skysight-inc/HackerNews huggingface dataset:
I wonder where the phrase “rolling cipher” actually comes from. Did the RIAA just make it up?
There is no implicit social contract on the web that we trade privacy for free access.

Someone doesn't want to pay to read your blog, what do you do? Allow shady third parties to install trackers on your readers' browsers to monitor what they are doing, without them really knowing nor understanding the long term consequences? I don't know about that...
> It's closer to your neighbour selling you the rights to park in their garden, then you selling those rights to someone else. Far from a criminal, arrestable offence, so their point on the broad-brush of being "illegal" stands.

That's a good analogy, but perhaps not for the reason you think. In many situations where you acquire property rights from an owner, there are clauses which restrict or limit sub-leasing to a third party, or using the land for commercial gain. If I was doing what you are describing, I would want to read the lease or agreement very carefully to see whether I am allowed to do that.

Again, I think the developer acted in good faith, but it seems a bit naive to resell something for profit (no matter how small) without seeking legal advice, or at very least reading the T&Cs. We also cannot accuse the government of setting arbitrary restrictions - ticket touting is a problem, even if the government probably could have done more to make it easier for people to buy tickets legitimately.
> Resisting GUI's is not a good idea.

I disagree. In my personal experience, learning git took a lot of trial and error, but now whatever terminal I sit down in front of, I know exactly which commands I have to run to do what I want in git. When using a GUI, it's fine for the easy/common stuff, but if I want to do something more complex I have to figure out how to dig through the options provided by the tool to get the result I want.
Cybersecurity Defenses for IIoT
Fantastic read! As a long term fan of RF, a lot of things immediately clicked and made sense. It's also a great new direction compared to SHAP-style explanations which most of the industry is using at the moment.

I'm excited to play with the code.
Some laptop manufactures want to be as successful as Apple and copying some of Macbook's features, such as soldered RAM, CPU and hard drive. But for some reason it just doesn't help. Instead, they should invest in display and trackpad and everyone will forgive such downsides as: extra thickness; maybe less "industrial" design; ports other than USB-C; keyboard keys that don't stick
I want to sum up the most important facts:

I. An additional desktop will be created. The Windows Explorer (WE) will be opened on this desktop. Afterwards, the command will be inserted into its input box and confirmed for execution by sending corresponding Windows Messages. The victim will NOT see a CMD or any up popping window due to all these actions do not happened on the victim's current desktop.

II. Phantom Malware splits up its malicious actions into a sequence of non-malicious SendMessage WinAPI calls. (see VI. ANALYSIS → A. FAILURE OF ANTI-VIRUS SOFTWARE).

III. The WE is a preinstalled file manager and a fundamental part of the desktop environment of Windows, which makes this process trustworthy. Due to inserting and confirming a malicious command in the WE's input box, this trusted system process is manipulated to execute the command. Antivirus software will not block actions of a trusted system because it is considered bad practice. Besides, the operating system including modules of anti-virus software, such as behavior blockers, are fooled into perceiving that the user themselves has done the command insertion and its confirmation. In other words, it mistakenly looks like the execution of the malicious command has a legit basis with the user having intended the execution. (quoted form IX. CONCLUSION)
1. This isn't currently possible. It would require git to track the staging area for each commmit and branch.

2. See 1.

3. `git pull` by definition conducts a fetch because it Incorporates changes from a remote repository into the current branch.

4. Use `git config push.default current`.

5. Use `git branch --no-track new existing`.

6. I assume this is something to do with the reflog.
> And native toolkits are still a thing. Gtk for linux for example.

You mean Qt?
Can you articulate precisely the problem you believe this will solve? From my perspective it seems like it’s just making the system more fragile and harder to fix since DNSSEC requires OS updates to improve, while not meaningfully preventing state-level attacks.
We deal with this via code review. Anything with such files is going to get instantly rejected. And people soon learn not to do it.
Curious if someone just cloned Trello, could roughly offer what they offer scale wise. But said "we don't store any of your data". Not sure how, maybe encrypted at rest so it's not possible for them to gleam info... Would that still be profitable somehow? Not sure if data storing is where most of the money comes from, specifically Trello. I use Trello too now having doubts if I should detail out aspects of my life.

Admittedly I have built my own note-taking type apps however can't deny the interface of Trello so convenient.
This is a silly, long-form article that attempts to blame lack of mask-wearing on killing an 86 year-old man.

Corona is a highly-contagious disease. Everybody in the US who doesn't have a successful vaccination will get it, mask or no mask.

And this guy wasn't immortal - he would have died of another cause sooner rather than later. There's worse things than dying, like being in pain, immobile or vegetative.

I had to confront these life and death issues when my father was about the same age and had blood cancer for 2 years. At that age, there's no "getting better" - their time is just up. I was fortunate to have plenty of time to process his death, but in the end, nobody gets out alive.

