skysight-inc/HackerNews huggingface dataset:
I have one of those flashlights (Sunwayman V25C), I love the UI. It's quite old, not sure if they're sold anymore.

You can try searching for "infinitely variable" flashlights. Jetbeam RRT01 is one such example.

For a little extra "oomph", there's also https://skylumen.com/collections/v54-lights?sort_by=created-...
The best Gore-Tex demo: https://youtu.be/0e58SiFSxLs
Why would we be obliged to take her opinion on him in place of deriving our own opinion from his dishonesty and prior behavior?
Fines are part of their business expenses
> Some of us could go through the trouble of setting up a private CA to deal with this issue

I've read about doing that for development purposes. But it sounds complicated. Therefore I wonder couldn't there be an open source solution that produces an npm module which when I run it creates a private CA for me?

I mean if it is complicated to create a private CA, why not automate that task?
> Don't put that in the chat, we don't want trouble

I've heard people say exactly the same thing about Facebook. I guess the difference is that it's usually in regards to incriminating messages (e.g. drugs), and not censorship of ideological speech.

Self-censoring on non-secure, non-anonymous messaging platforms, and especially in group chats, is not necessarily a bad thing. Consider anything you write in a group chat as public, because there's it easily could be.
> My point is whatever they choose is likely going to be government monitored.

And _their_ point, which came first and you came here to argue against, is CCP monitoring is especially bad for particular political reasons.
Consider trying ZGC first. The main selling point is low worst case pause time. I've seen some tests where P99.9 pause time was less than 5ms, vs several hundred for older collectors.

In my limited tests I never saw a GC pause over 5ms. I was basically hammering a Spring Boot application with HTTP load tester.
NetNewsWire (iOS/macOS).
I believe I did address the philosophical question with the fact that it's my life and I can spend it however I like. I don't think that's inconsistent with wondering how one could make the greatest contribution to society -- if anything, it makes the choice all the more meaningful.
Hey, I didn't say that kivaloo was useful for everyone. ;-)
https://marginalrevolution.com/
I am having difficulty following your explanation. You described 4 accounting entries:

1. Credit asset account X (which one?)

2. Credit customer's bank account

3. Debit customer's loan account

4. Debit liability account Y

I agree with #2 and #3, which I described in my earlier comment. But:

#4 is already handled by #3

#1 is some unspecified 'asset' account; which one? It can't be cash (as they're not paying out cash) and it can't be a balance they hold with another party (as nothing in this transaction involved anyone but the customer and the bank)

Please take another look. Maybe defining which exact asset and/or liability accounts you believe are affected by each of the entries #1 to #4 will help me understand your point better.
NBS and IBM were pushed by NSA to use 56 bit key length instead of 64 for DES. [1]

NBS became NIST and they still have credibility to you. Whatever reason you come up with why it was okay back then also applies today.

[1] https://en.m.wikipedia.org/wiki/Data_Encryption_Standard
I clicked your link to disagree with you but the evidence is on your side.
I think it's possible, mostly didn't go down that route to keep things as simple as possible at first.
I'm quoting the linked article

Search in the article for the quotes.

I suppose the article has several places where it might look like it ends but doesn't.
This feels like a trap people fall into when considering how attacks work. You're right, any one instance of active TLS interception is vanishingly unlikely to be detected. But an adversary conducting that attack at any kind of scale will be deploying instances of that attack regularly. The cost of detection can be very high --- it's not "public opprobrium", as so often seems to be the mental model on HN, but rather disclosure of sources and methods to other adversaries, who are themselves exquisitely well equipped both to detect stuff and also to work back to expand the scope of tradecraft lapses in drastic and surprising ways.

