skysight-inc/HackerNews huggingface dataset:
People should resist the temptation to defend this.

1. Blocking Iranian IPs, as opposed to accounts, is almost certainly over-compliance. Note that the vast majority of websites do not do this. Even big ones, such as Gmail, do not do this.

2. It does not speak well of the United States justice system if someone could be prosecuted for failure to block Iranian IPs. If this were required, the law should be clear. Otherwise, the US citizens deserve not to be in fear of prosecution.

3. Beyond IP-blocking, if the US government wants to require companies to go actively fishing for possible Iranian accounts, it should clearly codify this. Otherwise, companies should not have to fear prosecution.

Summary: Gitlab should grow a pair, and Americans should ask themselves if this kind of legal uncertainty is desirable.

Finally, legal effort to make websites inaccessible in Iran is entirely incompatible with being taken seriously when complaining about internet freedom in Iran.

Note that this goes so far that the entire Google Cloud network blocks Iranian IPs, including any and all services and websites hosted there, including say resources that might provide valuable information to regime opponents.
It's in a different jurisdiction than Gutenberg (Australia). You can't find any George Orwell books in Gutenberg, because his books are not in the public domain in the United States just yet.

Australian law says life + 50 years for authors that died before 1955. That'd make Orwell's work in the public domain since 2001 in Australia, and in the US starting from next year (died in 1950 + 70 years). For convenience copyright for those that died 70 years ago expires on January 1st next year, not exactly 70 years ago, so the author that died on January 2nd 1950 an author that died on December 31st 1950 enter the public domain at the same time: January 1st, 2021.
I am not aware of any up-to-date benchmarks which make a fair comparison (i.e. not just benchmarking GNOME), but I am intimately familiar with the technology and its performance characteristics.
I’m a little confused at people who are mad at GitLab here. I’m under the impression that sanctions and export control laws tend to be fairly strict, and penalties for knowing non-compliance are harsh, including the possibility of jail time. GitLab’s hands are pretty tied here.
Thanks for the information. I don't remember ever learning anything about <keygen>. It looks as though most popular browsers (not IE; shocking!) supported it in the past, but most have now removed that support. [0] Perhaps there were some security or usability issues with this functionality? (Off the top of my head, if user certs are a single factor how do we ensure that desktops with more than one user don't install them?) ISTM the PKI world is moving to more short-lived, or even ephemeral, certificates. A complicated user-driven certificate generation process in the browser doesn't really fit that trend.

[0] https://developer.mozilla.org/en-US/docs/Web/HTML/Element/ke...
That point has been reached: https://outofthecave.io/articles/merriam-webster-modifies-wo...
Okay, nice rant, but are too many layers of abstraction the actual cause for Wayland's (alleged?) slowness compared to X? From what I understand, no.
IQ is a measure of how willing you are to do something extremely boring and pointless. A perfect predictor for success in the average office job and education.
It should be 7 figures. How can we put a price on knowing how often you go to the doctor?
Crazy how people have forgotten that git is decentralized to begin with, and email is even federated. Not sure what the implications of kernel style development would be with the DMCA going after them but I'm sure we'll find a solution.
I think the only meaningful definition of the term "blockchain" requires the idea of mining blocks / addressing double-spend somehow. Otherwise it's just a chain, a data structure we've had for decades. The term was introduced with Nakamoto's paper, and the insight of that paper was mining / proof-of-work, not hash chains.

It is technically true that one application of blockchains is solving problems that can be solved by regular chains, just like it is technically true that one application of self-driving cars is the ability to turn off the automation and let a human drive. But if someone asks about the applications of self-driving cars and you say "Driving on the open road is fun," I think most people would not accept that as answering the question asked.

