skysight-inc/HackerNews huggingface dataset:
Read the footnotes. It was an internally produced joke.
That's so true. For big corps thats just game of money, a channel for more revenue and VP of products to shine/brag about it in next quarterly meeting.
His wikipedia entry, which has no doubt had the usual battles over sources and bias, reports:

> His foreign policies were centred on anti-imperialism, with his government eschewing all foreign aid, pushing for odious debt reduction, nationalising all land and mineral wealth and averting the power and influence of the International Monetary Fund and World Bank. His domestic policies were focused on preventing famine with agrarian self-sufficiency and land reform, prioritising education with a nationwide literacy campaign and promoting public health by vaccinating 2.5 million children against meningitis, yellow fever and measles

> Other components of his national agenda included planting over 10 million trees to combat the growing desertification of the Sahel, redistributing land from feudal landlords to peasants, suspending rural poll taxes and domestic rents and establishing a road and railway construction programme. On the local level, Sankara called on every village to build a medical dispensary and had over 350 communities build schools with their own labour. Moreover, he outlawed female genital mutilation, forced marriages and polygamy. He appointed women to high governmental positions and encouraged them to work outside the home and stay in school, even if pregnant. Sankara encouraged the prosecution of officials accused of corruption, counter-revolutionaries and "lazy workers" in Popular Revolutionary Tribunals. As an admirer of the Cuban Revolution, Sankara set up Cuban-style Committees for the Defense of the Revolution. Such programs led to criticism by Amnesty International and other non-governmental organizations for violations of human rights, including extrajudicial executions and arbitrary detentions of political opponents.

So large improvements in material conditions for an extremely poor country - but at the expense of political freedom.

> Have you looked at the track record of military coup d'états in history

As so often in history, those who come to power by violence leave it by violence; he was assassinated.
Dynamic realtime-images generator in Go
With password storing, you want to cover your ass. One way to do it is follow guidelines of known authority, e.g. NIST or OWASP.

OWASP has nice document: https://cheatsheetseries.owasp.org/cheatsheets/Password_Stor...

It boils down to this:

> Bcrypt is the most widely supported of the algorithms and should be the default choice unless there are specific requirements for PBKDF2, or appropriate knowledge to tune Argon2.
> And BASIC is easier to program in than Rust

And Visual Basic is #6 on the TIOBE rankings despite being officially retired whereas Rust is #25

Simplicity sells.

Look at XML vs JSON. XML is feature packed. Arguably the "better" format but JSON has taken over because it's way easier to use.

REST beat SOAP and XML-RPC because it was less complex and waaay easier to build.

When there is something that is easy and even potentially a little simpler than needed which does the same thing as something complex, the simple thing almost always wins - even if - or especially if - its worse. The whole "Worse is Better" mantra has always proven true.

I've said for like 20 years now that they should have just tacked a couple more octets onto IPv4 and rather than trying to reinvent the wheel.

Exhaustion was and still is the most important problem to fix. Get that out of the way, and then we could have fixed the other things wrong with IP one at a time.

We could have been on like IPv12 by now. Small iterative changes are easier to absorb. Adoption would have happened already. instead we threw the baby out with a bath water, classic second system syndrome.
I received one other comment about this while we still had the survey open. I will keep that in mind for the future.
https://news.ycombinator.com/item?id=25270184
The point is that they've had anti-wage practices for years, but that they recently reduced top-level payout. I'm not able to find a year-by-year comparison for pay bands at Google on levels.fyi, so I'm not sure what your point is with that site.

I don't work at Google, so proving that Google specifically is cutting wages isn't something I'm able to do. At the same time, I don't think you need to prove that Google's incentivized to maximize profits. They're a publicly traded company; there will always be motivation for them to reduce costs. If you're in search of proof, the anti-poaching lawsuit[0] is not something to take lightly.

And either way, I don't see you bringing up any strong arguments against collective action. Just because Google might not be doing something to reduce compensation right this second doesn't mean they don't have the power to do that in the future.

[0]:https://www.cnet.com/news/apple-google-others-settle-anti-po...
Quite scary to read. Known poisonous and long lasting chemical substances are used in a very wide range of products.