Here, though, it's even simpler: you're positing an attacker who is exploiting a cryptographic vulnerability unknown to science simply in order to conduct an individual TLS interception. The consequences of the disclosure of such an attack --- one that would be discernible by amateurs --- go far beyond what curves people select in the future.
I agree. I’ve seen multiple startups achieve seven figures in revenue with hyphens before moving to buy the name without the hyphen.
They don’t disable PIP if you request desktop website.
It’s not selfish to not want the virus, it’s rational. To call it selfish is to add a negative character assessment to this action, which I believe is unwarranted.
Large image datasets: A pyrrhic win for computer vision?
Might as well as remove 'show source'. then the url bar. ... :)
It's certainly related -- not sure what kinds if specialisation the new ruby JIT does.
I used to watch rubygems.org rss to keep myself in the loop. Nowadays it is a deserted wasteland. Many previously popular gems never updated and thus do not work on newer versions of ruby.
What makes strangers click?
The point is somewhere between the two. I'm not telling anyone that they should be an entrepreneur; but I'm saying that being an entrepreneur has worked well for me because it has allowed me to do a surprising number of things which are not entirely part of the job description.
This. The existence of f-droid and apps like New Pipe, Gadgetbridge and Blokada is what kept me from jumping ship to iOS.

It's also something I install/show to my non-techie friends and they're amazed of the new no-ads experience.
Are you basing this on your experience or the current market realities?
Having read through the BBC report, it would appear HSBC became a victim of its own size. The report makes an odd statement though:

"But the reports failed to include key facts about customers, including the ultimate beneficial owners of accounts and where the money came from."

But in US beneficial owner's info was not required until recently ( https://www.fincen.gov/resources/statutes-and-regulations/cd... ; https://www.53.com/content/fifth-third/en/business-banking/m... ).

Granted, SARs get a little special since banks ( even internally ) are very tight-lipped about what SAR processing for legal reasons. So depending on the team, accounts may be investigated further as the situation warrants, but it was not a requirement of any kind as the article seems to suggest ( though it is phrased carefully enough to avoid saying that ).

Having said all that, I don't know if it is true at all banks, but you would not believe the wrangling needed to close an account. The times I saw it happened, it tended to be a clear case of fraud against the bank in individual cases, and some major issue with business accounts ( commonly now referred to as 'derisking' ). Normally, account officers, various VPs will fight tooth and nail to keep their favorite customer in ( and they should, but I want the reader to understand the issue is not as simple as BBC made it seem ).
We’re never going to back to in-person grocery shopping. It’s much easier to avoid junk food when ordering on-line as compared to when you’re holding it in a grocery store.
In a lot of cases airlines will block people from flying to a foreign country if they have a one-way ticket because the airline expects the destination country will block the person from entering the country because the one way ticket implies they are not visiting as a tourist.

In that case the airline is required to fly the person back.

This is more common now with various Covid-19 travel restrictions so airlines are also asking for all testing paperwork that is required for the destination countries.
What is the use case of minio?
Typically server disks are much more expensive and turning it into s3 compatible storage doesn't seem like a good way of utilizing it.
The only fish sticks I eat are the ones my kid doesn't. Perhaps it's not accurate to say that marketers convinced people to buy them for their kids.

If I want an easy to cook seafood meal I'm just throwing a frozen tilapia fillet in the oven with some garlic and butter.
I think many here don't get that not working in a tech startup is very different.

The IT budget is shrinking every year instead of increasing with company profits and sometimes a 3 person team needs to handle 300 users plus those machines that nowadays are tightly interconnected. These 300 users are essentially a threat to the company because they often click on anything they get per mail.

So you need to encrypt everything as much as possible to decrease the attack surface inside the network.
Only blog I actively follow.
How about “miscarriage of justice”?

https://en.m.wikipedia.org/wiki/Miscarriage_of_justice
Yes, but compliance officers can be conveniently held responsible. Why would you fire a potential scapegoat? Naturally, compliance officer's are by nature risk averse and apply CYA approach liberally.
I grew up in Queens NY and fish sticks were a staple for school lunch
You are reading it correctly but misinterpreting the implication.

At the minimum, you can’t publish an app on the Google’s or Apple’s app stores without a financial transaction. It’s essentially impossible to conduct business abroad (even “free” business) if you can’t legally transact.
This is a little like saying unauthenticated CBC mode is fine as long as all you're doing is blitting out the raw ciphertext, padding (or otherwise) included, for a human being to read in a hexdump.

