skysight-inc/HackerNews huggingface dataset:
Yes, but so are non-compete agreements and discrimination, and laws can make those contracts invalid.

I would like to see laws make HOAs invalid and null and void. If you own something you should have full control of it, to the extent that it doesn't adversely influence the safety of the community. So yeah I'm okay with laws saying you aren't allowed to store a pile of hazardous chemicals that could be a safety hazard to neighbors but I'm most certainly NOT okay with laws telling you how you're allowed to landscape your garden or what color you can paint your house or what your fence or driveway looks like or whether you park your car in your driveway or garage. To me, owning means I make the rules, to hell with contracts, it's not a rental.

Unless it's in some historical district where we're trying to preserve the historic look, that I'd be willing to make an exception for. But definitely not in random suburbs.
Depends if you include proxy wars as two nations being at war I suppose.

But no, there was never declaration of war and direct hostilities.
I like zig's compatibility with C. You can directly import C headers and the compiler will generate headers for your zig code as well.
No reason, yours is the best option IMO. You have a secure container, with a sync service of your choice. It's more transferable so you can easily migrate if you want to.
Likely the British Military research projects.

>Each rainbow code name was constructed from a randomly selected colour, plus an (often appropriate) noun taken from a list

https://en.wikipedia.org/wiki/List_of_Rainbow_Codes
Ask HN: Which product home page you prefer? (added url in reply to click)
Cinoca is building a website functioning as online virtual extension to every website which will empower people in learning & reviewing any web page better and help solve their questions faster. Our users are any active self-learners, primarily college students and young professionals who enjoy learning online better and faster.

Please tell me which home page you like more https://www.cinoca.com/product-preview Appreciate if you could reply with your score for both, e.g. 8 vs 8.5
I don't mind even you give low score like 2 : 3. Though, special thanks if you provide some reason.
It will take you less time to learn it than to read this thread
My guess is that RIAA will pursue it until they either win legally or exhaust and frighten everyone away from it and it becomes a much less powerful tool. It's not like DMCA notices are their only option after all (and I'm not sure the DMCA notice sent to GitHub is really even a DMCA notice anyway). I would imagine they're either already in the process of or are ramping up to also go after the individuals involved as maintainers and (major) contributors. I think that could actually be a really interesting legal case to see if something like youtube-dl is found to be something more like a VCR or more like Napster, but I don't know if RIAA would ever take the chance of letting that happen on the chance that they lose. I think the more typical strategy for them would be to start sending everyone they can track down the real identity of scary letters and maybe drag a few into court and settle so the rest run away.

I personally wouldn't touch contributing to youtube-dl right now with a 10 foot pole, but I'm also a bit on the paranoid side :).
> Metadata is incredible valuable and sometimes just as valuable as the decrypted data itself.

Just adding an example for the people who don't see the value of metadata: WhatsApp is still a viable revenue source for Facebook even as they have no access to the text of the messages due to E2EE.

Knowing who talks to who, at what times, the type and approximate size of messages, the members of groups, and the contents of the phone book of every user gives enough information to keep their business model without exposing them to court orders asking for the plaintext (that's the reason they added E2EE to start with, there is no incentive to improve the service when they have a billion heads of cattle to milk).
But what about all the folks at the club?
Covid, Immunity probably long lasting
Stars are formed in nebulas of gas and dust via gravitational collapse (accretion).

The remaining gas and dust that is swirling around the star flattens out into a disk (because of angular momentum). Planets gradually form in this disk, again via accretion (snowball effect).

https://en.m.wikipedia.org/wiki/Protoplanetary_disk

https://en.m.wikipedia.org/wiki/Accretion_(astrophysics)
It is true Urdu is just a colonial imposition, it is synthetically derived from Hindi by insisting that the script be Persian.

Tarek Fatah makes a point about why Urdu isn't a distinct language from Hindi.
The KVM example is sort of weird to me: the goal of that code inside KVM is to provide a comparatively "easy" interface for creating VMs on multiple architectures. The code isn't particularly motivating if you don't see how it's used.