Wanting a relative to live with serious illness beyond their 80's or 90's is not about them, it's about you.
Their API allows CORS requests from everywhere, what do they need to "step up"?
> Alice should either host her photos on Instagram, or learn how to run letsencrypt.

Both leading to further centralisation of the Internet.

> by providing installers to inject CAs into system cert stores

That's already pointless on Android, user-installed CAs are ignored by default unless an app developer opts in to using them.

Once we go down this path there's no turning back to the user-centric Web of the 1990s / 2000s
I disagree.

Your workflow should be pretty simple.

Go to a feature branch, make changes, add/commit changes, push up the branch, ask for a review, merge the request. This workflow is independent of the technology and can be implemented by git or anything else. There's a handful of commands involved.

When you're newer and make more mistakes, or if have more advanced needs, you can use other commands like rebase, reset, cherry-pick, bisect, etc.

Git is far simpler than the algorithmic crap we get whiteboarded on, or maintaining a complex web app.
Wait what? How come nobody told me about gitk.
Sometimes a setup like that is the best setup possible, no ambitious team trying to make their mark by replacing something that doesn't require replacing or that they can't replace well enough. I doubt that JavaFX would have more impact if they put a team of dozens on it (or, shudder, hundreds) but they would surely make life harder for those who still build on FX. A larger team might have already declared javaFX dead entirely, urging everyone to port to some exciting new javaFY and losing many of the remaining users in the process, without attracting any new ones. Arguably Swing to FX was already a bit like that.
Actually I'm using 3 browsers on my Linux PC:

- Links2 (in graphics mode) — main, for fully no-JS browsing;

- Pale Moon* (in Private mode) — main, for browsing w/ & w/o JS;

- Firefox — for curious reasons if target website is not working in Links2 & Pale Moon.

In last year I used Firefox maybe twice, as Links2 & Pale Moon.

As for Android mobile:

- Termux app + Links2 (in non-graphics mode) — main for fully no-JS browsing;

- Prvacy Browser — main, for browsing w/ & w/o JS;

- DuckDuckGo Browser — for curious reasons if target website is not working in Termux/Links2 & Privacy Browser.

P.S. In conclusion, happy to see Firefox is still growing, but every release just brings many "hardcoded" features that, as for me, should not be "hardcoded" in free & open-source browser.
For snapshots use backups. Git is not a backup.

For the questions, what's bad with quick help on SO? It's maybe less effective than reading the documentation that ships with git itself but for sure much more popular and less to read.

Git truly is a command-line utility, little known is that it ships with more than one gui in the base package out of the box. handling the staging area with git gui for example is straight forward unless you have more than 5000 unstaged files, then the gui informs you about it's limit and mass handling is far easier on the command-line anyway.
Isn't this SSL offloading and done by companies to introspect the traffic?
Data Labeling Using Weak Supervision: In Action
You really don't. I interact with "common people" every single day and they couldn't give less of a shit how the UI looks as long as they can do their job or whatever it is they need the program for.

The people who care about "looks good" are managers and designers because they never actually have to use the damned thing.
Depends on the client. Firefox doesn't support a fallback and tries unencrypted or fails depending on how you configured it. AdGuard Home can use fallbacks so you can run a local instance and point Firefox there. Some providers supply fallbacks (https://1.1.1.1/dns-query and https://1.0.0.1/dns-query for example).
I find your position on what classifies someone an extremist to be itself extremist.

That is the crux of our disagreement, which I doubt we’ll resolve over an internet text interaction.

Thank you for the conversation thus far. Maybe we’ll resume it if we happen to ever meet.
Thanks for the :-) makes me feel like we're not having an argument any more.

As an engineer you should also know, that often assumptions are all you've got to go on. The only way to address uncertainty is to get into the details and figure out what's going on. Complaining loudly and fruitlessly about things is good for getting emotional support but it's not generally a good strategy for getting things done.
> >How do I delete a branch?

> and then I have to ask them:

> > Well, what do you want to do? Do you wanna delete a local branch, and then just get it recreated when you pull again from the same remote? Or delete the remote tracking branch? Or delete the remote branch?

I struggle to think of a reason why you would want to delete a remote tracking branch only. Maybe as part of a bulk cleanup if your tab complete list gets too cluttered and you want to remove ones that don't exist on the server, but that's an advanced topic.

So for most users, it's "Do you want to delete your copy or the server's copy"? This is just the kind of user focused language that the author highlights as simple and complains git makes it hard to think about.

The git UI sucks. I'd rather we were in a world where mercurial won for that reason alone. But it didn't, and I gave up that argument years ago. But the example given feels more about DVCS in general, which removing the distributed part feels like throwing out the baby with the bathwater.
Linux user here. I definitely heard good things about Alfred.
HTTPS is brittle.