Any step you take past that is a computer program that holds a secret key acting on ciphertext chosen by an attacker and thus revealing some kind of behavior to them. There have been surprising "oracles" found in a variety of constructions beyond CBC mode. Modern cryptography chooses to avoid this problem entirely.
> Shoot up a Walmart ... and the nation goes on a rampage.

And rightly so. The most prominent recent example of that was motivated by racism against Hispanics. It was terrorism.

Using that as a foil for real crimes by those industry executives (whom I agree in a better society should be held to justice for their actions) reads like an apologism of one type of mass murder for another.

There are far lesser crimes - like selling crack - that are far better examples of the unequal application of justice.
To be fair, I'd probably hire the programmer with the knowledge of greek mythology over the one without.
Personal preferences aside, great programmers are very rarely one dimensional
World's richest 1% cause double CO2 emissions of poorest 50%, says Oxfam
But if I were a betting man, I'd wager that the vast majority of Indians in the world do live in India, based purely on the population total of India.
There’s two halves of this: what percentage of “temporary” closures ended up being permanent, and what percentage of closures were temporary in more normal years?

It’s internally consistent to believe that most business survive temporary closures (or not! I don’t know), but also that temporary closures are more of the exception than the norm. If that turns out to be true, then fretting the rate of “temporary” closures that become permanent is probably not even a terribly interesting statistic.
Voice calls are a slightly more "secure" alternative to text messaging. It's more resource intensive to store and analyse audio/video than text, and less accurate to boot.

It's easier to run

`SELECT * FROM messages where messages.body LIKE '%tiananmen square%'`

than it is to run speech-to-text over bulk data and run the same search. Obviously that's a trivial example, but digital text (i.e. not handwritten) is always going to be easier to parse than speech.
He says he lives by his calendar, and the calendar runs 8am-5pm. I daresay that's no worse than the masses of unsuccessful peons in tech.
"mkcert" is a tool to automate this: https://github.com/FiloSottile/mkcert
> They have kids to carry on their legacy, not for the joy of having them

For anyone wanting their children to be a legacy of themselves, the (blatantly obvious) irony in the above is that the less time a parent spends with their child, the less actual legacy they're leaving of themselves. Having other people raise your children means the legacy being left is that of the nannies or tutors or grandparents or teachers or the child's friend's parents.

If they don't see who you are and how you conduct yourself, they won't be filling your shoes.

But reverse-ironically, they'll probably be just as absent for their children, so there's a little inevitable legacy that will be passed on.
I wonder what we can apply white guilt to next?

MasterChef or Master degrees are good candidates.
https://righto.com

Don't understand anywhere near as much of what Ken writes as I would like to, but seeing the die shots he gets and his analysis of awesome old devices is super fun.
I struggle a lot without that small nap. Would recommend trying that, alternatively maybe wake up early and spend the first hour on your chosen personal field before work. That way, you can be happy the rest of the day, knowing you accomplished the most important thing for you (your personal endeavours), and spend the day at work more relaxingly :)
pissoon.com - fuck yeah. almost as a good as snagfest.com
It does seem like an edge case, and often this type of industry experience is limited to candidates from academia. (Not 100% limited, but research experience is preferred).
Cracking the Mystery of the ‘Worldwide Hum’
That's not just cups but for every other printer/environment when a product loses support.
Unfortunate naming conflict with a Rust GUI toolkit https://github.com/hecrj/iced

Looks the disassembler predates the GUI toolkit, but is a bit more niche.

Hopefully no real-world conflicts arise (crates.io names?).
Growth
Mr. Money Moustache [http://www.mrmoneymustache.com/]
Study Hacks, Cal Newport [http://calnewport.com/blog/]
Tim Ferriss [https://tim.blog/]
Oliver Emberton [oliveremberton.com]

