skysight-inc/HackerNews huggingface dataset:
Privacy:

We talk, and you don't go telling other people what we talked about, or keeping ledgers, or training models, etc.

It isn't that hard at all. Unless, of course, your paycheck is reliant on you not understanding it.
Neither, really. I'm a developer and nothing in front of me is completely new, but taking a product from idea to completion has a fair amount of Coastline Paradox involved. Not looking for a "how do I do this" solution, more along the lines of, if I want to tackle this, here's a list of tasks I'll need to make sure to cover.

For example, creating a user account creation flow is easy enough, right? You just need a form for a username and password. And password complexity checking (client-side for UX, and server-side for security). And something like bcrypt server-side for hashing (and make sure to follow best-practices in hashing and storing). And you'll want to verify emails to cut down on spam, so you'll need some sort of way to send emails, probably a service because rolling your own email server is....a lot. Oh and where are you going to actually store the user data? MySQL/PostgreSQL or something like NoSQL? Managed database, or are you going to handle the setup, backups, hardening, etc yourself?

Congratulations, we've finished creating a user account! Except for password reset, session authentication tokens, rate-limiting login attempts, CAPTCHAs, and everything around the admin side of handling bad actors (account suspension, IP and/or email blocklists, etc etc etc). ;)
While several other users have posted takeaways for how to prevent this from happening, I'd be interested in if anybody has an idea of how this happened given the code that was posted?

Presumably, a managed DB service should essentially never be available on `localhost`. Additionally, it would be very weird for `config.DevelopmentConfig` to return the production database credentials.
This also breaks GPG clearsigned messages that have URLs in the body, as demonstrated in this message I just sent myself:

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Hello, please visit my site at https://www.google.com/url?q=https://sneak.berlin&source=gmail-imap&ust=1603637677000000&usg=AOvVaw2HZaWQujRWlDNrZMKZIsed.

Best,
- -jp

-----BEGIN PGP SIGNATURE-----
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=jmVc
-----END PGP SIGNATURE-----

I'm also probably doxxing myself by posting those ust= and usg= values unredacted. :(
European central planners ... Like Lenin, only 100 years slower.
China was also communicating about the virus to the public in a reasoned way early on. No such thing occurred in the US, it seemed.
This appears to be a charming micro-scale system of wildlife overpasses[1]. The macro-scale versions (overpasses above large freeways) are often less popular, at least in North America, due to cost and political concerns about encouraging dangerous or destructive species: wolves piss ranchers off and apex predators scare people--despite the the fact that the material risk/damage caused by such predators is statistically and financially miniscule.

In light of that, it's great to see conservation efforts starting small (cheap) and benign (hedgehogs) as a way to get people involved and caring about local wildlife! While the impact of the system designed in the article seems to be less-than-rigorously understood, the effort and empathy investment by the community in the "highway" is, I think, a very real and good thing for environmental work.

1. https://en.m.wikipedia.org/wiki/Wildlife_crossing
> True white noise is the hissy fizzing sound of all the frequencies that humans can hear being fired off randomly and at the same intensity. In recent years, numerous apps and devices have been developed that use it – or other “relaxing” sounds such as the hum of a fan or crashing waves – to help people fall asleep.

The title of the article seems to be inaccurate in that it is discussing other sounds, _not_ “true” white noise, as doing potential harm. Or at least that was the sense I got from the few paragraphs I read before the site locked me out of the article...
Well, it’s pretty close to my salary. But I work in government.
haha .. I don't know why this made it to front page either!

Probably the fact that it sort of takes advantage of google as a free backup service
Yeah it’s a great business to be in. As long as the climate doesn’t change, you’ll be pumping out electricity from a plant at an unbeatable price - since there’s no input apart from maintenance costs. How long do solar panels last before you need to replace them though?

Since you’re so on well informed about this here’s another question. I notice that battery prices are roughly halving every 3 years. At what point does it become cheaper to attach batteries to Indian solar plants than it is to operate coal powered plants?
Working with MediaWiki: do real work with MediaWiki
Antitrust action against Google is much more likely to come from the EU than from the US.
Can AI be instead used to program existing languages and develop applications? At least develop something more than a skeleton template and able to accommodate various requirements.
I think the NVRAM string that gets corrupted is called HW_BOOT_DATA
A better question is “why should Google be allowed to use your self-assigned home for purposes that you as a user haven’t consented to?”
Isn't google cloud meant to be used for such use cases?
> Websites and their obscure “Terms of Service” and “Community Guidelines” are eroding those rights and should be fully compliant with the first amendment

This makes me think you misunderstand the first amendment. It concerns freedom of expression from government interference. Free amplification on private platforms is not covered.
This attitude is now genocide starts.