In the Netherlands all earth movement was temporarily prohibited last year when it was found that many sites had too high concentrations of PFAS. So nearly all soils were considered hazardous material. Of course this was "solved" by changing the threshold of allowed PFAS to something much higher...
I started working on a similar idea, called "Wildcard"... The idea was to create a lower cost alternative to Lego Mindstorms for programming simple robots. So "⬆5" would tell a robot to move forward 5 rotations. The other idea I was playing with was to remove the need to type at a keyboard... instead, a child would have a deck of cards with all the syntax they'd need, then they'd lay out their program out on a table or floor, and then use a camera + computer vision to read in the program.

The idea was if we issued one robot to each child, it would be cheaper to program the robot with a camera and deck of "code cards" than to also have to give budget for giving them a tablet or chromebook, too.

Here's my original proof of concept:
https://www.youtube.com/watch?v=dSOfMSS9aFY

And the code is up on GitHub:
https://github.com/hugs/wildcard
RubyMine: More Distractions (Part 2)
The part I don’t get is why http push wasn’t cache friendly.

The idea of fetching a graph of objects is so common.

All I want to do as a web dev is a browser client requests a tip REST object or an entrypoint js script. When the client receives that, the client can send the object/script back and all the connnected objects back together to avoid multiple round trips.

It makes me sad that this still isn’t a thing (server can reply with more than one cacheable url)

To work around this we invent all sorts of tools like graphql, webpack with layers of complexity.

Sure there is the problem of what if the client already has the resource. Then the answer is the response can optionally send content or just the url. You then have a 2nd roundtrip to fetch the content the browser doesn’t have.

At the end of the day, I just want the browser to essentially rsync-ish a bunch of url/resources from the server.
So you seem to be essentially saying, you think we know pretty much everything already, so it's not productive to continue checking?

Both sides of that are completely false. We have gigantic gaps in basic nutrition knowledge, and the idea that we have a strong idea of all existing important correlations is similarly completely and utterly incorrect.

The idea that flip-flopping is due to a "vast marketing machine" is also completely disingenuous. I'm not talking about pop science articles, I'm talking about disagreement between scientists.

I seriously don't know where people get this idea that human nutrition is this advanced science where we know most of the answers. I can only assume it's wishful thinking? It would be nice if we did... but we really don't. And there's a good reason for it, which is that it's incredibly difficult to ethically perform decades-long controlled experiments with nutrition in people to provide definitive scientific answers, for the obvious reasons.
Until they solve https://svelte.dev/faq#how-do-i-test-svelte-apps and the ecosystem matures a little (Sapper -> svelte) I wouldn't recommend using it for any production applications. I
do currently use it for PoCs since it's easy to spin up and be productive quickly.
The Hate on Ichigo Explored
The whole thing is a spoof, dude. Read the footnotes.
"Can someone explain to me why we have so many programming languages?"

Different strokes for different folks. People are trying to make new things that solve what they think are pain points in previous approaches.

There really isnt "so many" frontend frameworks. React is the clear leader, with Vue and Angular trailing behind. Svelte is a bit more of an experimental/innovative thing.
So she was born at the age of 27. You don't see that everyday.
I learned 相 as 'mutual'. That seems to work for all the listed examples (a stretch for prime minister but I can still see it working) and most of the other words that contain it from a cursory look.
Same on Android 11. There's also an "Only this time" option.
Java and Kotlin on iPhone
This argon2 implementation[0] looks good to me. It uses a native module so it should be fast, and I like the look of the API. It returns the salt and params with the hash in one string, so storing and verifying looks real simple. It appears to be maintained. It has TS type declarations, if you are into that sort of thing.

Here is an scrypt just in JS[1]. It will also run in the browser, if you need to hash client side for some reason. On node, it will use the built in crypto api which IIRC is a wrapper around openSSL so perf should be native. I'm not a big fan of the API, you have to concern yourself with buffers and normalization. Maybe that is important for non-latin alphabets? I don't actually know, I'm too anglo-centric.

Then there is good ol bcrypt[2]. Certainly the most mature, it has been around a while. Like [0], it also uses a native module with node-gyp.

