. Google would cave in. Of course it’s a collective action problem with a short-term revenue loss so easier said than done.
Here's an overview: https://lisp-journey.gitlab.io/pythonvslisp/

In short, the Python process has to restart to take changes in, and you loose your objects in the REPL. The Lisp process doesn't and is built to (lazily) update your objects to reflect structure changes (such as if you deleted a class slot). I particularly like the Lisp way for unit tests or the web.
The Largest Public Companies
How do you share the token to access Vault to your code?
It is pretty well supported on many common databases.

A few years ago, I added short lived, auto-rotated certificates (signed by our internal CA) to all of our applications. We used these for mTLS for internal app to app calls.

I also wanted to use them to authenticate to the databases. MySQL and Oracle support this sort of authentication just fine. The obstacle I ran into was trying to explain to the DBAs what a certificate was and why it'd be a good idea to use it instead of having them manage user names and passwords for us. They decided it was too much work and stone walled. I eventually gave up and moved on.
Would you say the same if the article was filled with "loli" anime characters instead?
Key Challenges of FinTech App Development and Their Solutions
An interesting question, but I worry about the latency overhead of a peer-to-peer system. I'd be happy to be completely wrong about this, though.
When I was doing Scala development, we went the same route using TypeSafe Config. Default/file in the src/resources which could be overridden by ENV.

It seems like secrets aren't orchestration agnostic. You can't seem to use Docker secrets without being in swarm mode, and k8s has its own secrets management system (or if you're running on AWS, you can use pod2iam and ssm to store/get encrypted parameters). I've been at places that use k8s+vault as well.
Rails already solved this with credentials files...
Washington’s NFL team officially retires name and logo after sponsor backlash
Signal uses AES-CBC + HMAC-SHA2 in encrypt-then-MAC.

If Signal used unauthenticated CBC mode, it would be bad cryptography.

Reference: https://soatok.blog/2020/07/12/comparison-of-symmetric-encry...
Thank you!
I would guess that certain transformations can be efficiently exploited by certain framings, but I have no intuition as to whether some transformations are dominant regardless of the framing. That's a very interesting question!
I mean the Little Sisters of the Poor, who have now had two separate court cases for their right to not-pay for insurance coverage for things they find to be evil.

They're nuns. They are sworn to a life of poverty and chastity. They didn't want to pay for birth control coverage. The Obama Health and Human Services administration could have let this go. It would have harmed no one. It would have deprived no one of birth control coverage.

Instead, we we needed to have Little Sisters of the Poor Home for the Aged v. Burwell. But even when they won that one, it wasn't enough! Because the attorney general of New York and New Jersey couldn't let them go either! So we had to have Little Sisters of the Poor Saints Peter and Paul Home v. Pennsylvania — which was just 7-2 at the Supreme Court.

(Don't worry. Joe Biden's proposed policy changes to "restore the Obama-Biden policy" on these matters with an "accommodation" would have them back in court a third time.)

This was a nine-year battle to vindicate religious rights. It may yet continue. You have dismissed it as "emotional ramblings" because you are ignorant and you are prejudiced. (You may yet think that their case is illegitimate and that they should be forced to pay for this coverage.) Look! You're an inclusivity problem now! Hooray, now you know what it's like!
So you want to be a wizard [pdf]
More flexibility in proxy configuration will make this easier to overcome, and there are already some plugins for Firefox which allows specifying specific proxies for specific sites.
I'll stick to the guidelines and assume your message is in good will....

It prevents your spits to reach other's noses and mouths. If all of us wear masks, then no spits flying around = no spread.
Everything can be blocked if you're willing to block everything else. Blocking something while leaving other services unaffected isn't trivial, and gets harder the smaller the data is. eg. if you want to block some bad guy from exfiltrating a 256 bit key, it's almost impossible to do because there are a million ways to do smuggle it out with stenography.
If the children don't even want to bother contributing to the enterprise, why not give ownership to the larger public, via a stock sale + charitable donation (like Gates and Buffet do), ?
Instead of complaining about in on Hacker News, how about you try to submit a patch to make it work? That strikes me as far more productive.
So their idea is to make the world more accepting of furries by being an asshole?
> Considering SSH is forbidden in most enterprise networks I've seen, your attitude is clearly in the minority.

