skysight-inc/HackerNews huggingface dataset:
That's not really enough. Any kind of credibility system can be hacked. You should ask two images, mandatory, and one of them should be 'my product', like a some kind of an actual clue, that the reviewer purchased it at least. If you add some basic checking, like a reverse image search on your own db and in the internet to vet out low effort tries, this would be the minimum to prevent hijacking the system.

I had somewhat similar idea for a site like this, but only for negative reviews. This kind of a site stops the incentive of forging fake review, like who wants to forge a bad one, but this still has to be protected from defamation attempts. That's why I was thinking of making the post somewhat complicated, but not impossible to make the system enough hard to protect it low efforts, which is at least 90% of the attempts, and the rest would be up for a moderation team. The credibility system could work only over protection
The work they have done here is amazing. Imagine a company like Apple being vulnerable to this extent. That's why when people bring up a new privacy safe/better UX alternative for a sensitive data service I am very skeptical to try them out. Like for email, fastmail or protonmail or Hey.

Data security is hard, I would rather trust someone who has shown good capability there, invests a lot in that and has more to lose. That's why for the foreseeable future, I would rather use Gmail, Google Drive over their alternatives. Also, why I prefer to use Amazon instead of individual storefronts which ask for contact and payment details.
Why does believing society had an incorrect view of rights in the past entail such a thing? It's compatible both with believing that society today has a correct view of rights and the opposite, believing that society today has an incorrect view of rights - even if that view is different than before.

Having an opinion doesn't make that opinion an objective fact!
In the case of actual slaves living in such a time, they still appealed to society both directly and through government (another abstraction,) because not even authoritarian societies are absolutely uniform, and societal constructs are mutable.

Unless you want to invoke divine will as that "standard beyond society," humanity and its arbitrary social constructs are all you have available to deal with, and some problems can't be reduced to objective and absolute terms as a result.

You could invoke "nature" but nature doesn't recognize rights. No creature has a natural right to food, safety or property. Nature engages in warfare, cruelty, violence, rape and slavery with abandon, and without even the pretext of morality. Even anarchists wouldn't want to live in a world governed entirely by natural law.
This is called Waste Valorization and is common in Europe. The idea is to run efficicent incinerators (with good filters on emissions to catch various nasty things we don't want in the air/soil/water and use the energy for heating purposes.
But disabling WebRTC and Canvas makes you easier to be fingerprinted? Most people doesn't block that, so those feature not being available on a modern browser makes you "special" right?
Programming languages can be a very personal thing. But I will offer my perspective having used C++ extensively (both modern and awful), Go, Rust, a little Haskell and some 20 other languages in my two decades career.

Rust is one of the nicest languages out there. Very well thought out, elegant, full low-level control for real systems programming (sorry Go!) AWS uses it a lot, Microsoft is starting to use it.

Go, or even Python is better if you just want to make a backend API for a (web) app. You'll be more productive with it over Rust because you have a GC and can ignore the whole ownership issue for the most part. Python for very small teams likely to stay small for a long time, Go otherwise.

C++ has come a long way, but it's still hairy and loaded with footguns and baggage. I would only use it these days if I needed to use a big C++ library (like a game engine).

I am no longer willing to use Haskell, PHP, Perl, Java or JVM languages, .NET or anything else that's not Go, Rust or Python. With the same caveat as C++ above. I pass over job postings that require them. That's not saying those languages are bad, just that in my personal opinion there are better tools out there, and if I'm going to work with it day in and day out, it had better be in something at the top of my list - because life is short.
Computers made it into the furthest corners of our lives. They are controlling critical infrastructure or are a front-end for it. So IT security should really be a top priority in almost any software project or product.

The upside is that nobody needs atomic bombs to shutdown a whole country anymore ;-)
> but most languages do not have "list comprehension" by post-description. "New York has rats bigger than a dog" comes to mind.

