skysight-inc/HackerNews huggingface dataset:
App looks slick. Installed on Ubuntu. Very cool.

Unsubscribed from LastPass and subscribed to a Family plan here. Hoping for updates to bring all the rest of the features. <3

EDIT: Took the opportunity to eval a couple of others. BitWarden stood out because it's open-source and cheaper for the family plan (the difference between 1Password individual and BitWarden family is not a big difference).

My thoughts:

* 1Password had a really cool app and very good import from LastPass

* Bitwarden's app is pretty good but the import breaks on Secure Notes that are a bit longer

Ultimately went with Bitwarden because it's cheap and I was able to migrate my big notes in approx 10 minutes manually.
I think I'm glad C++ doesn't have that feature.

Can you provide a ... slightly more real world example of what non-local returns are for? As described it sounds equally capable of shooting both varmints and one's own feet.
But your time isn't. What this product does is saves time, which ultimately saves money. The proof will be how many agencies and marketers this appeals to.

When you can charge a mid-sized e-commerce company $2500 a month for social media output, $99/mo is nothing.
We side-step large parts of this argument for our more complex business UIs by leveraging server-side technologies like Blazor.

We also recognize that by constraining some aspects of what we are willing to support on the UI that we get profound productivity gains.

Hypothetically, if we wanted some animations in our server-side blazor apps, we could add some new methods to our JS interop shim for explicitly requesting animation of specific element ids. We could also conditionally adjust the CSS stylesheets or classes on elements for animations on round trips of client-triggered events. Putting an @if(...){} around a CSS rule is a perfectly reasonable way to get the client to do what you want when you want. In this model the client has absolutely zero business state. When you go all-in with server-side it means you always have a perfect picture of client state from the server's perspective, so you can reliably engage in this kind of logic.

There are compromises that have to be made. The above is not a perfect solution for all use cases. But, it does demonstrate that with some clever engineering and new ways of thinking about problems that we can get really close to meeting in the middle of several ideal philosophies all at the same time.
Scratch that haha /webm is supported.

Double check the file mimetype. Ill look in the logs :)
yes because logic part is huge
Are you really trying to compare Japanese Internment camps with what is going on in China in present day?

Forced Sterilizations, Death Camps, Labor Camps, Political Persecution, Religious Persecution, and so much worse.

Literally millions die every year in China at the hands of the CCP.

There is no reasonable, sane comparison.
This doesn't make any sense, I use tiktok and there's plenty of content I wouldn't expect china or america to endorse. There are lots of videos dedicated to communism, capitalism, uyghur muslims, BLM, etc. It's actually fairly open and this type of content gets noticeably boosted by the algorithm if you express interest in it, and gets a ton of likes too. There is also plenty of happy cat videos as well if that's your thing.

Also, ugly people get a lot of attention. I would expect china's social credit system to discredit those who are less attractive, but on tiktok you see less than conventionally attractive creators get a big following. They don't even need to be freak shows, it's just an app that's full of regular people openly talking about regular things. Very much the opposite of what I have heard about the way media works in china.
Thanks!

Yeah - I live in a state with essentially zero incentives, so to make Solar pay for itself I have to rely on net-metering plus the 26% federal tax rebate.

If I went with a commercially installed system, I'd be looking at a 15-20 year payback. If I can DIY, I should be looking at a 6-10 year payback.
Show HN: I built an app that subscribed to all development newsletters
How does 1Password compare to LastPass?

For one, LastPass _always_ freezes Chrome on me a few times a day.
I started out with binary switches and led's. A hex keypad was an improvement... Later I got a loud surplus mechanical tty, my mother was not happy!
Then true clarity would be to say "The AGI has no access to its own source or even compiled code, and therefore cannot self-replicate an identical copy." That's much clearer. These abstract terms like "truthfulness" and "know" are not obvious, and your scenario is a little baffling. Most people concerned about AGIs self-improving consider access to their own source code or even the ability to copy a directory as a given.