You can't really forbid SSH (on paper only you can) since you can create SSH tunnels via virtually any port.
Are webtorrent connections encrypted? If they are not, then I'd rather they "break" legacy support now, when almost no one uses it (relatively speaking) than after a billion users and tens of thousands of enterprises use it.
I use and recommend Mozilla SOPS https://github.com/mozilla/sops
A couple a month seems way too much to me. I know for sure my last one here in southern Germany was more than 5 years ago. The only one that I actually remember experiencing during daytime was in my childhood, more than 20 years ago.
I thought I'd removed all of the trackers before I launched. It's just using Goat Counter (https://www.goatcounter.com/) which I believe is European-friendly. did I miss one?
I appreciated the design of Outline, until I looked at their website and found that... it's a complete rip-off of Notion?

I've been using Notion for a while, and the commands/block mechanism has been bothering me the most. I don't think it's the way forward for WYSIWYG markup editors.
Are there any Facebook engineers who worked in the Gehry building? How was it working there?
I was approached by two "real" publishers asking me whether I want to publish my book with them.

I had declined both of them as they only offered 10% royalty rates.

I didn't have to pay for editing. I did everything myself: writing, diagrams, proofreading, marketing.

In fact, I decided to self-publish it after reading this article from Antonio Goncalves about his Java EE 7 book:

https://antoniogoncalves.org/2014/09/16/the-uncensored-java-...
> when using closures you really don't want to be thinking about memory allocation

You don't have to think about this with Rust - and you don't need a GC either. The borrow checker will make sure that your closure doesn't outlive the variables it captures, which is what you need for correctness in this case.
I use DDG but homestly it not much better as far as quality of results go. To me it feels like DDG has gone out of its way to copy Googles shitty algorithm.
yeah, I'm thinking long-term here.
In the UK, more than 2500 times in one year, according to this article:

https://www.theguardian.com/uk-news/2018/nov/11/super-recogn...
> It is simply a fact that an individual often has influence on the situation where they have been the victim.

That's victim blaming. And definitely not appropriate when we are talking about society oppressing someone. No one person can control society. And if you belong to a minority, the group you belong to has a much smaller voice when it comes to influencing society.

> I assume that any person who is the target of a radical group is at least somewhat interested in not creating more members of that group.

You keep saying that it creates more members of a radical group, but that's not true. No one becomes the member of a radical group just because someone else is outraged that they are suffering from injustice.

And history says you are wrong. From the American Revolutionary war, to the Civil War, the the Civil Rights movement of the 1960s, and to today's black lives matter movement what we have seen is the opposite: the more outrage there is over social injustice the more people eventually decide that the injustice we tolerated in the past is no longer acceptable. When you see conservative four star generals speak up and say we have to do something about racial justice in the USA, you know that the outrage has finally worked. We are on our way to fixing things. The vast majority of the US is moral. And as uncomfortable as outrage might be to us at first, we eventually do listen.
This comes back to where does the config file live and how is it managed?
I was being pretty pendantic, to be fair it's a very common mistake amongst native speakers.

edit: just seen you're not a native speaker, which is quite interesting, as I normally only see natives making this error.
Why give this away? You could have a good business. You’re leaving money on the table.
What are you talking about? Are you even responding to the right message?

Tell me please, what are my secretly held preconceptions exactly, and how do you know that?

By writing double quotes around the sentence "It's about marginalized people." you are clearly claiming that I said that, which I absolutely did not. When and where do you claim that I say that?

Why are you deceptively trying to attribute a quote to me that I didn't say?