« New-York a des rats plus gros que des chiens »
In dependent types, types depend on values. Here, the type depends on the value that is the function name :) As far as I know, this is literally actually possible in Idris, right now.

Wrote a bit more earlier: https://news.ycombinator.com/item?id=24716477

> the more code you put into the type system the higher the chance that your dependent type specification haS a bug in it.

Unbounded infinity has infinite, uncountable bugs. A defined, bounded, well-constructed, proven type system has fewer bugs. Dependent types are not an axis of explosion, but rather a way to express useful bounds on multiple axes.
No, I am not assuming that. Instead I think, once this is a common technology available on the net, it will also become compatible on the desktop as time goes by.
4chan theories work in a similar manner.
Sure, and tax havens are the most popular place to have the top of your corporation's ownership hierarchy. Doesn't mean it's good for society at large or the people working there.
No, because that's not really the point of Rust.

You make the sacrifice of a "punishing" compiler, and spending more time writing code, but you gain software that's more likely to be "correct", safe, and not leak memory.

Really, as in all things computers, it depends what your set of requirements are as to what trade offs you make
Becoming a leader, the hard (and only) way
I'd say the first thing to do is to enquire about the whole process during the first interview, which will probably be over the phone.

Then, I'm afraid as applicant you are not in a strong position to ask them to change it for you, and it might be out of their hands anyway.

So the only thing you can do if to think how much you'd like that job and decide whether to continue with the process or to politely decline. Probably best to consider that even if you decline politely they might conclude that you are not very serious or hard working if you don't want to make efforts to land a job.

Or you might get a nice surprise if they adapt rather than letting you go...
I work in EAM. Feel free to ping me on twitter or linkedin and we can discuss pros/cons with the systems you are describing (ours included).
Good timing as things slowed the last month or so.
Because twitter is a court of law...?
It seems like you would roast to death before you die of dehydration.
I think that saying that Apple is especially bad at security would be wrong. But apple claiming they are the only ones who can protect users might be going a bit far....
You are not wrong on the buzzword, but you are not absolutely right if you suggest that it is merely that; this is a recurring question and interrogation in that specific area.

The fact that it happens to be kinda buzz worthy is a collateral aspect: everything that answers what some people wonder and that is not yet answered plainly, is.

(and I mean, the first on the front page at this very second has : "We hacked apple" in the title.)
Something tells me the real money comes from future consulting contracts and that this PR will more than pay for itself. Just like how everyone on HN agrees writing a book isn't a great use of time besides what it allows you to put on your resume.

Just because Apple got an amazing bargain doesn't mean the payout for them won't be great as well.
> I cannot imagine it happening...

I'm sorry but this is very much going to happen since nearly 1B Androids are now DoT capable. ESNI may also be blocked for same reasons once it is widely deployed.

> Safari fixed similar thing that was using HSTS, but I bet they'll kill this one too.

Safari cannot cover for apps sending DNS requests.
can be, you can call them at runtime too. And to be clear, const generics aren't stable yet, they're being used as an implementation detail of the standard library here, you cannot yet use them on stable in your code.
> However, it appears that Apple does payments in batches and will likely pay for more of the issues in the following months.

Annoying, but possibly more to come.
Covid Forecasts What the Pandemic Has in Store for the World
Standard launches cashierless store at the University of Houston
> It is a theory with no evidence supporting it other than that coincidence, not a refuted or a false theory.

Key elements of it were false, though. The conspiracy theory largely focused on his “assassination” by being shot in the head, when in reality he was shot twice in the back. There was also physical evidence of an altercation, suggesting robbery. The idea that a trained assassin would first try to fistfight the target and then shoot is pretty absurd.

Later, the public found out that hackers tied to Russian intelligence hacked the DNC, which further refuted the conspiracy theory. There’s a lot out there that fundamentally contradicts the conspiracy theory.
> However in this case, these are const generics, so you no longer need to use macro to generate [char;1],[char;2]...