Majority thinks it’s fine. Minority is brushed aside, dismissed, put down, re-educated, then made to go away.
I find the best thing for falling asleep in a noisy room is noise-cancelling headphones. I get very annoyed by the sound of humming fans and the like, and can’t imagine why you’d want to add more noise!

The only downside is that it’s hard to find noise cancelling headphones that are comfortable to wear while sleeping, if you sleep on your side. Big market opportunity here!
>* You make it sound like all that is needed to develop (as tachyonbeam pointed out) European equivalents to "Google, Duckduckgo, YouTube, Uber, Facebook, Dropbox, Amazon, Netflix, etc" is to shut down access from anywhere in Europe to and from these companies.*

This isn’t far fetched - it’s a well understood result of Chinas Great Firewall. With American companies banned in China, Chinese companies were free to copy American firms and capture the value of the Chinese market. Protectionism has work, and even India is considering it
First, this is a nice resource, so good job!

As someone who has worked for the past several years in this space, I'd say the biggest problems in data engineering are wholistic in nature. Sure, you need to know Python, SQL, Data Warehouses, Data Modeling, etc., but to me by far the biggest problems have to do with the entire architecture i.e. How do you extract data from potentially unreliable data sources, pull that data into some staging area, build further workflows that base off of this raw data to reliably update or create data warehouses/marts or deploy ml models. How do you allow everyone in your company to access and work with the data in a compliant and secure way? How do you test any of this? How can distributed teams, sometimes technical, sometimes more business oriented interact with the architecture and add/control data and release it into the overall company data stream? Has anyone found a reliable and maintainable way to setup CI/CD for company data architecture/pipelines/projects?

To me these are the big problems. And if anyone has any resources for any of these topics I would be super interested, since I deal with these problems daily :)
Because Safari is a niche player. Anti competitive behavior matters a lot more when you have a stranglehold on a market than when you are just a bit player.
I find this way of thinking totally cold-hearted and devaluing human life despite knowing that you're thinking from a larger time scale.

If in the grand scheme of things, 6 million deaths becomes a blip, will the holocaust have been much ado about nothing?
twitter isn't doing those, they're losing friends through censorship. which they legally have every right to, but the powers that be are now campaigning to change that legal protection (exemption? sinve no one understands the second amendment)
Methodology? Isn't AI magic? \s
My french teacher back in high school was also an emerging novelist (he's now quite famous here in The Netherlands). He used a system with pink colored post-it notes to keep track of his story lines, yellow post-its for quotes and green post-its for general ideas. His desk used to be a nice collection of post-its, and he would regularly send the entire class away to work on his novel. (He'd be really startled when the class entered his classroom, as if it was a large surprise that he'd have to teach us french. "Eeehm... I'm busy. Go away!" he'd say).

Bottomline: use the simplest tools you can and don't let things (or classes!) distract you.
It's for your security, and the children
> Hetzner doesn't compete with AWS, Azure or Google Cloud.

This assertion makes no sense at all. I mean, if you're in the business of getting an online business up and running, it seems to me that both do provide the infrastructure that allows you to achieve your goals.

Arguably, AWS and GCP have more data centers spread throughout the world, but beyond unicorn-scale companies you'd be hard pressed to find any business that does need that sort of infrastructure. Yet, when you're at that scale you're far better off running your own infrastructure, both in terms of cost but also reliability.
Based on what I see people complain about in twitter the criticism is on a different axis: selective and inconsistent application of rules to appease whatever group they are worried at the moment.

In terms of regulations this is within reach of possible changes to how the notorious section 230 is applied.

I recommend https://www.youtube.com/watch?v=O1OhE4w0TAU for a competent commentary.
This isn't your regular google drive that you login to store your documents.

This is a separate google drive provisioned specifically to be used via API through google cloud

I think Google Cloud has a Google Drive API for such use cases
Booking.com has been owned by a US company since 2005.
I use a machine built just for this purpose. It’s a fan that stays on until morning. I cannot have a restful sleep without it - if someone in the house coughs or a slightly louder car drives by, ill be awake. Then I’ll spend part of the night worrying about things like a financial result at work or whether or not I locked the basement door.
No, I agree that not all science is not false.

But if you were a betting man, you would bet on this being false, seeing as 70% of studies cannot be reproduced.

And this is a study that no one else can even hope to reproduce. Its just a claim.

And there is the comedy 'gag' of 24-7. Ie, the time they measured was all the the time. Hilarious.
OK, don't trust the numbers from China. Do you trust the numbers from South Korea, Taiwan, Japan, Singapore, NZ?
"Normal distros" have had this sort of vulnerability in the past unfortunately.
>One can argue about the statement that PostgreSQL is more feature rich.

I dont even think it should be an argument. Postgre by default, on itself without extension is anything but feature rich, especially when comparing to MySQL.

I like Postgre, and I know lots of people on HN do too, and I also know these same people absolutely hate oracle. But come on.

