skysight-inc/HackerNews huggingface dataset:
The medium page with the "Case for OAuth3" requires a sign in, kinda feel like it shouldn't
Ask HN: Were you in the early 2000s HTPC scene?
Hi HN,

Recently it occurred to me that a lot of the design in modern TV boxes - FireTV, AppleTV, GoogleTV, Roku etc - was first pioneered back in the early 2000s HTPC days, of MythTV, Xbox Media Center, etc.

Back when mainstream TV was doing giant tables of text, the HTPC people were doing film posters, and simpler, more spatial UI.

Was anyone on HN hacking on MythTV / XBMC etc in the early 2000s? Did you you end up at Amazon / Apple? Did you start your own company? Did your work end up inside another project? What was the transition from warez to licensed content like?
How is it different from running Selenium yourself?
When the battery supply is running smoothly it wont be hard making EVs. ICE vehicles are harder to make.
my point exactly. all dictation softwares expect you to keep looking at the screen. your "I had a wireless headset that let me wander the house talking to the computer" is what i want a dictation software to do. sadly like you i am left unsatisfied
Show HN: Another small universal Turing machine
I've done one of the AWS certs a few years ago, found it was very much a memory test.

A lot of questions on easily Google-able things. I learned a lot from the training material, but don't think the exam itself really proves that much skill on the platform.

If I took the test again now, I doubt I would pass despite a lot more experience since I passed the first time around.
> That is how kubernetes secrets work

As I said, try ECS.
The problem is that Google Photos is so good, there is nothing out there for free with the same offering. ICloud is extremely limited compared to it without paying ( remember not every one lives in the US and $5 can be a lot of money )
> you are saying it is a good thing that certain information is unavailable to you, and that you trust google, the government to do the job for you.

That's not what I'm saying. Removing the information from YouTube isn't removing the information from the internet. They are just making use of their right to decide what they give space to on their platform. I can still go to a specific conspiracy theory website and read about it there if I'm feeling like it.

The "government" has nothing to do with that as we are talking about a company applying their own policies to their website not a government mandated take down of content.
>>It's a very dystopian view, though.

When you see this cycle of developers flocking to a walled garden and then the same developers who helped uplift the platform get burned repeat enough times you start to lose a bit of hope in the way things are working. But I do have to agree with you, my original post does sound dystopian.
or alternatively, addicted to something in his regular intake; An opiate addict will also not function as well without their regular dose.

(This is the first account I hear from someone who will get injured from missing a meal. That said, if you have to be addicted to something while keeping in top shape, food sounds like a better deal than opiates).
Basically, I had a huge list of books I haven't gotten around to reading about technology, its history and its relationship to society. So I thought: why not make a book club out of it?

Getting people to sign up for a community that really isn't one yet is hard and I'll have to see how it goes. But if a few people here take the chance I would be beyond happy!
Can PeerTube be configured for the less ambitious goal of self-hosted web video hosting (i.e. without peering and federation)?

It seems to support adaptive bitrate, and has a decent enough web player. I don't think there are many Free and Open Source solutions that are up to the task. Even Wikipedia uses a very bare-bones solution, without adaptive bitrate: it just points the browser at a .webm file.
NLP isn't something I would call low hanging fruit.
I think they probably meant a Chrome/browser API.
OAuth 2.0 is meant for Authorization.
Multiple parties used if for Authentication, which is why a standardized Authentication layer was built on top of OAuth which is called OpenID Connect.
> You can make a case that Web search is a natural monopoly.

Thoughtful article, great writing but help me here: How can a natural monopoly (what ever that means) ever be a good thing?