Intellectual
Farnam Street, Shane Parrish [farnamstreetblog.com/blog]
Less Wrong [http://lesswrong.com/] [lesserwrong.com]
Raw Thought, Aaron Swartz [aaronsw.com/weblog]
Slate Star Codex [slatestarcodex.com]
Edge [http://edge.org/]
Melting Asphalt, Kevin Simler [http://www.meltingasphalt.com/]
Essays, Paul Graham [paulgraham.com/articles.html]
Minding Our Way, Nate Soares [http://mindingourway.com/]
Ribbonfarm, Venkatesh Rao [ribbonfarm.com]
Overcoming Bias, Robin Hanson [overcomingbias.com]
Shtetl-Optimized, Scott Aaronson [http://www.scottaaronson.com/blog/]
Raikoth, Scott Alexander [http://web.archive.org/web/20140220082152/http://raikoth.net...]
Heterodox Academy [https://heterodoxacademy.org/]

Technology
Hacker News [https://news.ycombinator.com/]
Worrydream, Bret Victor [http://worrydream.com/]
Naval Ravikant [https://startupboy.com/]
Unenumerated, Nick Szabo [http://unenumerated.blogspot.com/]
Stratchery [http://stratchery.com/]

Statistics
DataTau [http://www.datatau.com/]
FiveThirtyEight [fivethirtyeight.com]
Simply Statistics [https://simplystatistics.org/]
Chris Olah [colah.github.io]

Economics
Marginal Revolution [marginalrevolution.com]
Project Syndicate [project-syndicate.org]
https://github.com/minio/minio/pull/10499
Not a second language. But spent the last decade largely speaking a second (or third) language and/or with ESL speakers. Perhaps that's starting to rub-off! Oh dear.. Not sleeping right for the past few days may also be a factor. GPT-3 paranoia may also be a thing.
slopier.com: enterprise accounting system

decretism.com: enterprise accounting system

calinum.com: enterprise accounting system
How the PCR test works and why it’s such a critical weapon against Covid-19
Most comments here starts with "I don't use XXX myself". And you have strong opinion on whether other people should or should not do. Land of freedom?
Results on an experiment on racial bias of Twitter‘s image algorithm
I think the framing of this article is awful, and folks' responses here show it.

I didn't build a moat, I found one, and I keep digging. Generalization is really quite valuable, because it helps you find a passion and from there, you can find depths. Plumb some breadth as you go down, and repeat.

Or, don't. You can also just be good at stuff that there's high demand for, if you're the sort who keeps their nose up for the next thing to try. Otherwise, you might find yourself specializing in outdated tech. Which can be its own reward.
Snowflake CEO on how he has built multiple successful public companies
Oof, you're totally right. Thanks for the correction!
Of all the countries, I’d say China is being the most aggressive in terms of going green due to the sheer pollution it’s creating.
I do this for Grand Designs (and similar) shows.
I’m not sure what the downvotes are for. The paper, upon which the video is based is linked in the description and is easily accessed. Is the issue primarily with parent’s less than substantial comment (basically just linking to a conference talk) or is there some issue with the underlying empirical analysis of Rust’s library codebase?

The thrust of the article is, from the abstract, that Rust should consider altering the compiler and the crates ecosystem to better enable the safety features that Rust champions, because ‘ results indicate that software engineers use the keyword \unsafe in less than 30% of Rust libraries, but more than 75% cannot be entirely statically checked by the Rust compiler’.
All the time. You'll frequently see front page titles like "My company (YC19) Hiring Engineers"
Slatestarcodex is half back, in that the archives are available again, but he has not made any recent posts.
A very good blog to go through the archives of, to anyone curious.
That kind of thinking is why we have had riots destroying our cities, arsonists starting wildfires and burning churches, and spikes in the homicide rate this decade.
I want productivity tips for us non-billionaires.

My day is about 40% calendar-based, and at the end of every week I feel like I've gotten nearly zero done. I've tried to cut out all the meetings I can, but still. Between must-attend review meetings, 1:1s, "planning sessions"... and then it's brutally difficult to make the 1-hour breaks between meetings to be actually productive.

Anyone doing better than me at this, or do I need to just accept the feeling of non-productivity?
rsync.net: 100 GB for $18/year (no ingress/egress charge)

tarsnap: 100 GB would be $300/year (excluding ingress/egress)

Edit: I believe both support deduplication (borg and tarsnap), but no idea if one is superior to the other?
Curious, are there any sites that you use that have a hyphen in domain?