Until you get pretty deep into the weeds, none of KVM's code can actually do anything architecturally specific, since all of the glue code is architecturally agnostic. KVM supports a ton of architectures, intel-x86/amd-x86/armv/s390/risc-v/...

On top of that, KVM tries to avoid having extra ioctls (essentially KVM syscalls). A lot of the ioctls are so flexible that they don't really tell you anything about what a CPU should* look like. The ioctls let you create a VM that is in essentially any valid state a CPU could reach (since VMs need to be migratable).

Take a look at the sample code in the rust kvm-ioctls crate [1] and you'll see what defines a VM.

1) Open the KVM fd for access to the ioctls.

2) Make the VM fd.

3) Make guest RAM, and shove the asm from up above into it.

4) Make a vCPU.

5) Initialize the registers for the vCPU.

6) Run the VM, and handle the exits (KVM sometimes can't handle what the VM is doing and returns to usermode to have them deal with it. Think device emulation).

This avoids initializing a lot of state for the VM, but it's enough to run it. Notable details are things like CPUID (supported cpu features for the VM), the Interrupt Descriptor Table, and the control registers. If this VM took an exception/interrupt right now, it would immediately triple fault. This sample VM is running in "real mode" (16-bit unpaged mode).

[1] https://github.com/rust-vmm/kvm-ioctls/blob/master/src/lib.r...
Not too long ago I was asked to do some maintenance programming on a logistics program (the program did amongst others: fill the various operated trucks to not more than capacity from orders, add new orders at any time, plan the route to drive so it doesn't take more than a workday), all written in WordPerfect 5.1 macros. That program can do a lot more than most people know about. And apparently it's still used in production.
You may have quite a challenge on your hands with that approach. WordPerfect for DOS is a very complicated piece of software that comes with a 600+ page paper manual. The program is absolutely chock-full of keyboard shortcuts and hidden functionality. It's not discoverable the way a modern GUI application would be.

Buying it on eBay may be one of the only legal ways to get your hands on that manual. Though I suppose you could also look for a 3rd-party book, it may not cover every feature of the application.
The Night Climbers of Cambridge
It is not closely examined.

The "examination" for revocation is very simple for every CA - does the request include demonstrated control of the private key. If it does, honor the revocation request. They have at most one business day to revoke. For evidence of actual compromise (e.g. not a first party revocation request) they have 24 hours. Note that the the CARB rules don't allow the CA to delay revocation for compromised certs, even if the true owner asks for it.
Not just Linux, being free and open in general help immensely to reduce e-waste.

Just think of how many old cellphones that don't receive updates anymore could become media players, portable terminals, IoT consoles, instrumentation interfaces, retrogaming consoles, in-vehicle dash screens, etc. if only the manufacturers released the information necessary to install much faster and open operating systems and write device divers for them. Each one of these old phones recycled that way would be one less phone thrown away.

The Pine 64 isn't anything special hardware wise, actually it's way inferior to most popular phones (but runs much more optimized software, and no preinstalled junkware), however, being able to customize it to the point one day I could give it new life by buying say a faster mainboard instead of a complete cellphone then ditching the old one in a landfill, makes a killer argument in favor of Open Source software and hardware.
>that .edu email address.

I don't think many care whether it comes from a .edu, or something like a student-appearance twitter account.
Dan Kohn–VP of CNCF, GM of LF Health–has died from colon cancer
https://www.cinoca.com/product-preview
> That's what impresses me about Greenwald and Taibbi. They both hate Trump. But they aren't willing to put their journalistic ethics aside because of it.

This is exactly why I decided to sub for Greenwald for $5/month on Substack.
Perv Adoo.com

A rather unfortunate domain name. Yes, I know about the extra e. Regardless.
> Almost nobody chooses a cameraman, truck driver, or supermarket cashier jobs if they actually had a legitimate choice between that and a well paid tech job

Cameramen make good middle class to upper middle class incomes, have good benefits, are often unionized, and their jobs take skill.