Imagine if we'd let one company extract, refine and distribute all oil. Or even a monopoly for any one of those three.
For whom like decentralized web, it's also worthwhile to take a look on http://joinmastodon.org
If you work in Stockholm you could easily get closer to 5k or even above that if you have some experience. If you work somewhere else the figure could be smaller.
If someone would really want to break the Google search monopoly, they would seperate:

- Crawling and document parsing. Imagine something like archive.org where all search engines would get the content from. This could also be used to enforce copyright legislation (e.g. deletions of documents, etc...). Today, it's nearly impossible to collect the data as google does, because most website owners won't even allow that you crawl them (e.g. distill networks anti bot protection, etc...)

- Metrics (e.g. data from google analytics, dns resolvers, browser toolbards, browser statistics, etc...). Again this data should be available to everyone from a central authority.

Then there could be more independent search engines building on top of that data. If that doesn't happen, then there will never be any competition. Todays copyright and data privacy laws even further strengthen a monopoly position, as smaller players will not even get access to some data (or at different pricing then google does)
That is an interesting question, as a world without large industrial plants will not resemble the world we live in today, in all kinds of ways. Any sensible plan to reduce emissions will need to provide for industry (most industrial processes involve heat), otherwise we're all going back to living in caves.
> On conversational speech, the human error rate amounts to about 5.5%. Our system now reaches 5.0%.

I’m surprised that the human error rate is that high; is this the error rate from native to second language, or from second language to native? And what is the average second language skill level of the translators?

(My translation accuracy feels like it would be about 50-75% of words in freeform outdoors conversation at normal speed, but because of this I wouldn’t even consider a course taught in German at this time).
mmm github stories can't wait
Not expecting a naked lady painting
> most of the fruit is still on the tree

Case in point: image search for "shirt without stripes":

https://github.com/elsamuko/Shirt-without-Stripes

HN comments: https://news.ycombinator.com/item?id=22925087
The Last Ent of Affric (2019)
Out of curiosity, what kinds of clients did that project have?
No, I believe you got it 100% backwards.

See the diagram in the RFC[1] and section 1.3 just below it. Sure OAuth usually involves authentication, but OAuth doesn't really care how it's done.

Then again, not my field of expertise so I might be wrong.

[1]: https://tools.ietf.org/html/rfc6749#section-1.2
It shouldn't be controversial, but it is. Assuming that everyone in a demographic is the same is why companies try to increase diversity by hiring based on skin color instead of their actual life experiences. It also means that you can't blindly hate on libs/conservatives, you need to actually talk to people and understand why they think a certain way.
Former Chinese Tech Unicorn Could Now Sell for Just over $1k
GP doesn't want to store the data on the satellite, but rather use the space in-between as a Friday line storage. The satellite would be a repeater that retransmits what it receives. If it was 20 light minutes away, there would be 40 minutes worth of data in transit, so the whole system could store 40 minutes long circular buffer.
F-droid is amazing for android. It's probably the one nice thing about the platform.

lots of people have probably given up on android now though and there are multiple phones with support for a decent Linux distribution at this point.
For me, the common failure mode of browser-based text translation is that they try to translate names. Mark Sugar Mountain, Albert One Stone, that sort of thing.
Each comment id also has an id within the page so you can bookmark within the context of the discussion if you want:

https://news.ycombinator.com/item?id=24846987#24853698
It's really stupid because it is an authorization protocol that people use for authentication because if you have access to certain resources, it implies you're a particular user.
Mesh can do this, somewhat - exceptions in table columns stick out like a sore thumb in the sheet source.

http://mesh-spreadsheet.com
I really don't understand those certificate business on computer related skills. It changes too rapidly and certificate of last year doesn't guarantee the current skill.

Anyway, I quickly glanced the sample exam questions.

https://github.com/certifications

> Which statements are true about GitHub Marketplace?

Honestly, I have never heard about the term GitHub Marketplace at all. Frankly, I don't want to relies on random proprietary SaaS apps somebody selling on random software distribution platforms.

> What is a workflow?

I don't know. Isn't it possible to (indirectly)achieve every candidates by GitHub Actions? Also, the term is used vague even by GitHub itself. The GitHub documents refer to flow or actions or whatever.