Do you have no better argument than blatantly misquoting me to make a straw man to attack?
Intel had (or still has?) the biggest share on the graphics market as every intel cpu had (has?) an integrated gpu. So by definition of market share the largest supplier wanting to buy the second one is an antitrust problem.
It does not matter that intels graphics cores are much worse.
This has nothing to do with being anti-furry. If this were full of MCU characters, it would be just as difficult to take seriously.
Who do blue collar type architects look to for inspiration or guidance?
`lld` is incredibly fast and allows medium crates to compile in under a few seconds for me. For people who don't know, if you're on linux put this in the `~/.cargo/config` file, and install the LLVM linker on your system.

```

[target.x86_64-unknown-linux-gnu]

rustflags = [ "-C", "link-arg=-fuse-ld=lld" ]

```

`-Clinker=clang` also works. I think you need a recent `gcc` (8 or newer) for `-fuse-ld=lld`. For `linker=clang` you probably need `clang` installed.

Permalink: https://reddit.com/r/rust/comments/dsfi5m/rust_2020_are_we_c...
Why don't more Linux users use OnlyOffice?
I think you are trying to argue both sides here. If the government is not afraid of doing shady stuff, like the Chinese government, then it is free to do anything to any billionaire, and being rich doesn't get anyone any power, like China.

If the government respects the rule of law, and doesn't do any extra judicial stuff, even then it makes sense to not let a competing foreign power like China be a stakeholder in your important companies.
What promises has Google ever kept?
I take them as a challenge to my web skills. More often than not the article is accessible in either a cache somewhere or by tricking the website into delivering it regardless of paywall. These sites want to be indexed by search engines. They want to be seen by potentially new customers.
FYI the Atom SLIMA package is very good: https://lispcookbook.github.io/cl-cookbook/editor-support.ht... Emacs is still the best, but not THE required editor anymore.
There's a good line in the guidelines:

>> "Please don't post shallow dismissals, especially of other people's work. A good critical comment teaches us something."

This is about as shallow as shallow gets.
Blazing fast because it's a static site, not because of github. Github's just where you build it to, but once you deploy it to a host (Vercel, Netlify), it doesn't matter if Github goes down.
I wonder why you would run a user supplied application without sandboxing it (reset env, user with almost no permissions, ...)
The point is that they arent sitting around waiting for foreign investment, they are now the ones making foreign investment. The paradigm has shifled.

Its certainly debatable whether belt and road is successfull, but I have recently recieved package from China to UK by Rail so at least some good came of it.

Also the countries China is investing in were neglected by West and wall street for decades.
I completely agree, OP could absolutely make this a COSS (commercial open source software) service.
While I think those features are cool, and also appreciate DDG's very primitive version of them, how come it isn't considered some kind of copyright violation?

After all, use a 5 second clip of a song for fair use and YouTube may automatically remove your video(or just the audio) on behalf of Universal Music Group.

Maybe websites ought to send DMCA takedown notices to Google when they find their content being used as answers in the search result page?
> And I would still like to see some evidence.

There are plenty of talks, papers, etc from both Juniper, Netflix, etc on why they made their choices, but your response is merely "could also be they did not understand how to configure Linux" without any evidence. We're not going to do your googling for you.

> Very compelling case you make there.

https://www.dictionary.com/browse/hyperbole
I get that "censorship" is dominating some people's thinking these days, but the relevancy here is ... tenuous.

Google always controlled the search results, and therefore the information you were going to see. Filtering the pages they link to isn't materially different from filtering the facts they choose to feature.

There's also a complete lack of motive here: Google allows you to pay them to "manipulate" SERPS (by placing your ad on it). And they tend to follow local laws. Beyond that, there just aren't any credible examples of manipulation, nor are there any plausible theories as to what would motivate them to do so.

I believe people feel uneasy about these changes because it's unsustainable: when they cut off all traffic to <x>, <x> will soon stop producing the data Google is recycling.

Plus, we all see ourselves as potential heroes in a story about some scrappy startup or project doing cool things with barely any budget and being successful. That opportunity relies on search as one of very few zero-cost meritocratic channels to find users.
What shocked me is no price for youtube followers. I guess twitter, ig matter where youtube followers don't.
Until ARM can give processing power comparable to x86-64 power limits be dammed. x86-64 will continue to rule the desktop and large parts of the server market.
This is the key point -- identity is plural, not singular. It means different things in different context, so requirements change as do the types of identity, data and disclosures used.