HTTP is insecure, but will run forever.

This move will literally kill the old web.
This is great. Producing lists like this that are good & useful is not easy: what you've done by focusing on threat intel (instead of broad/generic "security" heading) seems a very good approach.
There is power imbalance there. Even if they agree with it, what you can do with their private data is not the same as what they can do with yours.
Buying a House During Covid
Have been using HTTPS Everywhere from some time. The worst are sites which have https but not configured properly - cert for wrong domain or expired.
> It's not "yellow peril" or "Orientalism" to criticise China or its foreign policy.

I did not use "yellow peril" or "orientalism", I used "ignorance". I'm not opposed to criticism of China or it's foreign policy, I'm opposed to getting the facts wrong.

You say that "no power is doing anything of substance about China expanding and laying a tacit claim out to the nine dash line", which I assume means you are ignorant of the many cases of other countries' coast guards attacking Chinese fishing boats (as linked in other comments), Vietnam subsidizing fishers specifically for fishing in Chinese-controlled but Vietnamese-claimed waters (as mentioned in the article) or the US Navy's "freedom of navigation" operations (also mentioned in the article).

There's a narrative circulating in right-wing Chinese blogs that the US plans to use its network of military bases and client states across the western Pacific to neutralize the Chinese fleet while simultaneously launching a land-based invasion across the Korean peninsula and amphibious assaults all along the coast. Hopefully you realize that that's quite an absurd scenario and just a transparent excuse to call for greater military spending.

Similarly, it's absurd to claim that there's no opposition to Chinese expansionism, while the overall media consensus is one of opposition and there are many instances where such opposition manifested as actual physical violence.

Talking up how strong your enemies are and how no one can stop them is one of the oldest tricks in the military propaganda book. Julius Caesar wrote about how strong and dangerous the Gauls were before he went and conquered all of their territory.
https://github.com/signalapp/Signal-Desktop/issues/530

Signal still has usability annoyances, like this one where they decided to remove the UI for creating and leaving group chats from the desktop version in an impulse half a decade ago, and have refused to add it back again since.
Police officer isn’t even top 10 dangerous job in this country. I hate when people use that excuse for them flagrantly shooting somebody or their pet. Police training is the first place we can improve. Changing their mentality from a warrior to a guardian also does wonders in lowering use of force. There are real world solutions to this problem but almost half the country think those who got shot by police probably deserved it. Almost the same crowd protests wearing masks as stepping on their liberties. Absolutely illogical.
> Which means you need to implement OS native interop (for multiple DE's in linux perhaps), accessibility for screen readers and you need to be smart with your rendering because having a function called 60+ times a second is a surprisingly big foot gun. All this across 2-3 very different (and currently diverging) operating systems.

Yes, you have to do all of that, and I never said it was an easy task. That is, it's relatively easy compared to the web. This task is close to impossible on the web, especially if you want decent performance.
Probably the biggest problem with the git interface is that the interface exposed to the user isn't sufficiently abstracted from the implementation.

Insanely complicated commands to undo things are one symptom of this.

As a user, you want to "save" some code and you also want to "share" it with others. You also want a historical record of what you did.

But obviously you will occasionally save and share things you didn't mean to. Like your Python virtual environment, like a bunch of pictures in their binary format, etc.

A sane version control would provide a point-and-click way to make these disappear from history (though with adequate security protections to make sure that only authorized people can do it).
The objects are still there even with a rebase flow, it's not as if github does a gc every push?
Airbnb often is more expensive than hotels.

But yes, for an entire house for a group of 4 - 6 people, it's great.
You really believe that git stores -- in full -- every version of a tracked file? Every commit that deletes the whitespace from an otherwise empty line in a 30KB file is another 30KB of hard drive space gone?
It's old and created as internal software. And then it kept backwards compatibility with the plugins, so it was frozen in time circa 2005 :-)
I've known a few people (including myself) who have casually thought about what it would take to write a new browser engine. Obviously it's a titanic undertaking and unrealistic project but one thing I considered recently:

There are a ton of new API's the browser has added since HTML5 giving all sorts of capabilities. Hell, Chrome can access USB devices on your host if you allow it permissions.

But is there a canonical list of all standardized web API's somewhere? Something that a browser engine developer could look at to decide what API's are must haves and what are optional.
That's true, but starting the question on that basis and also framing the question around it is important.

The public / audience of the debate need to be constantly reminded that these rules apply to them as well and they need to ask themselves, what am I comfortable with living under? Do I trust this administration? The current law enforcement? Forever? What could they do to me or my family if we suddenly become persona non grata?

To be honest even under this system people can reason that this is just giving the police etc powers, so even then their "privacy" isn't really at risk.

