skysight-inc/HackerNews huggingface dataset:
Not a special trick: it's easier to write as if the target audience is you instead of other people. I'm motivated to write what I would like to read. Since I like studying quantum computing, i've slowly moved from posting the writings to Wikipedia (https://en.m.wikipedia.org/wiki/User:Vtomole) instead of my blog (https://vtomole.com/).
I don't understand. Do you want an open hardware platform only to install gigabytes of google/apple crud on? Why???
I just want them to properly sync tabs and bookmarks between PC and Android, and that would make Edge perfect for me.
Kubernetes kubectl wrapper for interactive resource selection
Bacteria with a metal diet discovered in dirty glassware
This is actually not a bad idea. As a candidate, it still gives me the assurance that they aren't just throwing out these tests to 1000 applicants.
1st 2 sentences: good comment! +1

Parting shot: unnecessary, obnoxious.
-1

Net: 0
There is a way to read pickles without running them, but it is Python-only and still requires one to know how pickles work. The module `pickletools` can be used to disassemble pickles to bytecode, just like `dis` for normal Python objects. Honestly, though, I wouldn't say that this invalidates the point about unreadability, but just hammers in exactly how unreadable they really are.
Yes. it would be equivalent to Archimedes’ claim “Give me a place to stand on, and I will move the Earth” (https://en.wikipedia.org/wiki/Archimedes#The_Lever)
Boy in 2020 I can't see describing databases as difficult to scale. Expensive, sure, but these are solved problems, and the tradeoffs for going the NoSQL route will likely exceed its perceived benefits.

Modern relational databases are great at what they do.
Also ensuring that a hacker can get the 2FA token directly from the owner by pretending to be customer service...
If arbitrary, or bad moderation is the problem, federation is a solution: choose your instance well, or run your own.

If an instance has untransparent, poor, or arbitrary moderation, and you find that a problem, you are free to move along. Other people might like such moderation (e.g. I just want to share memes and not bother with politics).

I chose an instance that deliberately has no instance blocks, other than spammers, because for me openness is more important than being safe from harassment. Others will choose diffetent. It's the diversity that makes the model so great IMO.
https://news.ycombinator.com/item?id=23857621 gets at what I was thinking but was too lazy to articulate.
Under the GDPR, consent boxes cannot be mandatory. The service must work even if you don't consent.
So basically he is just showing he has zero interest in privacy, if he doesn't care about privacy of his own children.
I think these flaws are fairly minor, at least you seem to be nudged towards use cases where you're not overly reliant on pickle for complex work.

If readability is an issue there's a JSON version that's quite useful.

Other than that, most of the other concerns are addressable. If security matter perhaps use an encryption lib around the pickle, rather than ask for it to be built into it? As for speed, you're already using python and chances are you're not constantly pickling and unpickling?
Thank you for the article, it is great read. I'm trying to follow haskell-oriented blogs, some of them are cool to read, while more deeper ones are harder to follow (probably it is about me, not about author!).

Anyway, I often struggle to understand "what problem is author solving exactly", in terms "what is the benefit if we create such recursive type (or whatever else is the theme)" ? Somehow, there are lot of articles making some magic and showing "how can this be done in haskell", but at the end it is hard to understand "what is the benefit here, which real-life problem can I solve by using this technique, how to relate this with real world".

Please do not get me wrong, this not only about this post, but somehow very often in haskell - related posts. Or is it only me ?
Ubports Ubuntu Touch has a Signal port up and running. It's called Axocotl: https://github.com/nanu-c/axolotl/

It's not fully functioning but you can see what's working fairly quickly;
One step at a time to open peoples’ minds
Haha you are so right!! That i think is the biggest problem with Europe, Microsoft an Apple is just everywhere...probably even more Windows installations on servers than the US.
I like this solution a lot, but if they asked you to contribute to a public codebase, you'd be able to tell who the other interviewees were, and how many of them you were up against.
Imagine every country comes up with a similar law restricting personal data transfers. This will render Internet useless.
tbf since their targeting was low income neighbourhoods, one can assume the higher income neighbourhoods would have contributed some of the share.