(And I'm not just being pedantic: blockchains have a significant computational/environmental cost, so if you don't need the block mining feature, you will get many orders of magnitude faster performance and run many of orders of magnitude cheaper and cause fewer negative externalities if you just use a plain old hash chain.)
Fossil on something like ipfs/torrent sounds like a great solution (where tickets etc/the whole thing is embedded in the repo itself). Even for enterprise projects where we're hit by outages from time to time it feels like a great solution. What if sanctioned/blocked account has publicly used repository?
Doing the right thing for the wrong reason is better than not doing anything, even if it is just temporary.
Ask HN: CRUD Apps in 2020? What are the current best practices and architectures
5 years ago, the answer to doing a great CRUD app would be Django + SQL Relational DB.
Now we live in the ever-changing age of serverless, with countless DB structures, web frameworks and system architectures.

In your experience (or if you have benchmarks or anecdotes feel free to share), what's the best way to structure + architect a CRUD webapp? And any advice/best practices you can suggest?

I'd welcome any specifics on software choices + why you came to the decision to use that stack/arch :)
I mean Chrome and Firefox are user agents too, which can also access YouTube's content.
They also ban hires from France FWIW, but that's because they wouldn't touch our labour code with a 10-foot pole haha.
> countries with aggressive foreign policies

If we go by that logic, the U.S. would get on that list.

> non-democratic governments that use coercion on their own citizens

If that was indeed the standard to go by, I'd agree, but the list would then need to be much, much longer and possibly include even some traditionally democratic countries like Australia who have an actual law where they can force employees to secretly install backdoors.

Saudi Arabia infiltrated Twitter and compromised some of its employees to obtain info on regime critics that could endanger their lives, as just another example.

The list would by these metrics include well over half the world.
Its extremely peculiar. 10% of the country is unemployed.

Business and museums are shutting down for good.

Cities are emptying out.

Hugging another human has been demonized and is considered irresponsible.

People are getting fined for not wearing facial coverings.

Our way of life has been completely hijacked by fear.

Things are very unstable and then we have an election.
They do not.

This reminds me of a bug I happened to come across with a cheap offshore company I had to deal with a while back (well, a very expensive consulting company that used a very cheap offshore company for development). We were dealing solely with Pound Sterling (100 pence make a pound). As part of the API requirements, they were asked to solely deal with pence in integers. They ignored the requirements and used pounds in floats.

This caused rounding errors here and there. We spotted the problem as soon as we heard about the rounding errors, and asked them to correct it. Later on, our customer asked us why the items that cost £1.85 were being charged correctly, but the items that cost £1.90 were being charged at 19p.

Turns out that rather than doing anything sensible, they took the float, converted it to a string, stripped out the period, then converted the string to an integer. So £1.85 became "1.85", then "185", then 185p, but £1.90 became "1.9", then "19", then 19p.

They managed to put this into production before we had a chance to see it. Yes, it was a dysfunctional project. But there’s lots of them out there. If you leave a footgun like this lying around, there’s no end of companies that will not only shoot themselves in the foot but happily reload while you are scrambling to stop them.
How is this answering my question? A couple hours of research every two to three weeks doesn't require a legion of maintainers. I was expecting a more elaborate answer to justify the amount mentioned in the parent comment.
Those standards need to exist, but those standards do not need to exist as part of the display protocol.

People make this mistake over and over and over. Nothing prevents the compositor writers from deciding on a common API for screenshots and similar things (and there has been movement in this direction)
Seriously, not to get too down on the author, but whoever wrote this was way out of touch with what a decent standard should look and act like. So many blatant flaws like this.
I really hate it when websites don’t honor “Request Desktop Website”. There’s no good reason why this can’t be viewed on a modern iPhone/iPad.
You’re more at risk of screwing up security and getting phished (and money stolen) or busted than you are getting bad stuff. Trusted vendors exist for a reason, and small quantities of LSD are virtually undetectable in transit.
First, reproducibility is a spectrum, from a simple recipe to run `make` and get a byte-for-byte reproduction.

A cookie recipe is reproducible - follow these steps and get tasty cookies. But will they be the tastiest cookies? For that, you need more detail, but the write-ups almost never have the full story.