They aren't necessarily thinking that:

- data can be leaked

- data could be sold

- you can get malicious officers

- the data can be used for other purposes

- etc

These are the other parts of the conversation that need to also be thought about because otherwise this is just another security blanket.
If you want simple and intuitive interface, then use Source Safe. If you want your team to be performant, then you have to deal with the complexity of parallel work and merges, where git shines.

Ask your manager, which problem is the problem for him.
Oh, you're right! Thank you very much, I already fixed it! Thanks!
> Fair access is not provided by the official website. When one clicks "Book" and then suddenly get an Internal Server Error in network logs (while UI shows in-progress icon) or gets logged out - where is Fair Access? If Railways gave 10 Rs for each such failure, they will go bankrupt within 2 hours. First-come-first-serve does not mean fair access when they can't fix their technical problems.

I am not sure if you know the history of IRCTC and why it is slow (at times. Things have vastly improved in the last decade). People have asked this many a times and their explanation does make some sense, that if IRCTC is super fast and efficient, then people with cash to spare/with computers and good internet access will hog all the tickets, denying people in rural areas a fair opportunity to purchase tickets. That is still probably true in 2020, because a good chunk of Indians in rural areas either do not have good internet connectivity, lack digital means of payment or are simply flummoxed by the online process.

From your perspective, IRCTC is not fair access because the servers slow down but from the govt perspective, fair access is not limited to only IRCTC users. There might be an argument that railways has a low capacity overall and that there is a long way to go for efficiency improvements etc but given my experience over last 12 years, the experience has improved drastically. Wait times have gone down considerably on a lot of trains, you no longer have to plan your travel 6 months in advance, you can buy tatkal tickets without paying scalpers etc. In 2018 I could even book tickets (from home) on a train which had already departed from its source station (my departure point was halfway between the origin and destination) and people around me did not believe that this was possible.
> Why can't there be an equivalent of stash that keeps track of which parts were added and which weren't?

But git stash does keep track of what it added?

> If switching branches wouldn't conflict with my current change, why do I have to stash/checkout/unstash instead of just doing it?

If your current changes apply to files which haven't changed between said branches, you don't need to stash your changes when switching between them.

> Why can't I pull without fetching?

The command for that is `git merge`.

> Why will none of the 5 or so push configurations just do "push the current branch to the branch of the same name on the remote"?

The command for that is `git push origin HEAD`.

> Why is there no way to stop git from setting master as the upstream every time I do git checkout -b myfeature origin/master?

The option for that is `--no-track`.

> Why do I have to detach from a branch before deleting it?

Because the `git branch` command never changes the working tree, which in this case uses the branch name to identify its location. If the branch were to be deleted without first detaching (or switching to a different branch), stuff would break.
Yeah this is highly prevalent in the game botting industry. A lot of games these days have detection mechanisms if you access memory directly and change anything, or hook their functions. A friend of mine tried to drag me into game botting/farming before, and the supply chain is extremely well developed and professional, I was really surprised.

That being said, I've never written a complete game automation script before because it's a serious pain, it's essentially a super long series of rule based clicking. Is this the same case for your script? Or is there some easier trick? In China you can purchase game automations written by authors through a platform on a weekly subscription basis. It's technically illegal and you often hear stories of police busting some workshop whose been making millions of rmb a year off of them
Cool down and solidify the caldera by extracting heat via geothermal energy use!

/s
I'm not measuring different things. I've used initially the definition that seemed most appropriate to me as you didn't provide any and then the definition you chose. You're now using as an example an unnamed country. With the examples you gave it wasn't true in either of the metrics.
Git is a well designed, well thought out sophisticated tool.

Please read through the first few chapters of the official git tutorial[1]. Once you get the mental model right, git is immensely simple to use.

I highly recommend sticking with the command line.

Github on the other hand, was designed to solve a whole different problem.

FWIW if you're on Linux (unsure about Windows and Mac), I happen to have zsh and oh-my-zsh[2] installed. They add a ton of incredibly useful git aliases. So for example, seeing a tree view of your project is a simple `gloga` command. Helps by not having to remember the equivalent full command that gives you the same result.

[1] https://git-scm.com/book/en/v2

[2] https://ohmyz.sh/
While I generally disagree with what he's saying, I do think that most of his points are understandable, even if not persuasive to me.

Except this one:

>> I will get you to think about a directed graph or as operations on a directed graph

> No human thinks about that!

Well, that's not wrong, people don't usually think like that, but people also don't usually think about possible specimens living in some forest during a hike, or the odds and the reasons why a given storm could become a hurricane when they read about it in the news, or all the most likely reasons why a given body part might be hurting. No, those are thought by zoologists, meteorologists and physicians, respectively.

With that in mind, I see thinking about graphs and other areas more complex of version control as being, similarly, part of the job and the cognitive load of software engineers.

In short: People don't usually think like that, but, in my opinion, thinking like that is part of a software engineer's job, so I don't see an inherent problem with that.