All three support async/await so you can avoid blocking the event loop during expensive hashing operations. I should note I haven't really used any of them. I was just curious so I did some googling.

Based on your criteria, I think [0] fits the bill best. Very hard to forget the salt, as it is generated by default and stored with the hash.

I'm always really curious about other people's code, so I hope you don't mind me asking: I typically use a library/framework that handles details like password hashing. That said, sometimes i like to avoid libs and really understand every aspect. Can I inquire about your stack? Are you using express or koa or anything like that?

[0] https://github.com/ranisalt/node-argon2

[1] https://github.com/ricmoo/scrypt-js

[2] https://github.com/kelektiv/node.bcrypt.js
.NET Fiddle searches for best Star Wars, but instead finds this
It will conk out at rather low clocks as the design is not using as many high frequency tricks such as local clocks, instead going for high efficiency.
But that argument applies to everything we outsource to Asia. There are more critical products during the war time. I'm sure we can live without 3nm processors for a few years if we have to. You just need to have some stockpiles, some emergency manufacturing capacity, and the knowledge to scale up your domestic manufacturing capacity when you don't have a choice.
one of the main annoyances w/ base64 is when you want to it in the context of URLs

https://en.wikipedia.org/wiki/Base64#URL_applications

> Using standard Base64 in URL requires encoding of '+', '/' and '=' characters into special percent-encoded hexadecimal sequences ('+' becomes '%2B', '/' becomes '%2F' and '=' becomes '%3D'), which makes the string unnecessarily longer.
Its not that, its fine for there to be big corps, and for companies to play the game and get money. Its the way that amazon choses to play the game. They are unsportsmanlike, and sometimes downright cheaters.
So basically remove all the funny symbols and the ambiguous characters of the latin alphabet.

The part "Test Vectors" seems to be formatted wrongly.

2NEpo7TZRRrLZSi2U is "Hello World!" and the long stuff probably the fox thingy.

Otherwise it is a good idea in my opinion, didn't know it existed and should perform well.
Yes, scrypt-kdf works great:

const scryptParams = { logN: 15, r: 8, p: 1 };
async function hashPassword(password: string): Promise<string> {
const password_hash: Buffer = await scrypt.kdf(password, scryptParams);
return password_hash.toString("base64");
}
async function verifyPassword(hash, password): Promise<boolean> {
return await scrypt.verify(Buffer.from(hash, "base64"), password);
}
These human-readable encoding systems are nifty, but a higher goal is to design secure systems that don't require humans to read or type (or copy and paste) random strings of bytes.

For techies, occasionally eyeballing a hash as an informal check will continue to be useful, but I can't imagine that confusing 1 and l would ever be an issue in that use case.
This is not the purpose of base58. The main use case for base58 is to avoid human error in similar looking characters ("l" vs I" or "0" vs "O").

As an example, this is used in Bitcoin addresses to ensure you don't accidentally type the wrong characters if copying an address by hand.
When manufacturer was asked about this, they did try to sell organic tomatoes in bulk. But these tomatoes are too soft and usual bulk handling by customers resulted in too much waste.
Basic Anomaly Detection can be done with no support from the database (example: https://towardsdatascience.com/anomaly-detection-with-sql-77...).

But more effective (but still rather simple) models, like using Malahobis Distance, or kNearestNeighbours distance is harder to do efficiently.

One rather mature project for doing ML integrated in SQL databases is Apache Madlib. It has been around since 2015. https://madlib.apache.org/
So there's a bunch of people here saying Argon2, whereas I thought one of the current best recommendations was scrypt. Can someone explain the trade-off between them?

Why would you pick one over the other? Or are both "pretty much fine" for most workloads and a casual user shouldn't worry too much?
OT: Every time I see Timescale on here I'm excited to use it. After some preliminary testing I always run into the same issue: can't create a hypertable if there's a unique index / primary key that doesn't include the 'time' field.