Having put dozens of academic ML algos into production, anything short of `make reproduce` which bare minimum gives you a table of results on some validation subset, is merely reproducible-ish. Not having vcs cause it's "hard" is straight-up slacking (use svn if git is too hard).
Maybe this pull request is being censored/shadowbanned right now. Opening the page takes tens of seconds and returns "Unicorn! This page is taking too long to load. Sorry about that. Please try refreshing and contact us if the problem persists.". However, PR #8142 is indeed listed in the list of open PRs at https://github.com/github/dmca/pulls?q=is%3Aopen+is%3Apr .
Curiously, noone mentioned Xenocara[1] yet?

[1]: https://www.xenocara.org/
This seems stressful, maybe take a couple days of rest. Perhaps later you can reaffirm or rethink your plan and priorities. Good luck.
Because the difficulty of making and recieving payments on the web is a major cause of advertising having become the dominant revenue model.
Also correlates with lifespan, probability of divorce, crime. All such boring stuff.

PS. I am wondering whether it correlates with the belief in IQ testing itself :)
You can't win in discussions about IQ for this reason:

A school like Harvard admits rich people who are maybe 1 SD above the mean and poor people who are 3-4 SD above the mean.

It's a form of "achievement laundering". You might be 22 years old and the only remarkable thing about you is that your parents are rich (either they achieved something or their parents achieved something or got lucky or stole or...) You took classes that weren't graded harshly with some really bright kids, and for the benefit of both groups, rich kids and bright kids are blended together so that newspaper commentators and other pundits will look at them with 80/20 vision and think they are looking at a "meritocracy".

A threat to this is that some alumni families have a strong sense of entitlement and insist on their spawn with inferior IQ (and often inferior moral character in general) get admission.

Some of these children benefit a lot from test prep, some benefit a little, other ones can at best make up a story like "I must have skipped a row and put all the right answers in the wrong rows".

So there is a lot of hate for standardized tests and circa 1970-1980 somebody must have hired a public relations agency, done some polling, figured that you couldn't get sympathy for low-IQ rich kids but maybe you could get sympathy for low-IQ black people and that makes it a little easier for people like Stephen J. Gould to get funding to drop what they are doing and write on the topic of "racial bias in IQ testing".

---

Effective political movements usually have a combination of an elite sector that supplies resources and a mass sector that supplies footsoldiers. The elite is too small to win at anything on it's own, and it is next-to-impossible for mass groups to organize in the long term:

https://en.wikipedia.org/wiki/The_Logic_of_Collective_Action

---

An interesting phenomenon is that you'll often see something in People magazine to the effect that "(Rosanne Barr|Sylvester Stallone|...) has a 148 IQ" and wonder who it is that trains celebrities to ace this this test:

https://en.wikipedia.org/wiki/Raven%27s_Progressive_Matrices

which is has to be, because with just 60 questions, somebody with an IQ > 100 or so should be able to memorize the answers. Maybe you can't really a fault an actor for this because an actor doesn't have to be a genius, they just have to play one on TV.
IANAL but of you are impacted by this you should seriously consider filing a civil suit against the data controller. The most interesting article of the GDPR for you will be article 82 which entitles you to compensation if you have been materially or immaterially harmed. If your personal information has been leaked this would a clear case of immaterial damage. It has probably caused you anguish and is a violation of your right to privacy.

In this case you will have a huge advantage since there is a police investigation which no doubt will provide you with plenty of evidence to use in your civil suit.

Once you have proven that your data has been leaked the defendant/data controller has the burden of proof to show that they are in no way responsible for the damage caused to you.

As I said, IANAL, but I was personally involved in a similar case in Sweden which did go to trial (and then settled).

Hopefully there will be a class action against the data controller.

EDIT: Once again IANAL, but if you have questions reach out to me on mail@danielk.se and hopefully I can give you pointers for your research.
So because they chanted "Death to America," you are in favor of imposing sanctions that will cause the death of Iranians?
It's incredibly cruel. Blackmailers are now sending emails to people in the database directly. People already bad shape are put into huge stress. There can be suicides.

