skysight-inc/HackerNews huggingface dataset:
Your credit card number being stolen is a problem for your bank, not a problem for you. You can't steal someone's identity with a credit card number.

The concern in this case is when there is some social problem with being in Mom & Pop Inc's customer database. There are probably some people that buy some things that they don't want other people to know about. When the database gets hacked and you are linked to being their customer, that is the unfortunate and potentially damaging information leak. A credit card just gets reissued and the bank reverses the transaction. No big deal.
I hope the downvote was for being incomplete.

A fork, spoon and a knife are required tools for most meaningful job/professional successes.

It may even mirror the mind, body and soul tools needed to achieve personal successes. 2 outta 3 sucks. 1 outta 3 is worse..
I see this sentiment mentioned a lot, but who actually pays for this data? Is there a company I can call that will buy my amorphous "user data"? What are their names?
Top Reasons Bob Lazar Is a Liar
Just a mix-up of irrespectively and regardless.
For now, Bose QuietComforts appear to pair just fine with Bluetooth without requiring the Bose Connect app, so that's how I've been using them. I'm afraid that non-smart headphones will soon go the way of non-smart TVs.
VSCode in not Electron.
> "Java Web Start" still exists

I'm afraid it's been dead for a while now.

> Java Web Start (JWS) was deprecated in Java 9, and starting with Java 11, Oracle removed JWS from their JDK distributions.

https://openwebstart.com/
You probably don't have a union.
You should configure a timeout.
> they will last longer and thus be be better for the environment

This isn’t necessarily true.

My wireless headphones have been with me for years. My wired earbuds are cheap enough that I can lose or damage them without care. The former are far better for the environment.
There are plenty of programmers who learned languages like Haskell, Scheme, Eiffel etc. as their first languages who are now programming in Java, JavaScript, C# etc.

There are just way more courses/universities that teach or taught Java/Python.

Businesses settle on the lowest common denominator it seems.
All my MDR-7506s needed after 3 years was new ear pads.
Here is a guide I've found useful in the subject, https://engineering.fb.com/security/scalable-and-secure-acce....
The keyserver is intentionally designed to be a write-only (no delete/edit) database where anyone can upload their keys. GPG's target market contains people living under highly oppressive governments, where getting a 'please verify your identity' email could get you killed/etc. Given this requirement, it must be possible for anyone to upload a key claiming they are asdf@example.com.

Now it turns out having a globally accessible, unauthenticated, write-only database is a really stupid idea, and there was a piece submitted on HN within the past year about this. Similarly at some point as a demonstration someone uploaded ~50 GPG keys for Linus Torvalds (or something like that) as another demonstration of this.

The reason this is OK is that you have out-of-band verification. When I upload my key for asdf@example.com, I will also put a page on example.com saying that my public key has fingerprint XXXXX. This is the exact same thing that happens with SSH; the first time you connect to another computer it shows you the key fingerprint and asks you whether it is as expected, as discussed in another top level comment here.

So if you want to verify a signature on a file I sent you and you find 50 public keys on the keyserver claiming to be me, you can still very easily figure out which key is mine by looking at the keys' fingerprints. Or instead of publishing it on the WWW I can tell you the fingerprint with another more private/secure method, such as a piece of paper at a dead drop. Or the network of trust can be used: you already have Alice's public key on your computer, and she can sign my key on the keyserver. So when you find 50 keys on the keyserver claiming to be for asdf@example.com, you know the one signed by Alice is the real one.
There are 200 gigatons of forest in the world. We net 8 gigatons each year. So in 25 years we will have no forest if all this is true. That conclusion is absurd.
On another camera-related story, years ago I remember an article about some kind of very special pink-tinted (?) camera lenses that NASA (or Hasselblad?) accidentally shipped to some regular customer instead of its intended destination.