A fair experiment would have at least stripped away all the other state funded benefits UBI supposedly replaces, but I guess 'UBI is good for the spending power of single-income couples but leaves the poorest people much worse off' wasn't the headline the advocacy group was shooting for...
An Internet with no personal data is a far cry from useless.
Thank you for articulating this. This issue has many manifestations in the interview process. It can be so frustrating.
>What happens if I view a EU user's linkedin profile from the US

How can you see a private profile if it is private?
How secure is your web browser?
Laws for Hackers to Live by [audio]
Lego Nintendo Entertainment System
TikTok Enlists Army of Lobbyists as Suspicions over China Ties Grow
Preparing for your next role as a developer? Codenami.io can help you!
Perhaps they should focus on October beer [0]:

> Ships transported Hodgson's beers to India, among them his October beer, which benefited exceptionally from conditions of the voyage and was apparently highly regarded among its consumers in India.

[0] https://en.wikipedia.org/wiki/India_pale_ale
Interestingly, one of the most important battles in the browser (and apps in general) market now is the privacy aspect. There are two vendor groups here: one explicitly mentions it (Apple, Mozilla), and the other remains silent, speaking only about non-provacy features (Google, Microsoft).
Key takeaways:
https://www.helpnetsecurity.com/2020/07/16/how-secure-is-you...
I'd like to know this too. Lately when I've been getting into something new or trying to solve a non-trivial bug/problem I've tried to keep notes as I go along in the hope of finally creating some blog content. I keep finding this extra step really slows me down and I forget to keep doing it at some points so what I end up with isn't even very good. I think this is just another skill I have not mastered (or even fundamentally grasped).
Why would it? This just means that people would be in control of when and where their personal data is transferred. If you choose to, say, make your profile public to the world, I don't see how that would be affected.
I must say, out of all the things to happen on a Thursday night I wouldn't have expected to read an article where someone referenced my own code that I wrote when I was 15. (5 years ago now... time flies) Here's the file I presumed he looked at; https://github.com/nvella/sdvr/blob/master/pk.c

I was trying to reverse-engineer my parent's network CCTV DVR so I could hopefully integrate it with Home Assistant - as far as I'm aware the sluggish smartphone apps are still the only way to access those boxes. I wasn't ever able to get as far as George did with his IP cameras; I hit a snag on trying to correctly reassemble the H264 streams, so all I ever got out of it was mostly corrupt still frames.

If you're reading this George, well done! :D
Sound like they are using 32 bits keys and reached the limits of 4 billion items.

Had the same thing happen in my company earlier this year in our homemade chat system.

Why didn't they get alerts? Because the alert was probably counting existing items in the table, not deleted elements that did increase the auto increment.
In the ActivityPub thread now on the frontpage [0] I see a lot of misunderstanding about the ActivityPub spec, such as it is bloated, it is missing so many things, you must use 'failed' JSON-LD notation.

So I reposted this article by the developer of GoFed (which recently reached 1.0.0 status [1]) that puts things into perspective and clarifies the intentional choices that led to the v1 of the specification.

[0] https://news.ycombinator.com/item?id=23852036

[1] https://go-fed.org/
Phemex: Crypto Exchange Review
Hi thanks for the response. My use case would be to execute relatively small snippets of shell code/one-liners as part of an asset management pipeline without having to "shell-out" and invoke an external process, mostly at deploy-time, in a portable fashion, such as rendering a static HTML file upon change of dependent data, or rendering an image/icon from a vector format representation, and similar tasks. Requirements for shell control constructs are modest, but piping and redirection should work, as well as limited shell var/macros expansion, and maybe if/then. In Node.js-land, there's the shelljs package which is both an API for (synchronous-only AFAICS) shell-like ops (as in "shelljs.ls('file.???')" and a (very limited) shell syntax parser that could call those funcs from a string ("ls file.???") like yours as far as I can understand, but I guess yours is already more capable then the one shelljs uses. Still, shelljs is used as a dependency by quite a number of high-profile packages.