Seems like about ~1% of the top 500 websites use a hyphen in domain.
Are you a manager? Do you have a manager?

https://www.askamanager.org/
In the interest of discussion and discoverability, I urge the commenters in this blog to write a synopsis to each blog instead of just dumping a list of blogs. Or worse, a list of XML feeds (!).
Reading all of these comments, I'm really glad I have a dumb gas stove with no special electronics, just an actual mechanical gas valve. Turn knob -> more gas -> bigger fire -> more heat into pot, and that's all there is to it.
I got fleshwand.com.

Has potential
Cool. That’s where I plan to use it too.
The Enduring Enigma of Costco's $1.50 Hot Dog and Soda Combo (2018)
The choice to not use a device which is intended to elicit interaction is not available to all, and in that case the only people that can make the choice are the others that know better.
I noticed that the supermarket near my house has a separate freezer section for seafood (maybe it needs a different temperature than the main freezer?). About half of it is fish sticks or some other kind of fried fish/shrimp (mostly carbs on the nutrition info), and the other half is fried fish fillets of various kinds (a lot more protein). I was curious what a good frozen fish fillet to buy would be, that would be easy to cook and healthy. It’s not an ingredient I have any experience with.
Collective wage and benefit bargaining tends to be the main focus of many unions. I'd say in the instance of this particular Nurses Union the union also advocated well and often for the safety of their nurses. So yes they do ensure worker safety but I don't think it's thought of as much as collective bargaining.
I feel tempted to buy kleptosphere.com just to imagine someone's confusion the day they would want to buy it but get greeted with a "Sorry, this domain name is taken" instead.
Sounds similar to the prior crimp YouTube pulled on iOS. In order to listen to the audio of a YouTube while the screen was turned off, you need to pay for YouTube Premium.
Yesterday - https://news.ycombinator.com/item?id=24533139
From experience, I can tell you what not to do: Don't look at HN. It's much too easy to get lost in some captivating thread and spend much more time there than you intended. The same is true of news sites or financial sites or social media.

Checking work-related e-mail (or other work-related messaging media) is a possibility. At least if you end up spending more time there than you intended, it's something that you probably needed to eventually do for your job anyway. The risk is that you'll spend too much time on that and will have lost your state of flow for your programming task by the time your build is done.

One possibility would be to think about what the next steps are that you'd need to do when the build is done. Any new tests you need to write? What would you do if the current build doesn't actually fix the bug you thought you fixed? Can your code be refactored to make it better? Etc.
I still think Ruby is the more interesting and expressive language. However, for me there's a single pain point that means Python wins in any larger project. That is the behaviour of Python's "import" vs. Ruby's "require". So it's not surprising that this distinction between these languages pops up all over the place. Python tries to be as explicit as possible. While "from import *" is possible it is heavily frowned upon. The Ruby culture doesn't seem to have such qualms; things are often much more hidden and magical. It can make navigating larger projects... even your own... difficult and inefficient.
This could’ve been easily prevented if she’d bothered to read the 4000 word privacy policy and carefully scoured every dark corner of the app’s settings for user-hostile defaults.
I wouldn't call it a discriminatory surgarge. Thai citizens also fund the park through taxes.

Where I have lived in the US many public services charge more for people who aren't residents of the area.
Thorsten Ball's writeup [1] on the architecture behind Unicorn is one of the single most informative pieces I've ever read about fork-based multiprocessing, signals, and pipe-based ipc. The information there can be applied to any platform and, imo, is a must-read for anyone operating in a *nix environment.

[1] https://thorstenball.com/blog/2014/11/20/unicorn-unix-magic-...
circumstantial language (suggesting simplicity) in the 2020 defense appropriations bill, note cyber and collection:

https://www.congress.gov/bill/116th-congress/senate-bill/179...

§ 5707 (c)(2): "the implications of [5G] global and regional adoption on
the cyber and espionage threat to the United States, the
interests of the United States, and the cyber and collection
capabilities of the United States;"