I think this might be an example of tech bubble myopia.
Kubernetes Governance 101
Get to know to the governance framework with kubernetes.
To your point, the IC trades in misinformation and distraction as much as it trades in truth and fact. When any of those acronyms make a statement it's fitting to wonder if there's a broader arc, a bigger picture.

Their responsibilities and mission are clear. There are no style points. They'll do whatever it takes to accomplish that mission. History is very clear about this M.O.
How QAnon is undermining the real global fight against human trafficking
> and could hide errors

How? As I said, the stricter rules of C++ result in fewer type-conversion errors than C's permissive rules. That's the reason for C++'s stricter rules, and it's the reason Ada is even stricter.

As an example, consider

a = b = c;

In a languages with permissive rules about implicit conversions, you have to inspect the variables' types to determine whether this statement is equivalent to

b = c;
a = c;

(Even ignoring OOP, that is.)

> With pre C99 code it would also hide default int errors if the include for malloc gets lost at some point.

Wouldn't it just fail to compile if you're missing a required header?

edit steveklabnik linked to [0] so I see what you mean now. I think that's a valid point.

[0] https://stackoverflow.com/a/605858/
The most success I have had with per project pricing is having a discovery phase to actually scope out the work.

I concur. Also, the discovery phase itself can be flexible on time allotted and billed in time increments, even if the main project won't be. You might well not know up-front whether you need a day, a week or a month to pin down the spec and all the other details, so a self-contained "getting to know you" phase before anyone makes big commitments has a lot of upsides for all parties.

Also, regarding the problem of vague requirements and differing interpretations, getting a complete set of acceptance tests agreed early-on has a lot of upsides for both parties too.
I wouldn’t want to be tasked with maintaining a C++ codebase like that. That sounds horrible.
> Golang can not be considered for high performance programming also due to the GC.

People repeat this like Go isn’t designed for use in resource constrained environments.
Wired's content is of a piece with their web architecture, so it's not worth griping about. Other websites are available.
Off the top of my head:

#8 Error handling: on an exception, does the whole app crash? What parts of it become unusable? What are the reset paths?

#9 Data consistency indicators: how functional is the UI when in a fallible state like server updates? (In multiplayer games this would be stuff like client side prediction and reconciliation) What is the recovery path so that data isn't lost across many users? CRDTs and their competitors solve it for document editing but what about general purpose GUIs?

#10 User driven layout: Plugins, configurable UI elements, and a panel manager like you'd find in most IDEs.

#11 Automation/accessibility: mapping UI actions to command line calls or a scriptable layer (former for technical fields like EDA packages, latter for more GUI centric stuff like line of business app). Automation and accessibility are two distinct factors but the implementation details align almost perfectly.

Bonus #12: Remote execution for secure GUIs and ultra high processing power collaboration - think stuff like graphical CAD/FEA simulator with an entire bridge assembly. This is usually only possible with X or if you stream something like display lists/GL calls from a browser engine on the server to a client renderer.

I've seen #8-10 absolutely tear through every UI architecture I've ever seen and #11 is important because it's a nonstarter (or should be) for any serious application that goes out to the public, especially as the ADA's reach expands. The latter requires deep integration with any platform it's on so sadly would eliminate all but the big well funded GUI packages.

#12 has broad implications on how humans interface with computers but I've never seen it implemented at the GUI framework level - think WASM style bytecode for streaming UI state updates (I think ember.js's renderer works this way?).
Variable Scopes in Python – A beginners guide
why isn't there a front-end react package that handles all of this front-end logic as well?
A neat way to solve this is with a team of bug triag-ers.

Get the developers to never look at a bug unless it has the "triaged' label. Then have trusted volunteers who read each bug, assist the bugreporters to get stack traces and whatever is necessary, dedup, and then finally apply the label.