According discussion in Finnish reddit /r/suomi, in the released data batch was therapy discussion involving person who struggled with pedophilic impulses. That's a life ruined.
I think Raven is fun, but Raven is just 60 questions you can cram on.
My credit card is probably on dozens of different databases on the web where it really shouldn't need to be. That's not a good thing.
If this leak would have cost "6 figures" per person, as you advocate, that would total somewhere around 4 billion euros. If the insurance company has to pay out billions of euros for a single leak, it's going to have to charge pretty hefty premiums for their client. In order to stay profitable, the client has to raise prices for their mental health services. If the end user was previously paying 100 euros to talk to someone about their mental health issues, maybe now they would have to pay 100 euros to talk + 200 euros to cover the insurance premium. Doesn't sound too good, does it?

Now let's imagine what the insurance company does when it's about to get hit for 4 billion euros. Instead of paying out, it's going to hire an army of lawyers who are going to make a convincing argument that, actually, this was not a data leak at all, this was [something else not covered by the insurance agreement]. We've already seen this with all the "cybersecurity insurance" products, which are basically scams.
Our perception is biased with bug bounty rewards covered by news articles, but in real life communicating some vulerabilities can trigger problems or being ignored at best. Institutions are hopelessly arrogant.
I sometimes get these messages from people claiming my systems are open, but they're just new to port scanning "hurr hurr your port is open big bounty pls"

Make sure to display your knowledge when doing this, and honestly it couldn't hurt to have some evidence.
WH planned to offer Santa Claus performers early access to Covid-19 vaccine
Similar thing with my doctors in the UK . I found their online prescription renewal system allowed me to access other people’s prescriptions. I warned them about this and they threatened to report me to the police. I found this out because I couldn’t click the link in my mail client on my phone at the time so I typed the URL in incorrectly on my desktop PC.

So I moved doctors and reported them to the ICO. Never heard anything back but their web site disappeared for a month after a couple of weeks. I’d like to think they were fined but I don’t think that actually happened.

This was some piece of shit they had paid a local web design company, the lowest bidder, to put together. It was PHP, hosted in the USA on a shared server and didn’t even have TLS enabled.
For what it's worth, whenever I tunneled X over a non-local SSH connection, it was slow as molasses. That's because almost all contemporary GUI applications render to a bitmap anyway. Those that actually use the outdated X vector graphics operations look like utter garbage compared to anything post-1995. Frankly, I'd rather my applications are at least somewhat aesthetically pleasing.
Right you can move all non-RIAA content to an open platform.

Or if someone wants to live dangerously setting up a PeerTube instance outside of RIAA jurisdiction would work just as well.
For some jobs, it matters more than others. I wonder if the data also records profession categories and differences become more clear.

Also IQ is a sub-
component for general intelligence. There are so many other factors. Claiming it's useless or useful is pointless. It probably depends on how relevant that sub component is for the role and task at hand and therefore requires a case-based understanding.

It's like claiming that good body strength is useless. For a programmer that's probably true, but for a professional home mover or pyramid builder, results will be different.
> Wayland is a protocol.

A protocol definition could cover multi screen support, requiring implementors to do something sane. Of course one of the reasons that Wayland exists was to cut down the bloat X had accumulated over the years. Given that it is rather surprising that the Wayland spec isn't just an empty page.
>Also correlates with lifespan, probability of divorce, crime. All such boring stuff.

Yes, doing pointless soul crushing work makes you the money you need to create the next generation of automatons that do the same.
While not wrong, ignores that this isn't the norm.

I think we could use the terms releasing and maintaining. Constant releases is not the same as constant maintenance. And it is hard to agree that our industry sees that.

By way of analogy, we seem to think we can improve the roads by building new bridges every year.
What if instead of actors faking the test, we consider it takes high IQ to reach the top 0.5% of any field?
I really enjoyed this writing!