Const generics still aren't stable. I believe the GP was talking about the list of new `const fn`s in the release (near the bottom of the post).
HN isn't obviously more focused than Reddit unless you're browsing the front page; for example, the Rust subreddit.
Android Paging 3 library with page and limit parameters
For "non strict mode" meaning bypassing the borrow checker, rust already has that and it's called "unsafe". And if by "non struct mode" you mean not having manual garbage collection then you've already got that either as `::leak` letting you leak memory or various GC implementations like https://github.com/Manishearth/rust-gc/.
Let's take a look at how we might write a function like `map` the (pure) functional way in a language like JS:

const head = ([x, ...xs]) => x;
const tail = ([x, ...xs]) => xs;

const map = (list, fn) => {
if (list.length === 0) {
return [];
} else {
return [fn(head(list)), ...map(tail(list), fn)];
}
};

map([1, 2, 3], x => x + 1); // [2, 3, 4]

We're not keeping track of any state here. Using recursion you don't need to keep track of the current element in the list for example (when you run this on a physical machine it will of course, but not at the conceptual level).
Weird, because the front page with the most popular of all time show posts from 9+ years ago, but if you search something popular like "microsoft" and sort by date it only goes back a few months. I think it truncates by a 1000 results or so
Rust in 2014 and Rust today are very different; specifically, 2014 to 2015 was a very tumultuous time. 2015 saw the release of Rust 1.0, and so a lot of stuff happened to get things ready for that, including some very large changes to the entire standard library, a removal of most of the runtime... all sorts of stuff.
Cryptography Dispatches: Reconstruct Instead of Validating
https://doc.rust-lang.org/reference/items/functions.html#con...

Basically, const functions can be used in places regular functions can't because they are directly "run" by the compiler at compile time.
Rust tends to exercise code paths in LLVM that clang doesn't, so from Rust's perspective LLVM was never particularly stable (e.g. pointer aliasing has been broken in LLVM for years). In that case it's better to get fixes for known bugs in LLVM ASAP.
Yup, which lead to early treatment. Most people start treatment when the illness has progressed far. Hospitals generally withhold treatment to see if patients will recover by themselves because they can't risk "waste" of medicine and filling up hospital beds. So most people are sent home unless it's really bad. Trump started getting treatment from the very moment he tested positive.
That blog post alone is worth more than $52K in the long run.
Since when did the honus of identifying sophistry fall to someone else?

Only you are able to think critically about what information you absorb.

If you don't, you probably shouldn't have the right to affect other people's lives.
Const values are inlined at compile time wherever they are used.

Const functions let you run code to define const values. This code will be run at compile time before the const values are inlined.

For example let's say you have a constant for PI but you need 2*PI. You could do the multiplication in const context, meaning the multiplication will happen during compilation and not execution. Slowly more and more of the language is becoming usable in const context so more advanced things can be done during compile time.
Cortex blocks storage: running Prometheus at scale with reduced complexity
They probably don't, but there are weirder cases. Ford was allocated 17.0.0.0/8, Prudential 48.0.0.0/8, USPS 56.0.0.0/8
A Transatlantic crossing took around ~ 100 hours, whereas a plane takes ~ 7 hours. So, we are talking about an order of magnitude improvement.

It's hardly the same thing with a supersonic airliner, which just reduces the time in roughly half.
Thanks. And the link is broken :-p I didn't know I cann't update submission link here.
Correct one -
https://www.shimul.dev/creating-xml-document-in-python-witho...
Audits skew disproportionately to people with money to begin with because that's where the biggest potential gains are. That's also why there are audits of people receiving the EITC -- it has a high enforcement efficiency because that type of fraud is frequently unsophisticated and easy to uncover, but can amount to thousands a year.

The problem with audits of "the rich" is that the gains realized in practice often aren't that large, because their audits are the most expensive even if they have the most potential for uncovering fraud. So they go out and audit several "rich" small businesses, impose major costs on each of them, and uncover significant fraud in one. Which covers the costs of the IRS in doing the other fruitless audits, but not the costs of the other small business owners, who are understandably pretty upset at having to pay a bunch of uncompensated costs and their own time for an audit that didn't uncover anything.