It's a good task for people who have some technical expertise but aren't yet confident to be submitting their own PR's.
UX seems to create an insane volume of different ways for doing the very same thing. In other areas of software engineering you just look at the standard library or commonly used libraries and that's enough. I would imagine that's caused by lack of "science" in the process, in the sense that you can't really measure things.

I am trying to imagine how many syscalls would the Linux kernel have if it was designed like the web ecosystem. And more importantly how many of them would stop working after just 1-2 years ...
A revenge killing for the assassination of a policeman by the Falange [0], which itself was a revenge killing (with a mistaken target) for the shooting of another man, who was shot dead in funeral procession for yet another man who died under unclear circumstances in a spiraling cycle of violence.

[0] https://en.wikipedia.org/wiki/José_Castillo_(police_officer)
As I have pointed out in a comment some time ago [0], there have been multiple instances where US (ab)used their intelligence for economic gains - be it getting a US company to file a patent (that the NSA "obtained") before the German company who actually came up with the idea does, or subverting Airbus so contracts go to Boeing.

[0] - https://news.ycombinator.com/item?id=24546046
To be clear for anyone not so up-to-speed on this: what AArch64 has (conditional select) is strictly less expressive than AArch32 (general predication).

The take away there is that general predication was found to be overly complex where the vast (vast!) majority of the benefit can be modelled with conditional select.
Hopefully ZGC will solve this in HotSpot so no one has to rely on a custom jvm.
I Interviewed My Interviewers – By Ketki Duvvuru – Gusto Engineering
Uhaul's SafeStor claims to cover:

Fire, Hurricane, Tornado, Wind, Vandalism, Vermin, Lightning, Smoke, Earthquake, Hail, Burglary, Building Collapse, Explosion, Leaking Water

My insurance covers the same, including named storms.
Ketki Duvvuru with a methodical approach I wish more people would do when interviewing at a company -- making sure you interview the interviewers just like they interview you. Which questions you'd ask your future peers and manager? Do you spend enough time with candidates asking them to ask you hard questions?
That's what most people, and especially leftists, don't get. If you look at it objectively, any ideology that offers an utopia is inevitably detrimental in the long run, be it Third Reich or Communist International. When the ends are utopic, they justify whatever means needed to get there, including killing millions of people. Fascism and communism are basically two sides of the same coin, with similar casualty counts. Both rely on total control of the populace and productive capacity. Both rely on total suppression of freedom of speech or dissent. Both won't think twice before lining up dissenters along a wall and executing them.
1) Are you doing something innovative? By definition there's no clear value to baseline against. Clients don't know what's even possible, much less how much $$$ it might bring them. So the value in "value-based" is correlated with some internal strategy / personal / brand politics. Good luck quantifying that as an external SW dev firm.

2) Doing something run-of-the-mill? Improving a process that's already in place? The client may have an idea about its ultimate specs & ROI. Even if they're able to articulate those to you – why would they?

In practice, value-based pricing comes down to "charge as much as they're willing to pay". Which is fine, that's the essence of sales. But more to do with social skills & play-it-by-ear, rather than some objective numbers you might hope to extract from a client.
I don't quite get why they say that it's trustworthy because it uses a soft-CPU running on an FPGA. Doesn't that just shift the potential attack from one vendor to another? e.g. instead of trusting a CPU from Mediatek, now you have to trust an FPGA fabric from Xilinx
Suicide Tourism
Hi everyone :) I've just release new version v2.3.4-0

It is prerelease because we do a lot of stuff around organising issues and we precise the curse where we go.

In this release we added Vue & React samples, this proves that xlsx-import works great with browsers and the the famous frontend frameworks :-D .

https://github.com/Siemienik/xlsx-import#frontend-frameworks

Second thing is that we turn on GH CodeQL - which scan source code for looking vulnerabilities.
Who says they don't? TAO - tailored access operations - is known to intercept physical delivery and re-solder chips onto hardware to get access. It is all a question of "how much do you spent on a specific target".

