skysight-inc/HackerNews huggingface dataset:
The requested resource was unable to be located because it no longer existed.

I should have mentioned that the API was behind a reverse proxy. This leads to the following questions:

Which requested resource is missing? The API itself or the item requested from the API? How does a client distinguish between these?
The right to bear arms should cover encryption.
>...We all know what it is: Thought Crime...

Scotland's proposed new Hate Crime Bill would pretty much take care of that angle.[0]

>Scotland’s proposed hate crime bill will penalise anyone whipping up hatred against “protected groups.” That includes people making “insulting” remarks within their own home, Justice Secretary Humza Yousaf has revealed.

[0]https://www.rt.com/uk/504813-scotland-hate-crime-at-home/

[Many other sources are available, if RT's line is not to your liking]
It's not really a debate. It divides fairly neatly along the lines of "has been writing Go for a couple of years" vs "has come to Go fairly recently".

There's a well-trodden path of developers who were trained in PHP/Rails/JS/Django/etc starting on Go. Their first question is always "what framework should I use?" (you can see this being asked at least once a week on r/golang). They then go down that path, and find (what they think to be) Go to be clunky and boring and hard to think about. There's a minority that decide that what Go needs is another framework, because the one they tried obviously isn't working for them.

Then there's a split, and some people write articles like this one, and probably move on to Rust or whatever language is next for them. The others start understanding. They refactor their code to not use that logging library because they start to understand the understated power of the stdlib's logging functions. They refactor to get rid of the ORM that's become a problem. Slow realisation dawns and they finally get rid of the framework and go back to writing http.Handlers. This process usually takes a couple of years (well, it did for me anyway).

And then our reborn Gopher goes to the forums to spread the light: "all you need is the standard library! You don't need a framework!", and is met by derision and misunderstanding. The Go community gets a reputation for being unjustifiably anti-frameworks and a bit weird about ORMs too. Eventually our hero shrugs their shoulders and lets the newbies find their own path, contenting themselves with upvoting those who understand.
I am getting tired of HN shitting on volunteer work especially when a new milestone is reached after literally years of effort.
There are a few considerations on that one, but one very practical reason is the developer experience of dealing with false positives.

False positives are one of the big problems in secret scanning. Some partners issue credentials with patterns that make them very hard to distinguish from innocuous strings. For example, a Datadog token looks identical to a commit SHA. We would never block developers from pushing commits to GitHub just because they had 40 character hexadecimal strings in them!

GitHub's partnership approach works around the false positive problem by having the token issuer check whether a token is real and take action only if it is. However, this is a one-way communication from GitHub - the token issuer doesn't need to tell us whether the candidate secret we sent them was real or not, and in most cases we never know.

As a result, we can't replicate the zero false positive experience in a pre-receive hook (i.e., before the commit is pushed to GitHub). There would also be performance considerations from making 30+ http requests as part of a pre-receive hook.

In future, we are looking at creating a pre-receive hook solution that focuses on patterns that have a very low false positive rate. There are already some open source solutions that do this (links below) - in fact the OP linked to one from his Twitter thread. If/when GitHub offer is, it will definitely be opt-in, rather than opt-out!

* https://github.com/thoughtworks/talisman/

* https://github.com/awslabs/git-secrets
I do not want to sound negative but my honest opinion is that you need to work on your price model. Very few people will be ready to pay $5-10 per month(!) for such small convenience. Assuming that you do mostly automatic processing your actual costs should be really small (per user). You can probably offer this service for $5/year and still make profit, while attracting more users.
Yeah, Gmail is nice because it shows a little gray unsubscribe link that they pluck out. I use Thunderbird with Protonmail and it doesn't have that... and I really don't want to go back to Gmail :/
Just for fun, a guy bearing a genuine once-export-restricted encryption arm: http://www.geekytattoos.com/illegal-tattoos-rsa-tattoos/
If the problem is that the members aren't aligned with the common goal, micromanagement would be a sure-fire way to get them to quit.
> by its nature can't expose the same files to multiple pods.