I keep using extremely concrete terms here, with specific examples, and you keep returning to this one sentence where a lot of work is being performed by words like "know." The idea that an AGI somehow "cannot" (is it forbidden by a directive? has the information been hidden away? is this a physical principle of the universe emerging from conservation of baryon number?) "know" (what does this word do?) its source-code just seems very far away from scenarios most people would consider.
In my case, I needed to know whether or not a member exists in order to implement object tracking. I basically have a macro that inserts a member into a class, and calls that member's constructor with the "this" pointer of the tracked class. A different function needs to know, at compile time, whether or not a class is tracked, as the way memory is allocated differs.

I didn't want to use inheritance, as tracking is disabled in a shipped build, and I want it to have as little effect on the codebase as possible. So, the simplest option seemed to be to check whether or not the member exists (and assume the name is unique enough an untracked object will not contain it). This was good enough for my purposes.

I'm not as familiar with C#, but attributes seems like a potential alternative, though I'm not sure they can be fully removed from a release build. And, of course, C# is garbage collected, which is not ideal for all types of software. If there is a better alternative, I'd be interested in hearing it though!

Don't get me wrong, I'd absolutely love a "better" C++. Rust is a great language, but I personally don't feel that the safety guarantees are worth it for every class of software. If a video game crashes, the world isn't going to end.
The lack of native marshalling and unmarshalling approaches outside of the style perpetuated by sputf and no support for any on-the-go string variable injection or templating without pulling in libraries.

This is a weakness that can be overcome, but it's a weakness.
See also: veed.io, slide.ly, kamua.com
I do not understand the security thread. Can somebody explain?

- you can write/encode/embed additional data into an image, fine

- twitter (and everyone else) hosts such images for you, fine

- twitter sends CSP header that allows scripts from other origins to access the full image data (ie the embeded data), fine, should not be a problem, anybody has access to that data as it was spcifically placed there, anyone could download/mirror it anyway

Now when demontrating the possible attack the author assumes a valnuable script on another domain that permits code injection. They inject javascript code that decodes the data from the image that is fetched from twitter and evals that extracted code. But if you an already inject javascript code anyway, why would you need to decode the twitter image? You already have access to the origin of the attacked page, loading the image from twitter gains you nothing (eg it does not give you access to the twitter origin, eg does not allow you to read twitter cookies, right?).

Given a site is valnuable to code injection you could as well either just inject all your evil js code instead hosting it on twitter inside an image or in case of length limits on the injectable code just host the majority of the evil code on your own server, configure it for CORS and then inject the script-tag on your victims site.

Am I missing something? I do not see how COS is bypassed in any way.
Key brain region was ‘recycled’ as humans developed the ability to read
I think the 12" 2017 model with the i5 was the best one. The i7 got a little hot, and the m3 was pretty slow. The i5 (I'm still using it today and it works great) doesn't suffer from heat issues nearly as bad as the i7.
Even if you didn't learn this from linear algebra, doing any measure of graphics programming at the matrix level very directly reveals these sorts of associations as you see how the numbers accumulate, and get everything debugged. Children learned these concepts, too, as they hobbied around with programming rotating visuals. It doesn't require advanced math, it's just a very practical perspective.

SNES programming also directly introduces people into the notion of 2d vectors advancing over an original axis, which ends up in a rotation in mode 7 stuff.
I think you can change that to "if you are not politically active, you are unlikely to be targetted"

On the other hand, if you are known to criticise police actions, it's likely that they will be targetting you. The BLM leaders probably haven't connected to a real cellphone tower in years
He can buy the local Golden Corral any time he wants.
Malware Analysis Report – Chinese Remote Access Trojan: Taidoor
More than the 18 month prison sentence, it would have been far better to punish him with life-long red mark on his career to never be able to found, or run a company and never be able to buy stock or any kind of a position in any company.