What they ought to do is have the IRS compensate the subjects of an audit for their time and costs, but you can imagine how expensive that would be for the government. (It's already that expensive for the taxpayer.)
In context this decision sadly goes into the other direction. It sets boundaries how mass surveillance can be made legal.
Why not both Privacy Badger and uBlock origin?
My hypothesis (not being an industrial engineer) is that most inputs to panel fit are more capital & process (one-time) than operational (per-car) expenses.

If GM developed a tight-tolerance process & machinery for the Corvette, it's probably a wash (capital cost vs standardization of process) to just apply it to their other lines, albeit relaxing the specs to increase yield.

I'm not saying GM has been innovating continuously, but my experience with long-lived processes is that instantaneous improvement is far harder than continual improvement (iterating fixes), due to the specific variables and lagging feedback in play.
"So if you have to choose between viral effects and network effects, choose network effects."

Can anyone give an example of choosing between the two?

Viral effects and network effects seem like complementary things.
I did a lot of my learning on a GTX 1060 about 2 years ago with 16gb of RAM and an i5-6400.

The issue with machine learning is that you need enough GPU VRAM to load your dataset and then have to wait for a result being trying something else.

If you have too little VRAM, you get nothing done, but if your GPU is slow (GTX 1070 is about 2x faster than a GTX 1060) you will have to wait before learning something after trying something. The feedback loop for learning is better if you're able to iterate quickly. This is why you sometimes see GPU rigs with up to 4 GPUs that are not being used on the same task (so you can do more than 1 thing at a time)
If you're a genuine Haskell user then it shouldn't take more than a second to realize that true borrow checking is not the same as C++ pointer types, and that Cargo is thee best dependency manager. Although, being a Haskell user, you might suffer stockholm syndrome in regards to the dependency hell that is cabal or stack.
Who's paying for uBlock?
Enyo was an unfortunate victim of the failure of the TouchPad. The actual JavaScript framework was/is great and was actually the real precursor to React. Some of its core component based principles made it there. The original Enyo team breathed some life into it again by releasing Enact, a React based framework inspired by the original Enyo.

Old school Enyo is hard to work with these days and there are many many dead ends and the community is majorly lacking but for a sheer JavaScript framework it’s one of the originals and the best.

https://enyojs.com
Ask HN: Which investments did you make when young that are paying off now?
Not necessarily money, could be time to learn a skill, risky decision, etc.
I have:

Privacy badger

Ublock

Cookie autodelete

HTTPS everywhere

Decentraleyes

DuckDuckGo (extension) (it auto sets DDG as the browser search engine, but you can disable that)

Multi account containers - 1 for every frequently visited site. There’s an extension called temporary containers that’s interesting too

I don’t but should use noscript

Canvas blocker would freeze my browser so I don’t use it.

NextDNS is installed on every device and the router.

For mobile (ios) I use safari with Firefox focus set as the content blocker.
I didn't downvote (I rarely do for anything that isn't shit-talking) but if your only goal is to play video games at a reasonably high level of quality, then yes, I think a games console is always going to be less expensive.

I mainly stopped buying consoles because I already need a fairly powerful computer for a lot of other productive and entertainment uses, so for me, the price difference between the computer I "need" and the computer that also plays games really well is mostly the price difference between a decent GPU and a nicer GPU.