Node.js is much more useful simply because everything in js-land (asset management tools, web server backends) runs on Node.js rather than deno :)
As a EU citizen I'm glad about the decision, I don't have any confidence any more that data stored in the US is secure and that the US can be depended upon.

Also important to point out how much of this goes back to Max Schrems activism over the years and noyb (https://noyb.eu/en). This is a huge win achieved with relatively few resources. Staying engaged is worth it.
It may have linux support at some time(like they have given hint before) but many linux users are not going to use this browser.
And that's it? Interviewer saw that as reason enough for you to fail the interview? Be glad you didn't get in!
How many candidates do you have doing a take-home per position?
In fact if others come up with similar laws (even vaguely), the EU laws, as they are now, would allow the the transfer.

For example Switzerland, Japan, South Korea etc
Come to Malaysia. Don't stay in Kuala Lumpur or Cyberjaya, especially if you're working remote. An hour's drive out of town and you can get a two story house for $400/month. There's enough comforts too - cinemas, malls, KFC, pizza, Starbucks, swimming pools, barbeques, educated people who speak English, plenty of parks and gardens, and low pollution.

Tax is capped at about 25%, including for businesses. We also give entrepreneurs startup visas even for just an idea, where verified startups could get 0% tax under the previous system (which is being revised because people were abusing it to set up call centers). There's also a generous program if you want to bring in foreign engineers.
That's fascinating - and kind of what I was hoping this article was about.

That lead to the E-Ship 1 (https://en.m.wikipedia.org/wiki/E-Ship_1) - a wind turbine servicing ship with 4 Flettner Rotors.

There's a detailed breakdown of that ship here: https://www.stg-online.org/onTEAM/shipefficiency/programm/06...

That paper gives some interesting numbers - in one voyage spinning the rotors gave a speed boost of 2.4 knots with a constant power going to the propellers, which they calculated as a 1.7MW power boost (engine was running at 2.8MW). Overall the rotors give - with favourable wind and sailing direction - a maximum of about a 50% fuel reduction.

Obviously actual performance was much worse (you often want to go where the wind isn't blowing) - for the test voyage they used around 85% of the fuel they would have without the rotors.
There is an explicit section for privacy on the page as I can see, there is even a dedicated page to it: https://microsoftedgewelcome.microsoft.com/en-us/privacy

Also they wrote a privacy whitepaper for Edge as well: https://docs.microsoft.com/en-us/microsoft-edge/privacy-whit...
just here to say that vscode works plenty fine on electron and has handily beat out other IDE's you might consider better software. it's always possible to use a tool badly but it's not always the fault of the tool.
> There is not automatically way to enlarge the length. And I think that is not the things should be done by the database itself.

Sorry; it's hard to balance terseness with clarity. What I meant is to ask whether a tool such as Chaos-Mesh could have helped the github operations team to be aware of such a failure mode by causing this kinds of problems early.

I think that's the purpose of chaos-engineering right? Some things happen too infrequently for us to plan for them, until when they finally do, causing problems that are more costly to solve than the cost of the prevention.

It's still unclear to me whether this particular failure mode is common enough to be part of what a chaos-engineering tool explores by default; after all, not all databases around contain billions of rows. If engineers have to explicitly enable such a test because they are afraid of what would happen if a PK overflows, well, then probably they would take other preventive measures so that the problem doesn't happen in the first place (either preventively upgrading the size of the counter, or at least put some monitoring). I think what happened here is that a solution was designed when the database was way smaller; the user base grew and grew and this particular failure mode was overlooked (because there are many many other things to care about!).