Seems like 18 months will be spent plotting his next big thing and it’s rinse and repeat.

Also put an upper limit to his wealth. Say total : $40K. And cancel his passport.
1Password is pretty stable, I have not had any problems with applications freezing.

I was going to switch to LastPass since I have two younger children that I'd like to use a password manager, but LastPass has the same 17+ restriction so I'm looking for other options. But if you don't have the same issue, 1Password is a solid choice.
D has native support for 'delegates'; closures, essentially. Function literals that reference objects from an outer scope are delegates, and ABI-compatible with other delegates. Regular function pointers can trivially be converted to delegates, so if you want to store function pointers, you should store delegates instead and convert transparently as needed. You can't pass delegates into C functions (because they're only in the D abi, not the C abi), though most C libraries that take a callback also take a 'state' pointer that you can use instead.

Tl;dr: it's a bit complicated, especially wrt communication with c libraries, but in general they're interchangeable with other functions.
>You can still lose your passport. It's less likely than losing your phone, but still. Also, to access the cryptographic functions of a passport, you probably need a NFC reader, which isn't exactly accessible.

i thought maybe the pseudonymous identity proof could still work after your passport has been reissued either because of loss or because of invalidation. But its probably not really doable with named constraints. Modern phones are apparently often equipped with an NFC reader. I think this could be usable enough for the recovery case.
As someone who sells Online Learning Platforms, I can confirm that zoom is the most reliable and popular right now. Initially I hated zoom but I have personally tested at least 10 different tools and zoom beats them overall with a perfect balance between usability, performance and most importantly: cost.
As a backend dev now working on frontend tasks and primarily with Javscript and Typescript, I think I might have an insight. Server-side engineering is in some "well-defined". Software such as the JVM, operating systems behave in a rather well-defined manner, support for features are predictable and by front-end standards, things move slowly, providing time for the developer to understand the platform and use it to his/her best.

The browser platforms are a total mess. An insane number of APIs, a combinatorial explosion of what feature is supported on what platform. And web applications move fast. REAL fast. Features are rolled out in days, fixes in hours and frameworks come and go out of fashion in weeks. It is no longer possible for devs to keep up with this tide of change and they seem to end up resorting to do libraries for even trivial tasks, just to get around this problem of fancy APIs and their incorrect implementation and backwards compatibility. And needless to say, every dependency comes with its own burden.

Web platforms are kinda a PITA to work with. On one hand Chrome/Google wants to redefine the web to suit their requirements and FF, the only other big enough voice really lags in terms of JS performance. Most devs nowadays end up simply testing on Chrome and leaving it at that. My simple browser benchmarks show anywhere between 5-30% penalty in performance for FF vs Chrome.

Unless we slow down the pace of browser API changes and stop releasing a new version of JS every year and forcing developers to adopt them, I guess slow web will be here to stay for a while.
I too, enjoyed having it builtin with the HTC 10, but having basically zero choice in phones became a serious problem.

One thing with the 10 was that security updates were basically nonexistent. You got one or two major OS updates, but nothing in between, and nothing after. Lots of phones have this problem, but then again some don't.

Worse than that, the Oreo update completely broke my phone. I went from 2-3 days of battery life with my typical, light usage to something like 12-16 hours with NO usage, screen completely off the entire time. Fixing that required downgrading to Nougat, which required S-OFF, which required me physically mailing my phone to a hacker group and paying around $35. And of course this left me a year or more behind in security patches.

Based on the xda thread about this, it affected lots of people, but was never acknowledged or fixed. Consider yourself lucky :)

The LG phones are, one would hope, not this bad. But still, my takeaway from the experience is that tethering (heh) oneself to a single model or line or phones is really, really bad. The inconvenience of the dongle is, in retrospect, only slightly annoying in comparison.

And there can be significant cost savings. My Moto G6 and SpectraX together cost less than one of LG's phones, and I expect to reuse the SpectraX with my next phone as well. Buying a new DAC/AMP every 1-3 years doesn't really seem right, does it?
This is awesome. Hats off to you.