Sometimes these Hype and cult is just a little too much.
You are right. Twig is a product which only can work if a community is there. Based on other greats feedbacks from fellow hackers here, I think I should step out of my comfort zone and should start with writing around my solutions, my problems and journey.

Come to your comments, I think I SEO can be a good point to start. Thanks :)
I've planned to quit using Gmail for a long time now.
Any tips on how to do it efficiently?

I would prefer a native email client coupled to a simple hosting solution.
> but if so many people get it wrong there seem to be a fundamental problem with scrum

It's the same problem with all methodologies - if the management is in charge of the process and it doesn't like some aspect of the process it will ignore that aspect.

This isn't solvable by tweaking the methodology.
Lumping QE with this is absurd - QE is actually one effective tool for monetary expansion among many.
I've never met my cofounder
Can't reproduce on either Gmail or GSuite, including on webmail (I thought this could be some sort of "you're leaving example.com, do you really want to do that" thing, but nope). The part about IMAP being affected sounds especially suspicious. Knowing op's track record I'd rather hear from some more impartial sources.
> Stop building this up into a strawman. Nobody is arguing that lockdowns should last forever.

But this is exactly the mindset that I'd characterize as an erosion of "respect for human rights". When the government proposes extraordinary restrictions, it's their responsibility to clearly define how long the restrictions need to last. Answers like "until it's safe" or "stop building this into a strawman" should not satisfy us, because the entire principle of human rights is that governments can't be trusted with such unlimited mandates.

(I should note to be fair that many governments have indeed limited their mandate, saying that they're going to remove all the restrictions once a vaccine is widely available. I don't necessarily agree with that from a policy perspective, but it's much better than an indefinite commitment to stop the disease from spreading.)
> Cult (worship) is the root of culture

"cult" is indeed a substring of "culture", but the etymology is likely the other way around. both come from the latin verb "colo", which concretely means something like "till" or "care for" (in the sense of agriculture). it's used more abstractly to mean "worship", but this likely comes from the idea of caring for / tending to an actual effigy or temple of a deity.
Test messages to myself from Thunderbird and from gmail web interface did not get rewritten.

How can I replicate this?
Central Bank Digital Currencies are coming
In Budapest our company has 1000/1000 link for ~$500, and it's fckn awesome ;)
I use Tutanota.
We aren't. This is mostly FUD.
I’m surprised Windows does not already have a native paste without formatting shortcut a la cmd + option + shift + v on macOS.
I moved to fastmail. Biggest pain was all my filters that I ported to their rule syntax and still manually maintain. I believe they have a better way to do this 5+ years later, but that is my experience.
Sure...

1) Still no dnssec on archive.openwrt.org
2) Still no tls on archive.openwrt.org

Those together mean you can poison the dns for it and it will download packages from your fake site. And...

3) Problem was introduced Feb 2017, nobody checked tampered packages were still rejected until 2020.

With 3) it means anyone can put whatever they want in the fake packages and the OS will install them.

I don't need much from my router but I need it to be secure. So I got rid of openwrt the next week.
I have two friends that formerly worked in US local politics but now work in tech that have been detained for some time in China (Hong Kong). They have been accused of being foreign agents just because they worked as organizers signing people up to vote previously. This really needs to stop. Regular people are getting hurt.
Svelte Summit 2020
From a US perspective, only your second bullet seems likely to survive court scrutiny. Unless you think you can get support to amend the Constitution.
Typo:

> Recieve.

> Get your content directly on your mail, or we can post it for you on your blog.
I believe that if a regime shares information that is at face value negative for that regime that we can believe them in so far as that aspect is concerned. China has shared a lot of information around the pandemic that can be classed as 'draconian countermeasures', but they do seem to have the COVID situation under control.

If you want to argue the opposite then you should substantiate that with data and sources, rather than just with claims left hanging without support.

I'm sure there is going to be some discrepancy between the facts and what we get from official communications but at this point in time there are very few governments left that have been 100% transparent during this whole saga. China likely is no exception to that but I would not expect them a-priori to be worse than say Russia or some of the countries of the EU.
"Europe must so the same - tax and limit American products"

While this will certainly boost the local IT companies and its rather timid approach to innovation, it would be considered a major affront by the US. With so many pro-US Europeans (in the government and in the streets), this proposal will never pass.
Send me an email at sneak@sneak.berlin and I'll send you my G Suite address that you can send a test message to that contains a URL, and I'll forward it back to you from my non-G Suite account so you can see what happens.
> So did thousands of former SS officials who went to live there after WW2, protected and kept hidden.

Bolsonaro helped them too?

> Sao Pauol has a much higher crime rate and 10 to 15 times worse homicide rate than Berlin, you might feel safer, but you are not safer.