However every such change could tip the target off: if you replace the certificate and the target knows the key of the cert they expect, that will tip them off. Now a lot of these tools are about mass surveillance and big data: collecting metadata about everyone, not about some well defined target, then run big data analysis on it to discover targets. Like you have one person who is flagged and they talk a lot to this "HackerNews-Server" and so all others who talk to that server get an increase in score and now multiple of those people have a score above a treshhold and get flagged. Can't do that if you don't spy on everyone.

But they can't run active intrusion against every civilian ever without exploding costs and high chance of being detected.
Thank you! This was really illuminating. Makes sense that a cytoskeleton & transport would develop first, making symbiosis possible. Great research design to figure out something so cryptic.
Google probably has a good enough handle on you to serve the easy captchas. But keep in mind that for users they can't fingerprint (e.g. with Tor Browser), reCAPTCHA is usually insanely hard or even blocked ("Your computer or network may be sending automated queries"). hCaptcha has been heavenly compared to that.
I use Pi Zero W camera kits for security cameras, and they just associate with their own dedicated wifi AP, which puts them behind a NAT firewall and routes to the internet in the usual fashion.

Accessing the cameras then is no different than accessing anything behind NAT on a home network. The AP can have holes punched for port forwarding to the cameras, some kind of dyndns solution could be used to give them a persistent name if the AP's public network address is dynamic. There are other solutions in this space as well...

My preference however is to not punch any holes and not bother with supporting external connections at this layer. Instead I have the cameras establish and maintain ssh connections w/reverse tunnels on an external server having a static IP on the internet. Those reverse tunnels only listen on localhost ports at the server, requiring a locally executed process to reach the camera tunnels. In the case of my server's configuration, that basically requires logging into the server via ssh to reach the camera tunnels. For an authorized user with ssh access to the server, it's trivial to access the tunnels with a web browser by establishing a SOCKS proxy via ssh and configuring a web browser to use it.

I've ~reproduced this setup for some friends/family members, using extremely cheap VPS instances strictly for terminating the ssh tunnels and providing a self-signed cert https proxy w/basic auth to reach the camera tunnels more conveniently using a smartphone's browser. It seems to work fine for them once they get the self-signed cert permanently accepted in their phone's browser, and is more convenient since they're not IT people and won't be running an ssh client anytime soon. The main problem that's come up is reconfiguring their cameras wifi when they upgrade their home network. They forget about the cameras wifi dependency, and by the time they discover the problem it's too late and we're talking usb2serial GPIO console to reconfigure wpa_supplicant time.
As mentioned in the article, the real loss is the world view of the people. Culture, folklore and history would be lost.
> Its central goal of providing a clear ordering of events by the time at which they happened (t1 < t2 < t3) is not necessary to distribute software updates.

I guess that's not strictly necessary just to provide a binary update, but this feature could also be used to make the blockchain itself host the repo and its commits. Branches, pull requests, reverts, and everything could be stored as events on the blockchain. Differential commits do need that clear ordering of time to work.

Basically, imagine a decentralized version of Github.
One that fitted the Model-M keyboard came in the box IIRC.
This is seriously the only way I'm able to read three quarters of the websites I visit on mobile these days.
I was fortunate enough to use the airmail beacon system to navigate a flight between Helena and Missoula, MT several years ago. I did my initial flight training in Missoula and didn’t quite realize how rare the air beacon system really was. One night I did a training flight between the two cities using primarily the beacons and it was like that scene in Lord of the Rings. There is very little light pollution at night out there in the mountains, and the beacons were clearly visible on top of several peaks, like a breadcrumb trail leading me along. It’s still one of my favorite aviation memories.

Sadly, some years ago Montana Aeronautics announced that they won’t be repairing broken beacons anymore. I think there’s only a few remaining, not enough to navigate by.
Mostly because salespeople will use the same tricks to sell you stuff after you open up.