(I write this because I'm genuinely curious about what other people think about this topic, not to bash on parent for a shameless plug; I mentioned that only as a side comment; I heard good things about TiDB, I wish you well)
Moving the market doesn't do anything if you don't have the stocks. This might have been a temporary hack where the hacker was not sure how much time he has. It could be simple as someone gaining access to an unlocked home PC of a remote Twitter employee.
What prevents you from simply using Kurento with the Playerendpoint and broadcasting the stream via WebRTC?

There is even a nice sample application that you can try out without having to write any code.

https://github.com/Kurento/kurento-tutorial-java/tree/master...
> They did not seem to research at all how to actually fund it

And this is really the most profound part. There isn't an argument to be made against "if people have more money to buy stuff they will be better off". Nobody can argue against that, it is true.

The _entire_ case against that sort of social spending is "but we need normal people to create more than they consume or the resources won't be available" and "this isn't fair on the people who have to support them" argued at varying levels of complexity and indirection.

If you ignore the negative outcomes then any plan is a good plan and only has positive outcomes. Duh.
I am using Firefox at this time(only complaints are, performance which is less than chromium based browsers, and bugs in fenix).

I am not interested in Edge because it is just closed sourced fork of chromium.

Better use firefox or ungoogled chromium or new upcoming

Bold browser(brave browser fork without crypto or token)

https://github.com/BoldBrowser
I love these “it’s a small world” interactions on news.yc.
Hah. "Did a tech interview, found out I had diabetes."
This landing page explicitly mentions respecting privacy.
Looking for ways to stay productive? Here's one idea
> More privacy & control

I suppose that excludes MS's aggressive use of telemetry in Edge itself
Show HN: Unwoke.hr – Hire thinkers. Not activists
That depends on the size of the company, no?
Nuclear Tests Have Changed, but They Never Stopped
This is absolutely not the same. Mozilla is actively fighting with user tracking agains their will. Apple is also making some steps in the same direction and speaking about it loudly. In the meantime, Google and MS are doing whatever they can get away with.
Iranian Spies Accidentally Leaked a Video of Themselves Hacking
The best feature Hey.com has is to filter out messages by sender quickly. I'm setting up more filters in GMails again after watching the hey.com video, but it takes a lot of time (and many steps) to set up a filter to move all emails sent by somebody to a specific label.
Here the same, deeply sceptical of the gluten intolerance stuff, also looking at the research. Jumping on and off of Keto I am now very sure that either carbs in general were the source of my stained underwear problem. Haven't' made the differential test yet whether its gluten or carbs in general but currently don't really feel a need for it because I continue to lose weight on keto + fasting
Do you have a (substantial) GitHub? Why not mass-apply for positions and refer people to that instead of accepting laborious technical tests?
I had this idea probably 5 years ago now and I am sure others had it before that. Everyone talked me out of it because paper is going away. But that just compounds the pain once you actually need it.

There are issues with regards to security when you transfer the files for printing, privacy issues on the content itself and then of course issues with regards to the quality of the printer and the printed material itself. But I actually still believe it would be possible to make a profitable company out of it.

Every company does not need to aim for unicorn status.
>This will render Internet useless

No it will render the internet back to what it once was, and not a personal data market platform for the big company's.

Remember it about Personal Data.
So you sunk my submission of the actual press release only to have me comment on this entry for a paywalled article?

Seriously?
Ah, crap
It probably involves one or two humans reviewing anything suspicious.
also liking is usually "liking people like me" which is code for a lot of bias
This is not really a news anymore, is it. Methane levels are setting new records, co2 levels are settings new records, total GHG emissions are rising, temperature is rising, everything is rising, every freaking year. Year after year. This news sounds a little bit like saying "The age of the universe rises to the highest level on record. It got older. Again." The news will be when global GHG levels stop rising and start decreasing.
> GitHub’s monitoring systems currently alert when tables hit 70% of the primary key size

This is interesting. I wonder if they query the key size every N seconds as part of their monitor, or if they report the key size to the monitor on write.
> Design a system that ensures that doesn't happen

Well, if we live in a world with magic, I would just use the magic material to make a machine that removes the water magically.
Because for those 18 months their lives would be different.