I think the guy kept them, refused to be paid off to ship them back or something, but that's about all I remember.
If someone does a shitty job in home improvement stuff it's usually not visible for years down the line. And good luck with your recourse by then. I've never heard of a homeowner getting recourse unless it's insanely obviously bad right away. The vast majority end up just living with the defects or hiring someone else to do the job again.
Well about half the people in the US don't pay any net income tax. So giving 100% of nothing towards the political goals they desire might be seen as unfair to some.

There are merits to such a system, but I suspect they don't align politically with what you intended.
Lettering da – A collection of hand-lettered signs from Italian cities
Inline images would be great too (bitmap or svg). There’d be a lot less need for something like jupyter if you could show images in the shell.
“Fix auth”. Add item to todo list and just forget because there are other more pressing tasks to do.
It doesn’t produce that food magically. A certain section of society needs to be dedicated to growing food and supported with subsidies if they can’t grow food economically.
My Boses allow you to set the cancellation level with a button press. It cycles through three options: high, low, and off. Does the app enable more fine-grained control or something? Perhaps per-ear cancellation settings?
There's this pattern of:

- We should do "X"

- But doing "X" won't solve "Y"

- But "X" will help

- But "X" won't solve

- But "X" is necessary

- But "X" isn't sufficient

And I think the unstated conclusions are whether we should actually do "X" or not. I think the answer is usually Yes, we should do X (in this case, plant as many damn trees as we can), but I also think that's me arguing from an individual perspective and not a group psychology perspective.

Like, when people argue "but focusing on trees could distract us from addressing the entire problem", I used to just be dismissive of that, but I'm starting to feel like those objections should be taken more seriously - particularly having gone through this COVID debate where people focused so much on "flattening the curve" - which was necessary, not sufficient - that too many people signed on to gradual reopening just as the (high-amplitude) curve started flattening. If we had socialized a different benchmark, maybe it would have been more effective in the long run.

(But still, even if only in parentheses, plant trees.)
> Anything we do, somebody have done before.

I strongly disapprove of this thinking, it's simply a fallacy. There are constantly new problems created by technical advances, new tools and the evolving nature of everyday life and software.

Basic algorithmic solutions and libs like http in a specific language were "always there" and they're being redone forever. Things like controlling your light strip from your Switch are not, and there is always a need for such.
It only matters if your happiness is in this-life-only. If you don't then it's just another part of staying in a bad inn.
As soon as we figure out how to make money or create value by removing carbon, then it will have a chance of actually becoming a business.
> It's a simple system

Even though I get your point and I am convinced you're using "simple" aptly, I will nitpick the obvious: passive headphones can be deceptively simple or a marvel of engineering.

If you didn't get the chance to listen to some music through proper audiophile headphones, I do recommend to spend some time at the closest audio retailer and live the experience.
Cloudflare is serious about that restriction. They use it to upsell the Enterprise plan which doesn’t have it.
...or the rich people could just pay the poor people so they don’t have to engage in deforestation? That money could be invested into other sectors of their economy, raising the overall standard of living?
It looks to me that the reality is closer to "40 years of hack over something that was not meant to be a standard (a popular hardware terminal from the 80s)".

I'll give you just one example of the madness that is sometimes required: the escape code \e[1m is doing "bold on". It's counterpart to reset \e[21m, is supposed to do "bold off", but in practice some terminals do "double underline" instead because this standard is not a real standard. As there is also no real way to detect capability, the only reliable way to do "bold off" that I could find is to intercept the stream of data sent to the terminal to compute the attribute state. When you want to do a "bold off" you do a \e[0m "reset all" instead and sent the control character to set the state again without bold [1].

A new standard would also allow to reliably use features like displaying images or links.

[1] https://github.com/MichaelMure/go-term-markdown/blob/master/...
No downvotes. I agree with you.

I can guarantee you that deep NN/RL researchers are thinking of these hypotheses every other week. But they don't publish them. Even I, who got more active in this kind of research very recently, came up with the exact same hypothesis. I didn't publish.