I don't know OpenEBS, but this isn't true of block storage systems in general. Both AWS and Google allow mounting virtual disks to multiple pods or nodes if all but one are mounted read-only.

Even multi-node writing is possible - see https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/ebs-volu... :

> Amazon EBS Multi-Attach enables you to attach a single Provisioned IOPS SSD (io1) volume to up to 16 Nitro-based instances that are in the same Availability Zone. You can attach multiple Multi-Attach enabled volumes to an instance or set of instances. Each instance to which the volume is attached has full read and write permission to the shared volume.

Google offers this too:
https://cloud.google.com/sdk/gcloud/reference/beta/compute/d...

Of course this does have constraints compare to a true distributed filesystem, which the AWS page describes.
Is this going to be implemented in AOSP? Or Google Play Services?
Raspberry Pi 400 – First Impressions
This kind of works. But also realize that if your email makes it into their contacts, then phone apps will harvest this. Things like WhatsApp or LinkedIn will definitely harvest these so it’s not nearly as secure as you believe. You could have double indirection where you create a secret email and give everyone a second secret email and forward all emails from there.
GraphQL only uses two HTTP methods (GET and POST). But they actually don't differentiate in their function: you can do any type of reading/writing kind of queries in both GET and POST requests[1]. POST requests are used because they allow for larger bodies.

GraphQL defines the format of the reponse in case of errors[1]

GraphQL doesn't use HTTP status codes to communicate out-of-the-ordinary conditions. You can expect to always get HTTP status 200[1]

The data response is a mirror of the query you sent in with the data present[2]

How to query for data is explicitely laid out[3]

How to send in parameters is explicitely laid out[4]

[1] https://graphql.org/learn/serving-over-http/
[2] https://graphql.org/learn/
[3] https://graphql.org/learn/queries/#fields
[4] https://graphql.org/learn/queries/#variables
First i must correct terminology: The OP got the terms "upcast" and "downcast" the wrong way around. Assigning something to a more general variable is an upcast, rediscovering something derived needs a downcast. Upcasts are absolutely fundamental and always automatic in object oriented languages, downcast are possible at least in C++, but considered as bad style.

MAKE_UNIQUE & MAKE_SHARED

The first problem discussed stems from a misunderstanding of the function make_unique<T>(https://en.cppreference.com/w/cpp/memory/unique_ptr/make_uni...), which produces always an unique_pointer owning an object of type T, no matter what.
Part of the story is, that the class "Animal", has an defaulted copy constructor, this allows implicit conversion, which is considered as bad style. To mitigate i would suggest, to use the keyword "explicit" whenever possible, I have learned that it helps to prevent many, many surprises.

CAST TO A REFERENCE

This example program terminates surprisingly due to an unhandled "std::runtime_error" exception thrown from the Dog::breed() method. The reason is, that the auto type specifier uses function template type deduction rules, therefore in this case

const Animal& animal
...
auto dog = dynamic_cast<const Dog&>(animal);

the variable "dog" is deduced to have the type "Dog". This again happens unnoticed, since the class "Animal" implicitely copy constructs from derived classes.

TRICKY SHARED_PTR LAMBDA

A smart_ptr manages two(!) pointers of possibly different type and value, the "managed" pointer, which is shared by all instances and an additional "owned" pointer, private to every object instance. The owned pointer can be manipulated privately with the reset() method and will be referenced by the -> operator. Hence the difference in behaviour if a copy or a reference of the original shared pointer is made.
Who is sticking labels on whom?

They give a lot of context, go into details in the next episode and have also later Becca Lewis on the show to discuss some more about the Weinstein Brothers.

I found it quite interesting, to shed light on their claims from another perspective.

They didn’t go into name calling or labelling anybody.
"The infectious dose of COVID is not known"

You could have stopped there.
Expected, I suppose. But it's still surreal to me that I'd need rows of full rack servers I used to install 25 years ago just to equal the core count here. Many, many, more rows to get anywhere near the capability.