> Which statements are true about organizational membership

I don't know. Is reciting this knowledge helps on any way meaningful?

> How does GitHub alert you for security vulnerabilities?

How do I suppose to know that without getting any alert previosuly? By reading every GitHub documents and committing it to the brain?
It's easy to do on the beginning until you want to add a library that has a set of custom perl scripts to do the actual build.

Then you want to add a library that compiles fine on Fedora, but fails on ArchLinux, because they've moved some header file from `/usr/include` to `/usr/include/subdir`.

Then you want to add another library, but you want to statically link it, only to find out that the package manager installs a version of the library that allows only dynamic linkage.

Then you want to add Windows support, and the whole thing detonates because Visual Studio uses completely different compilation switches than what you'd expect from a compiler in a unix world.

Next there are 1000 other problems, including people who insist on using raw Makefiles because they think they know better.

By the way, the fact that C doesn't use rich signatures is a problem, not a feature. C ABI can also be changed by using different compilation options, but the user won't even know it until the app explodes (crashes). At least C++ will emit a linker error in such case (sometimes, other times it will explode as well).
I wrote a small Universal Turing Machine using a small dialect of lambda-calculus, lambdatalk. A single function easy to understand, applied to a first small set of rules. I'm waiting for your opinion and for new ones. (alain marty)
I think we're arguing semantics. Markets are obviously more efficient than a single investor or you would be able to beat the market with public information. And when you're able to beat the market you're making it more efficient.

It's easy for politicians to blame 2008 on the markets, but I think it was caused by Keynesian government policies.

I assume we'll have similar problems soon with all the stimuli being granted.
This gets repeated every time, but it's worth repeating: You've just discounted many skilled people working at companies which don't allow public personal projects, and people who are not interested in working on personal projects. There's a significant number of them.
Interestingly, colonoscopies here in DK are mostly without anesthesia. I prepared by looking at mostly-American sites where some doctors said 90% of patients prefer full anesthesia, and the rest some other sedative drugs.

The procedure was 20 minutes, painless and slightly uncomfortable where the nurse had to push on my stomach to help the probe round the guts, that was like some brief constipation. You get to your appendix from the inside and physically realize how much the colon takes up in your body.

BTW, in Denmark, a 40+ yo patient with rectal bleeding that cannot be physically confirmed as hemorrhoids by the GP would likely be referred to the emergency cancer track, with I think, 2 weeks before all the tests have to be finished.
Sooo... every time blockchain is mentioned I get cautious. Same for "distributed" search. From the link you posted -

"...does away with every form of a single point control in all of the tasks relating to indexing, querying, data mining, and crawling."

Yeah mostly that's distribution. How, though, will something that does indexing in 10 different locations ensure that I get results including something that was indexed in Japan 5 minutes ago?

And Blockchain. I get that one might like to mitigate fake search entries (as that post notes). How though, using a blockchain, does one manage someone's right to be forgotten, when the blockchain's sole raison d'etre is to make all the things indelible?
Yes to night thinking. Once I was involved in hunting down a tricky bug. We spent days and weeks trying various things. One night I woke up, not with a clear solution, but three new things to try. Tested the first one, and it worked. Told my boss that it had come to me while sleeping, and he told me to charge at least six hours for productive sleeping.
You can also use this (for MS Edge or Firefox): https://chrome.google.com/webstore/detail/cookie-autodelete/...
>>change some laws and regulations.

but then we are in another loop where people who don't understand technology will bring in laws that both fix an issue but creates a whole set of new issues, that might even hinder progress. So I am not a fan of politicians getting involved with things they don't have a good idea about.