We don't publish because we have a strong sense of empiricism. There proverbial proof has to be in the pudding. We should be able to setup a DNN and run experiments. If it confirms our hypothesis, we publish. If it disproves our hypothesis, we move on to something else.

These armchair neuroscientists/psychologists come along and type out a dozen pages of brain-dump, no pun, and think they're doing science. They need to do better than that, and do some real work with hands-on deep learning, and/or experimental neuroscience (or collaborate with someone who can do that).
See https://docs.microsoft.com/en-us/azure/cost-management-billi... for the documented behaviour. Note also it doesn’t necessarily apply to Azure Marketplace. That said, they really want you to upgrade to pay-as-you-go...
> I feel like we need a complete rewrite of terminal emulators/bash/whatever.

A complete rewrite would be an opportunity to overlook important ideas, compromise on goals and make design mistakes.

I’d strongly prefer slow, iterative approach here.
Sure. Similar to how so much of Tesla's revenue is in offset emissions. But unless you carbon tax everyone you're not going to b get it. And let's be honest: most middle and lower class Americans and Europeans are burning the planet alive.

Btw, it doesn't even cost that much. I'm under $1k a year in carbon offsets to be negative.
There is also `colordiff` which works both as a standalone diff tool, but also as a colorizer filter for other diff tools. For example:

diff -u a.txt b.txt | colordiff
The image at the bottom indicates the trees are killed and turned into portable traditionally-shaped chairs/tables/etc.

This actually disappoints me. I was hoping for shaped trees that would be transplanted into parks and keep growing, the kind of thing you see in fantasy settings.
Memory barriers in ARM64 .NET 5
I understand they are meeting places for the community but the fact they they worship imaginary beings and that makes them special is what gets people riled up. I understand worshiping and not worshiping is a critical element in tolerant human society, even in the 21st century that is supposedly made of science and enlightenment. What people really get angry with is when they get mixed up in politics and monetary activities promoting political agendas and want to maintain their tax exempt status even though they claim to be nonpartisan groups.
Somehow I got the password, but I never decrypted the archive. I remember reading about how it was leaked many years ago. Perhaps somebody has gone through and "cleaned" the archives so it's no longer visible...
Clarity, from VMWare, is pretty "professional" looking https://clarity.design/documentation/get-started
"This paper seems to be saying all the math Stephen Dolan did was self-important overkill, at least in hindsight."

It shows that you can implement algorithms that give the same results as MLsub without following the algebra so closely, but those algorithms were still designed with MLsub as a reference. It would be difficult to just stumble on a system like Simple-sub without that guidance.

And Dolan's emphasis on the algebra of types still provides a guiding perspective for future work. If you want to add subtyping to a language with a more sophisticated type system, or add new features to a language that already has subtyping -- even if the existing subtyping system was written using MLsub or Simple-sub as a starting point -- you should probably take a long hard look at it from an algebraic point of view to make sure they interact the way you want, rather than call it a day after finding the simplest way to add the feature while still yielding a type lattice.
The word you're looking for isn't "write-only". It's "immutable". And it's not the immutability that's responsible for the attack you're discussing, but the lack of a rooted chain of trust. You seem to be imagining a world in which the keyserver is responsible for authenticating the keys uploaded to it. I don't want to give the keyserver people that kind of power or responsibility.
I would say many churches in the US have now become glorified concerts [1].

Great production, acoustics, cameramen, and often to peddle and push the organizers products [2] (books, DVD's, etc)

[1] https://www.youtube.com/watch?v=AjpWTsh07k0
[2] https://store.harvest.org/
> I don't see how any of these metrics reflect the quality of the service.

This is why it is important to cross reference the stars with the state of the project. What if 90% of the starring occurred within the last week? If this is so, it would indicate many felt this repository provided value based on 2/3 of the repos history.