I suppose it's more surreal than comparisons I made back then because there's very little difference, really, in the operating system and popular languages.
Gmail works with the List-Unsubscribe email header. I don't think it will be too much work to create a Thunderbird addon with similar functionality.
That is still not my problem as a site owner.
Gmail offers to unsubscribe when you mark the mail as spam.

This is super convenient when you have ten or more "newsletters" you want to unsubscribe from simultaneously.
What about shady services that won't unsubscribe your email even if you do it from their admin panel or just outright doesn't work? What about services that provide a really complicated unsubscribtion procedure, e.g. enter password, fill multi-page quiz why you are leaving, wait up to 24h for some code that you will have no idea where to enter. And finally, I suspect there are just plain evil "services" that after unsubscribing will put up your email on various spam lists - have fun with even more spam.

Good behaving email marketing services are not the problem, I would gladly pay for a service that deals with those shady ones and maybe even helps to battle spambots on a global scale, by reporting spam to appropriate authorities and even using GDPR laws to stop them. Tried using spamcop once, but most reports end up "nulled" and not actually reported.
Nomadic identity, brought to you by Hubzilla
The thing is you'll be the one inconvenienced.

Let's say you often buy on Amazon (or any other online shop), they send you a newsletter. If you mark it as spam instead of unsubscribing, you could be losing some of their emails you'd want to see (order confirmation, response to a message you sent them, etc).
My experience with startups has been that "tech debt" is more the result of people not knowing what they were doing. Not so much "we haven't quite found market fit and need to try different segments" but technical incompetence. This is because startups tend to be cash-strapped, so either you have non-technical people basically learning to code on the job or they hire very junior developers.

For example one bit of advice I've heard is that things like unit tests and a CI pipeline are a luxury for early-stage startups. An experienced developer would probably spend a day or two setting things up with, say, Heroku and a Gitlab pipeline, and at least write some unit tests for core business functionality and a few tripwire tests for the HTTP endpoints. They've done the same thing a few times and could probably just pull in a starter template for 80% of that work. Very little time spent with zero impact on velocity but lays a good foundation for later.

Another junior dev tell is getting power hungry with the freedom of a greenfield project. For example, rather than going with the boring but stable PHP framework they used at the last company, they want to do all the cool things like serverless or JS framework du jour or Kubernetes or GraphQL, depending on whatever Medium or Hacker News post they last read. An experienced dev will use "boring" technology they are familiar with as much as possible, and adopt or write new tech when there is an explicit need. For example, if your startup's secret sauce is an ML algorithm connected to an HTTP API and web app, you want to focus on that ML algorithm and tweaking and optimizing that, not figuring out how to get authentication to work with your serverless/graphql/svelte cool stack.
That's genius pricing. Would it work? Like gym memberships, mostly they would probably just be unused, improving profitability.
Apple Mail parses the unscribe link and offers an unscribe button on the top of the message. That's easier than a forward and not yet another service.
Nice idea!

The 'privacy' section is a bit too vague. Sure, you aren't selling my data, but what are you doing with it? What happens to the emails you receive - are they archived or stored, or do you delete them? How secure are they kept?

These messages could have lots of private data in them, even simple things like usernames might be of value to hackers.
What actually happened to memristors? I read about them nearly a decade ago and we still don't have any on the market if I'm not mistaken. How come Intel didn't invest heavily in those?

And why is it only AMD that has a GPU baked into a CPU? Vega graphics are simply amazing and beat Intel's integrated graphics hands down. It's so nice to have only a single chip without buying an extra graphics card.

Unfortunately, AMD isn't very present. I see Intel sponsoring every eSports event out there and handing out i9s as prizes. I'm not tunes into the gamers but I still have the impression they believe Intel reigns supreme...