Personally I choose to believe in the whole decentralized internet idea that's starting to taking off. 10 years ago bitcoin, smart contracts, decentralized payment systems, decentralized video platforms etc were not that popular or didn't exist and now there's so much progress made in that direction. So I believe there's some good that will come out of the blockchain space. Problem is, only time will tell ha.
What I Learned Running Two Startups at the Same Time
Gig Work on the Ballot in California
On a bigger scale, Christians used to be anti gay for seemingly their whole history, then when others in the same western society decided gay is OK, they suddenly decided that Jesus was telling them to be tolerant all that time and all those earlier Christians had somehow got it wrong.
So here some references in case you don't believe that there was EU funding:

https://doc.pypy.org/en/release-1.9/index-report.html

https://ieeexplore.ieee.org/document/1667583

https://mail.python.org/pipermail/pypy-dev/2004-December/001...

https://en.wikipedia.org/wiki/PyPy#Funding
Thanks for sharing.

> but I got worried when I reached 58 kilos as people started pointing out how skinny I got..so I started bulking up again..

Its important not to swing too hard in other direction too.
then you set the Bitwarden app as iOS's password manager and your general mobile UX is greatly improved.
Important: https://en.wikipedia.org/wiki/Refeeding_syndrome

The problem with recommending "supervision" is that there isn't anyone certified to do that in particular; so that's not really helpful.

I recommend anyone who wants to try fating to spend a month on /r/keto and /r/fasting , read all their tutorials, read some posts and ask questions; and then make up your mind about what kind of supervision (if at all) you want.

It's not a cult; people report bad experiences on these communities as well, and are not ridiculed or excommunicated for it.
As Justin Richer writes [1]:

And to be clear, I don’t actually care if the new work is called OAuth 3.0 or TxAuth or some other name, but I do think that it’s a fitting change set for a major revision of a powerful and successful protocol. We need something new, while we patch what we have, and now’s the time to build it. Come join the conversation in TxAuth, play with XYZ, and let’s start building the future.

--------------------

[1] https://medium.com/@justinsecurity/the-case-for-oauth-3-0-5c...
This example is ruined, because now the search for "shirt without stripes" gives you that GitHub repository and the threads of comments about it...
'Dark Archives' Explores the Use of Human Skin in Bookbinding
Wow, what a PITA. Thanks for sharing your hard-won insights in this excelent write-up.
I've watched people start moving (already successful) businesses to be more dependent on google and it freaked me out because of stuff like this.

You get a lot of stuff in the short term but you have to remember your long term survival means absolutely nothing at all to the organizations that run these massive platforms and eventually they'll do something that can wipe you out.
Tf. I have avoided employers that required certifications and will continue to do so.
I believe he's implying the use of the satellite as a repeater and the intervening space as a delay line

I do not think it's viable in any sense with launch costs but in a hypothetical scenario where you had something 20 light minutes away with a channel that had no better use you certainly could buffer 40 minutes of data on the channel

It is limited here not by the availability of space but the ability to collimate the signal and the availability of power density at the receiver to discern the signal from noise
I've been using it from day 1 since it was known as Firefox Preview (way before it landed in nightly) and I have very little to complain about.

uBO, Privacy Badger, and DecentralEyes are all the extensions I need. Stuff renders quicker, I can swipe between tabs, reader mode is there. Sure, it might take one additional tap to open a new tab, but I'm fine with that.

I'm now using nightly, so I experience an occasional bug here and there, but I don't care.
> Here in the UK you just get pain relief, and are generally conscious for the procedure - though gas and air is available if it is uncomfortable. It caused me no pain at all, was quick and easy and I'm pleased I went ahead with it.

Not necessarily, you can get the Good Stuff that knocks you out during the procedure in the UK (I have), but I'm not sure what the criteria are for getting it, if any.
Firefox already has a similar restriction on Windows, and I think MacOS, but not Linux.

On the normal version of firefox for those platforms you can't permanently sideload an extension, you need to reload it on each restart.