It is important to note that I am not discrediting your opinion, what I'm trying to say is, the numbers might show many do not share in your opinion. Also, calling this a "service" doesn't make much sense, since I don't think the repo maintainer is being paid to provide a specific value that benefits you.

The README pretty much invites you to submit a template with no real barrier to submission. Your "Awesome" may well be different than many others "Awesome".
"and long iptables rulesets are almost comically difficult to validate sometimes."

Use nmap to evaluate your policy from the outside, don't try to validate it in your head by inspection.
This statement is filled with qualifications that render it mostly meaningless. "Good enough," "significantly better," etc., are ill-defined and leave room for the weaseling that crashes any notion of a society that is even mostly meritocratic. Even approaching a 50/50 chance that your outcome is a crapshoot or else weighted by unrelated cultural artifacts is unacceptable.

>Compare that to India where if you are born into a low caste you can't do anything.

Black men born into the top quintile of family wealth are as likely as black men born in the bottom quintile to die in the bottom quintile. White men born in the top quintile are highly unlikely to drop even to the next lowest quintile. Americans criticizing India's caste system is laughable.
To the submitter of this article-- thank you!

These are great days to work on positive thinking.
What he's saying is true though, there is no reason to sweep it under the rug because it hurts a few feelings.
Good tree^H^H^H^Hgraph traversal algorithms have a history stack specifically to detect and deal with loops.
The recipient is outside the EU.
From an evolutionary perspective, a desirable male is one whose genes will produce offspring with the best chance of reproductive success. Everything else is secondary. The sexy son hypothesis[0].

[0] https://en.wikipedia.org/wiki/Sexy_son_hypothesis
I'm in full agreement. I'm just saying that a lot of people have a very narrow definition of political, and can easily fall into the trap of seeing that definition being a left vs right thing, or whatever political lense they tend to bias towards. For example, while the Sandy Hook shooting was distinctly personal in motivation, the 2014 Isla Vista shooting looked very similar but was very political, and thus terroristic. It just happens that the political motivation was one not commonly viewed as being political.
Even in the absence of government subsidies, the US probably would'nt've experienced a shortage of food.

I'm not saying that it is impossible for the US to experience a food shortage or even that smart people in and out of government shouldn't worry about that eventuality. I am saying that current and past US programs to subsidize farmers probably do not do / have not done much to reduce that risk and that most of the group collectively deciding to continue the subsidies probably know or strongly suspect that.

In my experience, the elected representatives and other influencers arguing for the subsidies don't even use food security as an argument. (Again, like others in the thread, I am restricting myself to US food policy.) Instead, they argue that the family farm is a producer of particularly virtuous individuals, and it would be a shame if all the family farms were to be driven out of business by large corporations.

The US Midwest has the largest tract of arable land in the world and twice as large as the second largest. If the people of the world were redistributed among the countries so as to equalize the probability of famine among the countries, the US would probably end up with a population over a billion.
I think the mistake of most people starting out is:

They aim too high.

“I’m going to go from total unknown to hotshot JS developer at a VC-backed startup in 1 year”

That’s a tall mountain to climb. Maybe 1% of people accomplish that.

Consider starting off more modestly?

There’s lots of client facing or biz-dev like jobs that would love someone who knows the command line, and isn’t too proud to do that work.

“Yeah, your tool is alright, but I could build a web app...” No doubt you could. But learn the tool. There’s an undersupplied world of jobs for people willing to do that.

From there, escalate to ever more arcane jobs for tooling or enterprise or for devs, escalating in skill level at each one.

From that point in - 3 to 5 years from the start of your journey - you can pick up a client who would like you for your by-now-formidable programming skills.

But don’t try to jump to the 5 year mark from square one - my advice.
Example of how the blacklists contain essentially no information: every one of Gmail's outbound VIPs is in a SORBS blacklist. Every one I checked is in at least 20 other blacklists. So if you just don't want to get mail from hundreds of millions of people, subscribe to IP blacklists.
Henry Ford would disagree. Does today's economy make some difference?
> Feel free to believe whatever you want, you have every right. But I'm rather sure that your optimism regarding hydrogen is more rooted in ignorance than in knowledge.