I'd like to see a 5+ yr study specifically because that would allow people to give up low paying jobs, go get a full degree and then get a new better paying job.

18 months isn't that, obviously.

But it would allow you to go and do something. Instead of going from being a waiter to a programmer, maybe you can go from being a waiter to a basic plumber or a truck driver or start a small business or something?

We can all agree that having more cash will improve people health\community\whatever. The big question is what will people do with the opportunity no-strings-attached cash gives them. How many people will just spend the money? How many people will stop working and do nothing useful? How many people will stop working and do something very very useful?

You only need a small proportion of people to make significant changes like this (and thus pay a lot more tax) and suddenly these programs get very affordable net.
Have you looked for inspiration in Red5 or Wowza?

I had used Wowza to take multiple rtsp streams (from cctv cameras) and properly stream to multiple clients (Flash h.264 player and iOS streaming).
EU-US Privacy Shield for data struck down by court
As Simon Peyton-Jones put it[0], Haskell is a language where people work as well as play. Sometimes there's an obvious practical use, sometimes it's not so obvious or may not exist at all. In this case, I as a Haskeller don't see a good use of "forbidden types", however, type families have many practical uses, see [1].

In the same lecture, SPJ elaborates on how the usefulness of typeclasses weren't apparent in the beginning only to be discovered more later, in part through people playing.

[0] A History of Haskell

[1] https://www.microsoft.com/en-us/research/wp-content/uploads/...
> I think you're starting with the implied assumption that "white" is some objective thing that exists outside of the cultural convention that establishes it.

It's not "objective" or outside of culture - on the contrary, it is definitely subjective and inter-subjective. It's what some people have been expected to identify as for quite some time, "as a social convention". I don't think the current "social convention" agrees with e.g. "Marco Rubio is white because society treats him as white". Not because of the color of anyone's skin, or anything like that - but because he is widely identified as Latino/Hispanic, and a widespread "social convention" treats that as something other than white. (Perhaps this sort of identity is less socially important than it formerly was, but that's quite different from positing a sort of "honorary white" identity wrt. Rubio or anyone else.)

> ...For example, the overemphasis on "rugged individualism" destroys informal community safety nets

Is it really the overemphasis on rugged individualism that does this? Some people might dispute that, and blame widespread dislike for traditional values or traditional community institutions - something that, for better or for worse, seems to be very much part of the "progressive" ethic.
Hello, author here. First off, thank you for taking the time to read this.

The original draft started out much more technical than this version, but it was simplified to read less like a whitepaper. In the original draft, I discussed the Authorization Code Grant with the PKCE extension, which is for public clients (clients that cannot be trusted):

"The barebones authorization code grant is used for server-side applications, where confidential clients are trusted with a secret. By using the PKCE (Proof Key for Code Exchange) extension, this same flow can be used with public clients like browsers or mobile applications. The only modification to this flow is cryptography.

1. Client generates a random string of length 43-128 characters and turns it into a URL-safe 256 hash. Other hashing methods can be used

2. Client directs the resource owner to sign into the authorization server. The hashed string is included as a parameter in the query

3. Resource owner signs in and approves client, then redirects back

4. Client makes an HTTPS POST request for a token. Included is the unhashed randomly generated string

5. Authorization server hashes this string with the same hashing method (SHA256) and compares its calculated hash to the hash received in step 2. If the hashes match, and access token is issued

The trick here is knowing that the odds of two hashes with different inputs being the same are infinitesimally small and can be ignored. If even one character is different in the input, the outputted hash will be entirely different. By sending the hash in step 2 and then the original input string in step 4, the authorization server can verify it is still communicating with the authorized client by comparing what it received to what it produced. Any fraudulent client would have no way of knowing what the input string is."
Cyber Threat Intelligence: A Product Without a Process?