The Developer Edition still lets you sideload addons normally, however.
The problem with this is that most systems designers think "end to end" means the data flow through a system from input to consumption and they're done. A huge majority of them fail to consider things like building, testing, deployment, environment configuration, scalability, maintenance, monitoring, disaster recovery, geo-replication, prevention of workflow bottlenecks and the n-thousand tiny pieces of the puzzle that go into ensuring systems function adequately and don't pertain specifically to the data they're trying to capture and utilize.
So, now, not only would law enforcement struggle at catching the criminal asking for ransom, they would additionally struggle to enforce the law on the victims
> we're currently enrolled in a different online program that has much more structure, but is still self-paced

Which one is that? Do you have any recommendations?
Does this contribute towards global warming? In the literally sense - taking heat out of the core and into the surface level environment presumably increases temps?
> Assuming that everyone in a demographic is the same is why companies try to increase diversity by hiring based on skin color instead of their actual life experiences.

That makes no sense as a takeaway here. The author's argument is that while religious theology doesn't drive the cultural norms, the religious boundaries define a grouping wherein people tend to converge on or copy cultural norms. Thus, you end up with a particular religious group behaving like X, even if X didn't come from the religion itself.

One could easily apply the same reasoning to visible ethnic groups: they don't behave similarly because of their ethnicity, but the ethnicity defines a grouping where the people within tend to converge on shared cultural norms regardless. Ergo, you would indeed end up with people within said grouping behaving similarly, and then it follows that increasing diversity of which groups you hire from would increase diversity of cultural norms or thought/behavior.
Might be a bit lossy :)
I did not interpret anything. We are. Discussing about an article and a comment that is factual wrong according to the article. Don't fight facts and don't confuse them with opinions.
> It changes too rapidly and certificate of last year doesn't guarantee the current skill.

What product is there which both has a certificate and changes each year enough that the difference can't be covered in less than an hour of reading about the new features?
I have unlimited 10Mbps (~3TB/month if my math is correct) connection that's costing me nothing to fully utilize. Where do I sign up to help debian?

What I'm saying is, "offloading the bandwidth cost" is bullshit because there is no cost.
WebRTC in Videochats usually employs 1:1 P2P, meaning everyone builds a peer connection to everyone else. So for N people you have N connections carrying your traffic M, so the total bandwidth is NM.

For torrent P2P you get clusters of peers sharing data, you don't have to send data to every peer, the usual outcome is logarithmic, so you connect to log(N) peers for N participants with total bandwidth being log(N)M.
The Diabolical Ironclad Beetle. It’s Almost Uncrushable
It's easy to look at the extreme examples and get widespread agreement, sure. The problem is in all the grey areas between benign, reasonable, controversial, factually-incorrect, manipulative and then "really bad" content.

And the argument becomes even more moot when you consider that no one is "forcing" people to watch content that they don't like, they simply ignore it and heck the platform can just hide content you ignore/report. At that point, we're conceding that we actually don't want people to see certain content because of certain reasons. And I think those reasons boil down to us collectively thinking that people can be manipulated/influenced, are unable to look at these videos objectively, and can fall for the lies contained within it.
Just spent a month during lockdown going through all the RFCs and specs for oauth 2.0, bearer token usage, openid connect, various extensions and a couple of software implementations...

... Great.
Sure they could. What you allow or deny would be enforced by the identity provider. The relying party simple would not receive the data and could not access it.

However, that’s really about OpenID, not about OAuth.
authN = autheNtication (identity / "who are you")

authZ = authoriZation (access / "what are you allowed to do")
On a quick glance, this looks like an implementation nightmare just waiting to happen.

Opaque handles everywhere (okay, that simplifies stuff going over the wire). Union types in protocol payloads - the spec calls these "polymorphic JSON", but the reality is you will need to branch on type of a given field. Worse, nothing prevents having two or more subtly different dictionaries in the same field, based on arbitrary/implicit conditions.

Subtle and surprising payload differences are pretty much guaranteed to introduce weird problems in the real world. And I'm not ruling out security problems either, because a bug in authorisation logic can easily generate tokens that are valid for wrong scopes.