You have made some great points about hydrogen. But personal insults like that don't help you get your message across.
There's a human in the loop when you get your Maven Central account that lets you publish your jar under some prefix.
That would be nice down in the tunnels on Mars. The waste heat would be used to heat the habitat.
This is a gold mine, thanks for sharing!
> Not on the scale of "we need to move the bulk of the energy from Texas to New York for 3 hours, then when the sun sets shift state-level power supply routing from the cornbelt to cover the drop."

Sure, but that's why you favor a regionally balanced mix of renewables, with regional peaker plants (which may not be clean/renewable, but are better than relying on dirty sources for your core needs) not geographic concentration of single sources.
Which SoC do you think they should have used ? There are not very many that are more powerful, the one in the RPi is unusual in the amount of RAM that it can address.
Do you have a link to the presentation?
Economically Viable Carbon Capture
Just because you haven’t heard of them doesn’t mean they don’t exist.

Ask yourself (as the article does): why would they even need this data? (menstrual cycle?? Really!?!)
Thanks, I'll look into it, and try integrating the data source with the tool.
> Why must some people insist on being assholes?

The ones leaving giant databases unsecured? At least they are being taught an important lesson.
The problem is that it doesn't address the root cause. Broadly speaking, there's two places carbon can be: in the biosphere or locked up geologically. Our fossil fuel emissions - by definition - came from geological deposits. We need to put them back into geological formations, otherwise when the trees we've planted die their carbon will just go back into the atmosphere.
Related from a few weeks ago: https://news.ycombinator.com/item?id=23765035
One really weird thing about ProPublica publishing this, is they seem to say "this data should be public as it's for public benefit" yet their terms for accessing the data are extremely restrictive:

https://www.propublica.org/datastore/terms

You can’t republish the raw data in its entirety, or otherwise distribute
the data (in whole or in part) on a stand-alone basis.

So, no spreading the data around. :(
I found the caption beneath the embedded video animation to be reasonably accessible.
Top Figma App and Web Design Resources for Free
If this results in unsecured private data vanishing, and people who have no business handling that data taking a hit, more power to them.
Bill Gates has reached the same conclusion. He’s funded carbon extraction tech that takes up a football field in size but does the job of millions of trees.

https://prepforthat.com/bill-gates-funds-project-that-extrac...
If a union protects a coworker that has verbally abused me that finally escalated to a physical altercation, then the union is useless.
If anyone thinks this is concerning wait until LIDAR becomes a standard feature.
I live somewhere (Zimbabwe) where a lot of that stuff we take for granted is very much not the default. Most folks have mobile money, and maybe a national ID, but that's about it. Currency changes have meant 'USD' accounts have changed to local currency overnight a few times, and the banking regulations change continually, so they're not the most attractive option. For someone here with an idea and some technical skills, I'd love for there to be a way to start something without all the obstacles that are present simply because they're in Zimbabwe. I should probably have kept the constraints list shorter, but I am curious what options are out there.
Crypto is starting to get adopted here, so maybe that is a potential route. It still needs a way to go from *coin to cash, but if bet most places have some system available.
Depends on what the complaint is about. Remember that stop-and-frisk didn't end because of any changes to the law or formal policies. In principle, police were never allowed to stop someone without reasonable suspicion; in principle, the standards for NYPD police stops are the same now as they were a decade ago.
Yes, that’s my point. It’d be a tragedy.
> does that mean that it's invalid to say designing and making walking robots does require/provide insight into the physiology of legs?

Yes. That sounds invalid.
Substantially more than 5kg of hydrogen went up in flames with the Hindenburg, but I don’t think anything was wiped off the map there.
Do you have any reference to the actual danger of stored hydrogen?