If you already have all the computer you need for other tasks and it's cheaper to buy an Xbox or Playstation than it is to make the computer more capable of playing games, then it makes more sense to buy a game console.
Note this is fully explained by ~0% of pitches are funded (online or not) and the .0001% that are funded are sought out and reached through insider networks (not inbound applications of any kind, online or not)
Robinhood versus EToro: Brokerage Showdown Looming in Stock Market Investing
The problem with "const of all things" is that you will get enough free time to prepare a big meal.
I think it is very much related to Apple. There will be organisations because of their culture or approach to security that will fare better or worse than them.
No, but I can't bring to mind any that have denounced white supremacy. Which is why I'm asking.
The key clause there is "acts as such". Highlighting mine:

> Whoever falsely assumes or pretends to be an officer or employee acting under the authority of the United States or any department, agency or officer thereof, and acts as such

If the twitter account operator(s) claims that a document is an official FBI document, when it is not, then they have falsely exercised the exclusive authority of the FBI to issue statements as the FBI, an agency of the United States. The available evidence meets the criteria highlighted above.

(This centers around the definition of the verb "forge"; to forge a document, you must falsely pretend to be acting with authority to produce that document, or else it wouldn't be forging.)

If the twitter account operator(s) was provided the document by someone else and was misled by the provider, then the operators did not falsely pretend to be FBI, and so the operators would be protected from prosecution. The operators would need to make this claim to the court; they do not appear to have done so at this time.

(Standard disclaimer applies. I am not your lawyer, I have not prepared citations for review, please seek legal counsel before taking any action based upon an HN comment.)
I kind of think about it like the karma attained buys you the ability to occasionally say something that wrests the narrative back from the crowdmind a bit .. at least until it disappears due to the downvote pileon ¯\_(ツ)_/¯
For context the UAE's population and GDP are both larger than Israel (though not by much, they are very comparable).
I'd recommend docopt/docpie which create your parser from the documentation you write
So I could mark my code unsafe and be able to prototype faster , then later when it's time to ship , remove unsafe and fix the smaller issues ?
Have you played with OCaml recently (last year or two)? Wondering what your opinion is on it, especially in relation to Haskell and Rust.
HD Wallets, XPub, YPub and ZPub
> There's been one camp consistently attacking the legitimacy of the election and it's not Biden's.

This definitely isn't true. Both parties have been repeatedly claiming that a loss for their side will be evidence that the election isn't legitimate.

All mainstream Democratic Party discourse has been revolving around the delegitimisation of the results of the 2016 election, and an insistence that exactly the same process is happening during the 2020 election. It's the only reason we're paying attention to Facebook ads, because Facebook developers who claimed to be doing academic experimentation having too much access to user information has been tied through vagueness and innuendo to the claim that Russian government-sponsored targeted ads on Facebook delivered the 2016 election to Trump.
Apple is requesting shut down of Belarus channels from Telegram
Maybe fingerprinting is not what they're trying to secure themselves from.
Cool Edit Pro 3.1 Crack Plus Registration Code (2020) 100% Working
What about printing vectors? (array dynamically sized)
What other kind of traits are useful for arrays?
Use of AI to Predict Relationship Satisfaction
I think looking at it as "punishing" is the wrong mentality.

Rust has very strict checks, and we -want- those. That's why we're using Rust in the first place.

I -could- use a more convenient / lenient language like ruby or golang but I generally wouldn't prefer it unless the use case made sense. You end up "paying" in different ways later down the line as your codebase grows in complexity.

In my experience, the rust compiler is extremely helpful and most issues I had went away after reading the rust book. [0]

[0]: https://doc.rust-lang.org/book/
> "...without having any skin in the game themselves..."

From the other side of the chair, the cash cost and person-hours of recruiting staff, HR personnel, and the engineer-hours spent by interviewers both on preparation and the time spent on interviews add up to far more than what an interviewee spends on the interview.
What about HN experimenting with tabs in the comments so if you want to have a more philosophical discussion click on the ‘Philosophy’ tab or if not maybe the ‘Technical’ discussion is more your speed. I could even see supporting an ‘Offtopic’ tab as a place where you can share ideas inspired by the post that are not exactly relevant but could spark inspiration in others.

It would allow posts with hundreds of comments to be a bit more organized?
This gives me memories of SCO Linux.
New H-1B Restrictions
>$1500 an HOUR

To me, this is the real rip off.