With RISC-V about to enter the market and AMD beating Intel on benchmarks, Intel better pull a rabbit out of their behind to stay competitive. But that's just a layman's view on the subject.
On the old warrior forum there were WSOs (aka info products sold on a special thread) about how to sell WSOs. Since WSOs themselves are about how to make money, they were selling a book on how to make money by selling books on how to make money!
The thing is that if infinite cores each perform 1 distinct step, the entire computer does infinitely many steps in one step. You cannot simulate this with a turing machine in finitely many steps.

The problem is though, that even if each core has a distinct id, infinite cores can only perform distinct steps if the memory model uses unbounded cells. Otherwise almost all cores would do the same step.
1 year for $10-$20. Something I can give to the people who claim to "always be busy."
That would mean you would need to make the study participants be unable to tell whether they are in the treatment group or in the control group. So either you design food that looks, smells and tastes like normal food but had only 10% of the calories. But that's what the diet industry is trying already and they are not really succeeding. Or you make everybody think they are fasting but give the control group all the nuitrition via IV while the treatment group only gets water with a bit of salt. Or a mix of these two. But then this will only give you actual calorie intake as parameter you are investigating. That's quite different from actual fasting though, i.e., empty intestines could play a role, no matter calorie intake. Or the type of food you are ingesting, i.e., when fasting you don't ingest "bad" food, but maybe you'd get the same effet by just avoiding the "bad" food. In other words, this is really hard.

But then, why does it matter? If it works, why do you care if it's placebo effect or not? As long as you can't (believably) fake it, you could not exploit just the placebo effect anyway.

In other words, the harder a double blind study is, the less useful is the knowledge about whether something is placebo effect or not. Those two effects are different consequences of the same phenomenon.
I see this sentiment a lot in the Go community. I think it is reasonable in some cases, but there are many use cases (vanilla CRUD web apps) where a web framework is really helpful.

The standard library is very low level. Want sessions? DIY. Want user auth? DIY. Want CSRF protection? DIY. The list goes on.

It feels like a waste of time implementing these "solved problems" from scratch, but the biggest problem is how easy it is to introduce security vulnerabilities when implementing from scratch, or forgetting to do so.

It’s nice to learn concepts from first principals by using the standard library. But once I know how these things work, I’d rather rely on someone else’s battle tested code and best practices.

Yes, you can add in separate libraries to solve these specific problems, but they are less likely to compose as well as they would in a framework. On top of this, each time you pull in a new library you have to spend time evaluating it. When I use a framework I don't have to think.
I've never understood why browsers didn't show the SSL Common Name or other agreed upon identifier, in place of a little lock. Why do I have to click 4 times in Firefox Linux Desktop, just to see info on the cert?

So this is perhaps why there is no EV or OV differentiation. Who cares? Of what use is an EV cert, if no one even checks the name. Or further, knows if the bank (for example) uses that CA?

I think in such a context, 'green' and 'no-green' is just non-helpful to validate anything. Sadly, 1 person out of 1000? actually care about encryption, or even know what SSL is. Maybe only 1 out of 10000 know about EV.

Sometimes I just become sad, when I think of the lack of general knowledge about fairly important things.
My working assumption is that it's standard government reactionary stuff, hurr durr need more data to make my job easy
As we are aware that we are starving (hungry), you would need to make patients unconscious. But that seems possible to me.

Edit: I meant possible :)
Lightning Pool Is Open for Business: Lease Liquidity, Earn Returns, Stack Sats
> The reason we don't use them beyond toy examples, is that they don't scale when things start getting hard and something like IIS, ngix or similar is called into action.

Hmm? You seem to be mixing two things here. Nobody is suggesting not using NGINX/Caddy etc. The comment was about being able to go very far with just the standard library.
> Remember what "RPG" used to mean in the 90s?

It meant the same as now. We do have sub genres like "Action RPG" or "with RPG elements", we don't call any game with RPG elements RPG's.