But... "After Effects for dummies" is selling it short. This is a web based video editor! After seeing Figma do it's thing, I was waiting for someone to do it for videos. We're nearing the point where you can do 100% of your work in the web. Keep up the good work!
The Unmapped Chemical Complexity of Our Food [pdf]
A pure-rust implementation of zstd decoder already exists in production :
https://github.com/KillingSpark/zstd-rs
Just a reminder that illegal contracts are unenforceable. An NDA to cover-up a conspiracy to infringe on civil rights by agents of the state won't stand up in court.
The reason that they're permitted in FMVSS 108 was to allow automakers to save money. Hence the reason luxury brand cars with LED tail lamp have them in the USA.
Robula+: an algorithm to generate robust XPath-based locators
`content-visibility`: the new CSS property that boosts your rendering
Great point. I do an auto save every 3 seconds, but yes if you go back before then it's game over haha.

I will check to see if it's possible to disable that I remember this being a hard thing to do on another project I was working on.

Ill look into it again :) worst case I'll see if I can trigger a save function on a back event.

I'd love to have a custom context menu. What options would you expect to find?
This is what I like about HN, interesting people drop by from time to time to visit.

I have been a happy 1Password customer for years, but I am in the market for a change now. I really wish 1Password had an iOS client that didn't require 17+ permissions.
Twitter, where displaying short pieces of text and occasionally images and very occasionally video can require extravagant amounts of processing power that can only be found in the latest hardware and software...

Years ago, it was a common conspiracy theory that the hardware manufacturers were forcing obolescence --- and to a certain extent they still are --- but now it seems software developers have outdone the hardware manufacturers without any help from the latter...
cool idea! I kept trying to click on one of the tags hoping it will filter the list on articles with that tag only.
thanks for the reply!

> In C++ you can make ownership objects (in the vein of unique_ptr) that automagically track the lifetime of DMA references.

does that require os support to make it work? i assume the tracking is handled by some specific inturrupts?

> You can make all of this work in Rust by using a lot of "unsafe" and inelegant data structure workarounds but it voids most of the safety benefits of Rust and requires more complex code.

i see... so i guess rust would have to take one small step out of static, and into dynamic territory with a smart pointer "trait"?
A new neural network could help computers code (and debug) themselves
I think the real thing there is pay teachers more.

Just funding schools doesn't mean teachers will be paid
Thanks that means a lot. I've always felt like an underdog, I feel like there is bias at YC and I am ok with that. It keeps me hungry.
The impact of GPT-3 on Google Search, a complex-adaptive system
Everybody’s reaction to the many GPT-3 demos on Twitter have been the same: First, it’s “oh my god, is this real?” Then, it’s “People are gonna lose their jobs.” The fear of GPT-3 replacing writers and designers is real. While I think some of the concerns are realistic, many are not.
"James Cook"

I'll bet his parents were happy he was a boy and able to get labelled with a famous name. Probably just like the Lears, who named their daughter Shanda, and the Banks family I knew that called their daughter Robin.
Web Browser Engineering (A Book)
Calendly has Calendar integration so it checks your {Outlook,Google} calendar for free times (within the office hours specified in Calendly), and also adds an event to the configured {Outlook,Google} calendar to avoid double-booking.
> Perhaps it might have been better to suggest from a "death of the author" viewpoint.

Well, I can agree with that viewpoint regardless. Even if the author didn't intend for something to be taken a certain way... if the audience took it one way, then that's what matters (unfortunately)
OctoPrint 1.4.1 Stable Released
interestingly enough, I never used to remember my dreams until recently
Stagecoach Mary Fields, the Gunslinging Postwoman of the Wild West
Clean code == UX for developers
This gives a general idea of how the algorithm works:

https://www.veed.io/grow/reverse-engineering-how-tiktok-algo...
> Are D's nested functions truly functions

Yes. They're even inlinable!