The only thing that I find weird is the description of the leaky abstractions for the pin interface in "traditional" OOP. I understand the general sentiment, but this particular case is a prime example where polymorphy expresses the exact same thing just as well (here in C++):

class Pin
{
public:
Pin(std::uint8_t pin) : _pin(pin) {}
virtual ~Pin() = default; // base class could also be made abstract here
private:
std::uint8_t _pin;
};

class ReadPin : public Pin
{
public:
ReadPin(std::uint8_t pin) : Pin(pin) {}
double read();
};

class WritePin : public Pin
{
public:
WritePin(std::uint8_t pin) : Pin(pin) {}
void write(double level);
};

You can then end up either with

ReadPin sensor_pin = gpio.getReadPin(SENSOR);

or, if you for some reason want to keep the chaining, nothing prevents you from having a

ReadPin sensor_pin = gpio.getPin(SENSOR).asReadPin();

Maybe it's just not the right kind of example, but I don't really understand how OOP's failure is that you can call write on a ReadPin. The author says:

> This kind of compromise happens often in the "kitchen sink" approach of OOP, where a child class might have access to inappropriate data or behaviour. Perhaps that data is relevant to a sibling class, but this is a sign of the abstraction leaking.

...which boils down to "if you violate the Liskov Substitution Principle, you are not using OOP correctly". I concede that this can and occasionally does happen in practice, but it's not like other languages are incapable of following the SOLID. It might just be easier to not do so.
Is there any plan to integrate with or produce your own wheelchair routing, and help with accessibility information for ways as well as points of interest (what WheelMap does right now).

I've moved to a smaller city; and while things are clean and generally well maintained, there are many neglected sections of sidewalks here which would not be accessible to some forms of wheelchair. I do a lot of walking so I am in a good position to gather data like this, but it seems that the effort for this is not as organized.

There are also some non-wheelchair accessibility issues in mapping between new construction and old; for example, textured pavement placed according to new standards, further back from the roadway, but the zebra crossing marks and stop lines were painted according to older standards, closer to the roadway.

I think it would be nice not only to treat this as a repository of useful information for people looking to access these ways, but as a tool to identify, triage, and resolve accessibility issues.
Sure, and while we're at it, why don't we make it a gazillion euros. After all, you can't put a price on privacy.
Does anyone know if state intelligence agencies have the capability of hunting down this kind of hacker?

I would think that their need to receive ransom money would limit their ability to hide completely.
Wayland isn't a code base but a protocol.
The general idea behind your points are sound and correct.

However, the problem is you seem to be generally ignorant of widely known points of knowledge about Markdown.

> not changing a spec for over a decade should not be considered pathological but actually commendable, if the nature of spec is complete enough for it's purpose

100% agree in theory, but Markdown's creator never wrote any spec. when creating it. Initiatives like CommonMark are efforts to specify and unspecified language, not to evolve nor replace any existing spec.
Cutting out bloat, just like you loose weight by cutting of your head.
How Low Can #1 Go?
I didn't realize until today that Gitlab is entirely remote and has been since it was founded (long before covid) https://www.inc.com/cameron-albert-deitch/gitlab-tips-remote...
Anybody who has gone looking for a good XSLT 3 implementation would probably recognize your name! Thank you for Saxon.
There's a well known phenomenon where if the infosec division of a company is working well, it's not obvious at all to management, because no leaks are taking place. So their budget gets cut. And then the data leaks/breaches happen.

Once a leak happens, the infosec division gets free reign for a few years. Until a new manager goes all "you guys don't even do anything!", and the cycle repeats.
I'm not sure this fits the definition of opportunity cost either? I understand why you think it does (because it was money not gained that could have been) but the content producer doesn't have multiple options to choose from here. They expect to have X dollars in their account, instead they have X-Y dollars and there's Y dollars in thief's account, because of the actions of the thief, not because of any decision they made.
Indeed. And thankfully nobody is forcing me to use Linux.
Scoop melons instead of slicing them