So instead of calling any game with permadeath "roguelike" why not just say it has permadeath? Would cause less confusion.
For JavaScript programmers.
That's a fair point. I added an update to the Privacy section. I really don't care about these spam emails, plus Gsuite only offers 30 GB for the plan I purchased. After processing, the emails will be sent to Gmail's trash, which is cleared every 30 days.
Interesting Nietzsche paragraph on commercialism:

Fundamental idea of a commercial culture. - Today one can see coming into existence the culture of a society of which commerce is as much the soul as personal contest was with the ancient Greeks and as war, victory and justice were for the Romans. The man engaged in commerce understands how to appraise everything without having made it, and to appraise it according to the needs of the consumer, not according to his own needs; "who and how many will consume this?" is his questions of questions. This type of appraisal he then applies instinctively and all the time: he applies it to everything, and thus also to the production of the arts and sciences, of thinkers, scholars, artists, statesmen, peoples and parties, of the entire age: in regard to everything that is made he inquires after supply and demand in order to determine the value of a thing in his own eyes. This becomes the character of an entire culture, thought through in the minutest and subtlest detail and imprinted in every will and every faculty: it is this of which you men of the coming century will be proud... – Nietzsche, Daybreak, 1880-1
I came in to say this as well! I first played hack on my friend’s actual IBM PC with 2 5.25” disk drives back in 1985 I think. I was addicted and the only reason I begged my parents for a computer was so that I could play hack.

My friend’s floppy disk of hack got corrupt so whenever he read a scroll of identify the game would crash. So he ended up finishing the game without ever reading a scroll of identify, which I admit is quite impressive.

I just played a game of nethack tonight after my family went to sleep!
For those curious about IRDC, here are the recordings of the 2015 edition:

https://www.twitch.tv/irdc_usa/videos
Every time I am reminded of that book I become more and more convinced that humanities people are not fully sentient but are in fact advanced Markov chains.
I've spent some time to find a way to turn my twitter timeline into an RSS feed. It seemed like a lot of work to me. Which approach do you favor?

It's relatively easy find solutions to produce RSS feeds from individual twitter users, but I'd like to read my whole timeline in the RSS reader. There's one tool called [twitter-to-rss](https://github.com/ankitshekhawat/twitter-to-rss), but I haven't tried it and it might be outdated.
By the same author from 2017: https://newhumanist.org.uk/articles/5258/what-the-stoics-did...

Discussed at the time: https://news.ycombinator.com/item?id=15799592
When you are a bank or a crypto exchange, that might make sense. When you are the municipality of a village in rural India or the company that handles all vehicle registrations, it does not.

You cannot gatekeep with such sweeping statements. People have old phones for lots of reasons. Others will have to serve those people for lots of other reasons.
Just filter all those mail into a unsubscribe folder instead of marking them as read.

Also filter all emails with unsubscribe in their body to that folder. Works like a charm.
Penta CPO here.
The DATEV topic won’t be a blocker anymore very shortly :)
Very happy to chat further or help you get set up!
Look inside iPad Pro 11s Lidar Scanner
Speaking of spying on the populace, does anyone know why Palantir stock is on a tear for the past couple of days? There's nothing publicly known that would cause this. Is the new administration planning to tighten the bolts / expand the police state?
I can’t imagine any way a reverse proxy would generate a 404 or indeed any 4xx error within itself. Any such error would be coming from the upstream application server.

If the API itself was not found that’s one of 502, 503 or 504.

200 responses with an error property is an antipattern precisely because of things like reverse proxies. They have no way to unpack and interpret every developers pet error format. They _do_ understand http status codes and can act accordingly, like retrying requests, not caching responses, etc as appropriate.
The site says emails are manually processed and a comment here by the poster [1] states that they pay $15/hr for someone to do it.

I agree that the value isn't there for the pricing, especially as a monthly subscription. $5/month is too expensive considering most people won't even pay that to read content they actually want. All major email providers have spam/unsubscribe buttons already and I don't want to risk forwarding emails to someone else to reveal even more data.

If this was more like a global unsubscribe service that removed me from all major email lists somehow, or helped with other privacy/data cleanup then it might be worth a one-time fee.

1. https://news.ycombinator.com/item?id=25013979