> for example are they ABI-compatible with a top-level function?

If they are annotated with `static`, yes. If they are not so annotated, they are ABI-compatible with non-static member functions. In fact, in D, a pointer to a non-static member is interchangeable with a pointer to a non-static nested function. This makes for much convenience when dealing with algorithms that accept such pointers (called "delegates" in D):

> how do they get access to the stack frame?

And extra argument is passed to the function which is the frame pointer to the calling function. (This is called a "static link". The "dynamic link" is the return address.) This can be thought of as the "this" pointer to the "struct" that represents the caller's stack frame, hence the binary compatibility with member functions.

To go back to the enclosing enclosing enclosing function's stack frame, you dereference the static link 3 times.
The tricky part is optimizing these dereferences away when there are no captured variables in a stack frame.
Yeah. `async` involves a lot of sophisticated and bleeding edge machinery, and is not really "fully ready" for wide-consumption, IMO.

What's funny is that while `async` is great tool to have 99% of programs will not see a difference.
HAHA no one has asked me this.

I have this built out and hooked up to S3 I disabled it as I thought users wouldnt want it.

In the early days. I would use the webcam, record me talking. Then caption it on the spot, add some letterbox text and publish to my Instagram story.

I might have to reveal it and bring it back. This is of course if people want it and it solves a pain point worth paying for.
Is ancient egypt actually considered a theocracy, rather than a monarchy? Also, I think the parent poster's point is that theocracies fell out of fashion a long time ago.
Is English your third language? Did you read the story upside down wearing someone else's glasses?

I guess you won't get the subtext there, since you're so bad at reading comprehension, so I'll just plainly state that somehow you completely misunderstood what you read, like you have no context for humans and you're a robot trying to blend in.
Original source is https://media.defense.gov/2020/Aug/04/2002469874/-1/-1/0/CSI...
I think you can just use 1Password for Families in this case

https://1password.com/families/
No, clearly whoever kidnaps you is going to take your phone away. I mean something that probably gets embedded under your skin somewhere.
It's the consensus of the vast majority of relevant professionals that "humans cannot be divided into biologically distinct categories", i.e. races. That quote comes from the ASHG [1], but another relevant field is anthropology where again, the largest professional organization (the AAAS) says the same thing [2]. The AAPA concurs [3]. If you think these associations might be a little biased, someone published a national survey of anthropologists a couple years ago confirming these views [4].

Some technical caveats: So yes, on some level you can approximately group sets of people into things roughly matching modern broad racial categories on the basis of genetics. This isn't because of anything real (i.e. there's nothing all members of a group share that doesn't exist "outside" them), but simply because you can broadly categorize any large set of things, regardless of whether those categories are actualized. Race as a social construct (e.g. identifying someone as "black" or "caucasian") is absolutely, undeniably a thing. It's simply not reflecting an underlying biological reality. There are also people in the community who argue that even if racial categories aren't biologically actualized, they're still useful (or that the definition I gave previously doesn't apply), but that's a much more complicated matter for which entire libraries' worth of debate exist.

[1] https://www.cell.com/ajhg/fulltext/S0002-9297(18)30363-X
[2] https://www.americananthro.org/ConnectWithAAA/Content.aspx?I...
[3] https://physanth.org/about/position-statements/aapa-statemen...
[4] https://www.ncbi.nlm.nih.gov/pmc/articles/PMC5299519/
That isn’t logical at all. The two are completely different threat models.

I used to be a happy 1Password customer until they decided that they did not want people like me as customers. I trust the code, I don’t trust them to store my data, encrypted or not.
Very insightful read. Loved the part describing TikTok's algorithm as essentially a zero friction, global 'market maker' for content producers and consumers. Really clicked with me.
How many other criminals can avoid jail time right now due to the Covid threat?
Thanks! That was the plan, coming soon!