The important nuance though is that the 'range of identities' can be tied together on the user's side if done properly. I can have all my auth methods, accounts, personas, data, etc. tied together with a properly designed decentralized identity system, and choose which to use when depending on the context. This is the real promise of decentralized identity -- a connective tissue around the users rather than platforms.
New “Redux Essentials” core docs tutorial: learn Redux, the right way
And for those of us who write C++ there's always Intel's Threading Building Blocks. (Not sure if any other language has something equal in power and convenience.)
This would at least alleviate having to know n different env secrets that need to be set.
Shipping node addons which require libraries
You value your freedom very little, if you think that it means nothing.
I'd say leave it free to individuals and charge companies. This seems like it's the play here but idk.
European Union sets limits on distribution platforms for video games
I have ADD and used to have significant trouble with these kind of issues, while I still have trouble with time, almost all of my issues with remembering number (pin codes etc) went away after an "intensive" regimen of essentially n-back training prescribed by my care provider.

While my improvement after 30min a day for a couple of weeks was something of an aberration in magnitude (from 70"th percentile to 110'th, from well below average to above), it was reportedly quite consistent in increasing recall percentile with ~10% as measured against the general population. Which especially at lower percentiles is quite impressive!

It's not really realated, but to me the whole thing was quite a strange experience!
After roughly a week of daily practice, it suddenly felt like I found a part of my brain I didn't even know existed. I could suddenly pick numbers, or sequences of "lights" turning on on the screen, seemingly from nothing! The first times it happened I didn't really remember the sequence, I only knew which button to push, but after a little more practice I started to be able to consciously recall the sequence from this new place in my mind.

It was truly stunning to be suddenly able to look at a code at the car wash, and sometimes remember it for hours afterwards!

Me, who several times had forgotten my card pin, who though I loved and was good at maths had to read digit by digit to get the numbers right (and often still didn't), and who had in general tended to permute any kind of number more often than not for the ~30 years I had known what numbers were!

The brain is so strange sometimes.
Looks like ads and affiliate links.

https://www.runnaroo.com/privacy
Tell them that you placed an order, and did not receive a confirmation email. If you really feel obligated, you can mention something about SPF settings, but I literally would not provide more detail than "it might be related to your SPF settings."
Genuinely unsure if this is a parody of interview techniques or not.
That's awesome - regarding the side-project, great job.
That's too much. I live in Spain and the last power cut was maybe last summer. It's probably less than once a year on average. Maybe way less, but i'm not sure.
This was kind of obvious when they started to force everyone to make their content discoverable by Google. They were just trying to move content from publishers to their own web site. And the best part is: they did this with publishers consent, so now the price to even appear on Google is to give them content so that they can keep viewers for longer time in their web site. It is a complete scam that is the culmination of monopoly behavior.
Definitely not. Since the time period of when these caves were mined is around the same time a big flood might have happened.
Because in India keeping the wealth within the family is above all other concerns.
> As far as I know, people that can't process language at all are deeply mentally retarded.

Not correct:

https://en.wikipedia.org/wiki/Aphasia

There are also many different variants that impact different aspects of language.
It isn't about doing the actual work, they make the zig compiler break on carriage returns and tabs for ideological reasons of annoying people on windows and people who use tabs. There is no technical barrier to making it work, it's just a giant red flag of bad judgement that anyone would do that.
> Because pgp is from the 90's, gpg is an easy target mostly

That would be a good argument if it was retired in the 90's.
Cloud-like run environments would typically have some network to do. Comparing booting an OS from a local SSD with booting from network-reachable resources isn't really fair due to huge difference in the performance of the "resource bus" assigned to each case in my opinion.
Fascinating story, but then it ends with a bust: 5 seconds to do anything? Seems like a show-stopper for real work...
It's a tough problem.
Using AppRoles and consul-template. And if you're on Kubernetes, you can use https://github.com/sethvargo/vault-kubernetes-authenticator in an init container.