I don't know if you understood what I meant, but I'm Jewish and because of antisemitism, which we have back in cities like in Berlin or Paris, I don't feel there safe there as I felt in Sao Paulo.

> Have you seen supporters of Merkel or Macron write something like that?

You don't have idea about the CSU/CDU parties (parties from Merkel) in Germany. But again, no reference, "somebody said, bla bla", just the socket puppet in the internet saying.

You are trolling with a lot of "factoids" to support your agenda and to avoid being down-voted you created a socket puppet.

What make you angry are stuff like:

- https://www.theguardian.com/global-development/2020/oct/10/j...

- https://www.businessinsider.com/bolsonaro-more-popular-ever-...

Fun fact IMO which makes the whole South American soup even more interesting and supports my argument that the Government Politics has nothing to do with his personal ideas: He was personally against this "monthly emergency aid payment", and it was mainly pushed by the opposition, but now he is being treated like Hero because of that and enjoying the popularity.
Normal distros have package signatiure pki that works :-)
Which is why I think projects including PinePhone and Librem 5 are important, as they are privacy orientated and they need community driven support now to be usable in the future. The only other projects that get close are ones that use AOSP as a base like GrapheneOS or LineageOS with MicroG. But this introduces the same issue that Chromium forks have, which is the increasing maintenance burden.
Probably an A/B test for now, so only a limited number of people have this issue.
It might not tell you which is the best for your needs, but it does look to provide a good starting point for research.
The question is why would Safari do those things if they help advertising giants?
TIL! My jaw is almost never relaxed, and I clench my teeth together when I sleep. Interesting correlation.
Maybe you have to write the message in HTML
You're confusing a mild inconvenience for oppressing your freedoms.
Ask HN: Apps to take break while working
I've noticed that I considerably spend longer hours glued to the screen. I forget to take breaks. Any apps, or suggestions on how to take breaks to stretch or medidate?
> It's important to remember that Germans, as in present Germans, are very rarely descendants of those who 'saw first hand' the atrocities of the Nazis, unless you count the perspective of the perpetrators.

On the contrary, the vast majority of the Germans alive today are the descendants of those who saw these things 'first hand'. You have this about as backwards as it gets.
Had several boat parades involving many thousands of boats, crowds of tens of thousands.

Media had a brief report that a boat flipped over. No other mention of the rally.

Seeing daily rallies and parades Driving around now. Zero mention on local news channels.

Drove threw 3 states. We saw one Biden bumper sticker. No signs. Thousands of Trump signs.

Media is extremely biased in its reporting.
My track record? If you're going to accuse me of lying, I'd prefer that you do so overtly and put your own credibility on the line.

https://twitter.com/sneakdotberlin/status/131783835638279782...

It says source=gmail-imap right in the URL. Look.
Is there a reason that this would ever make sense for the end-user?

If I click on a link, my browser opens it. Done, right?
How do you pronounce Contentbyd? Is it like contentbid? Or like contentbud?
It typically shows 'flagged' in the line above the comment.
Who lives in a GPU on the PC?
I see this and I immediately think of "trash sorting" at ultra high speed. If one can combine this with a bunch of accurate (laser precision) air guns, to shoot and move individual pieces of trash you can sort through a truck load of trash in a matter of seconds, perhaps in the air while they are being dumped! compare this approach with how we are currently doing it [0] - Somebody should get Elon Musk on this project right away!

[0] - https://www.youtube.com/watch?v=QbKA9uNgzYQ
Whenever I read about the EU's struggles to compete with american tech companies (also SAP vs Salesforce), I think of Steve Yegge's rant on AWS, quote:

> So one day Jeff Bezos issued a mandate. He's doing that all the time, of course, and people scramble like ants being pounded with a rubber mallet whenever it happens. But on one occasion -- back around 2002 I think, plus or minus a year -- he issued a mandate that was so out there, so huge and eye-bulgingly ponderous, that it made all of his other mandates look like unsolicited peer bonuses.

> His Big Mandate went something along these lines:

> All teams will henceforth expose their data and functionality through service interfaces.

> Teams must communicate with each other through these interfaces.

> There will be no other form of interprocess communication allowed: no direct linking, no direct reads of another team's data store, no shared-memory model, no back-doors whatsoever. The only communication allowed is via service interface calls over the network.

> It doesn't matter what technology they use. HTTP, Corba, Pubsub, custom protocols -- doesn't matter. Bezos doesn't care.

> All service interfaces, without exception, must be designed from the ground up to be externalizable. That is to say, the team must plan and design to be able to expose the interface to developers in the outside world. No exceptions.

> Anyone who doesn't do this will be fired.

Emphasis mine. Good luck trying that in europe. Full rant: https://gist.github.com/chitchcock/1281611
GDPR entrenches big tech. Costly regulation always benefits the incumbents.