For example my data looks like (row_id, user_id, time, data), where row_id is a unique ID, and time is a non-unique time field. Timescale will refuse to create a hypertable like this because it causes partition issues.
So we have a very successful short messages app, that now resulted in another service to be successful, which combines the short messages into a long format. Innovation and evolution aren't always straightforward I guess!
There are 1,000s of agents and organisms in nature that eat everything around us. Wood is pressure treated to prevent these types of things from happening.

Not to mention oxygen is probably one of the biggest agents that “eats” or oxidizes our world. Water and moisture are catalysts for other life forms to start eating stuff.
The Ryzen 5900x bests the 10900K on price, power usage, single-threaded performance and multi-threaded performance.

https://www.digitaltrends.com/computing/amd-ryzen-5900x-vs-i...
S&P Dow Jones Indices to launch cryptocurrency indexes in 2021
Doctors and hospitals don’t have liability exemption.

I think the point being made is that they will earn a profit, but hide it via accounting tricks (allocating a disproportionate share of drug discovery and admin costs to this project, for example), and have no downside in the form of liability if their vaccine turns out to be not so safe.

I find this concerning.
You wrote: "It is uncanny to follow my own steps, even though they do not divulge any romantic affair, secret meetings, or embarrassing health issues."

Contact tracing addresses that shortcoming of the current surveillance tech. Today, finding out that 2 cell phones have been in proximity requires computationally expensive analytics on the server side. With the apparently mandated requirement for contact tracing, edge devices ("your" phone) will simply detect proximate "ids" and send that to the servers and that trivializes the task of determining your "romantic affair, secret meetings, or embarrassing health issues".
1. People throw trash everywhere. You'll see trash on Mount Everest, you'll see it in a random forest in Eastern Europe.

2. Landfills are not enough. Rich countries just "export" their trash for storage in poor countries.

We're just making too much trash, there's no "proper" or "better". Reduce, reuse, recyle. Recycle is mostly a lie.

We need reduce and reuse.
Keep up the great work!

That said leaf blowers are so loud (make sure everyone around has hearing protection)

Have you considered using a rake to make piles on a tarp?

The tarp is then dragged to your desired composting location and emptied.

I learned this method from my elderly Korean neighbor when I was young and have used it over leaf blowing for the last 20 years.
I think this is the next leap in web UI development on the same level as jQuery, React and Vue.

I've used React, HyperApp and Flutter and Svelte (with Tailwind for CSS) is in my opinion clearly superior. But I also know someone who thinks Flutter is better.
It's the same since at least Android 10, also you can allow one-off permissions as well.
Ah I see you're coming from a webapp developer PoV. In that case, I just wouldn't bother with CSS at all as you've got all the dynamics in your hand anyway to set styles as you please. Except pseudo-classes (even hovers), media queries, transitions/keyframes can't be specified in inline style attributes - just one of the many CSS blunders.

Personally, I'm more interested in HTML as a document format in the original sense. Limited as it is, I just can't fathom the blackout moment where, confronted with a very basic HTML document plus a CSS stylesheet about the same size or more written in a completely different yet redundant syntax, somebody would say "yup, that seems like a reasonable document format for exchanging most of the world's text".

Edit: regarding your scoping requirement, isn't just including the id or class of a component in CSS selectors or, when necessary, sass-like nested CSS rules enough of a scoping mechanism?
Makes me wonder what's going to happen when we have ARM-based desktop computers and gaming rigs.
It could be someone who uses humor as a coping mechanism in stressful situations.

I respond to stressful and/or tragic situations with sardonic/dark/derisive humor. It's a coping mechanism for me. Some people cry. I crack jokes.

Just yesterday I said in a meeting with my boss 'No one wants to touch that project, because the customer gives out negative feedback like cheap halloween candy.'

If I were fired from my job in a way I felt was unfair, I'd probably do something similar.
How We Can Use Fintech to Innovate Venture “Style” Capital
I am an "inverter" and my wife in not. It makes it a challenge to play some games together. We like to play for a life or a level or a room and then hand the controller off. It means that we are constantly resetting the mapping.
Read the authors:

S. Nakamoto, BitCoin

Huh?
Several days ago I favorited this comment, which is a list of authentication vendors and open source projects:

https://news.ycombinator.com/item?id=25212694
This page misses several editions mentioned in other places (at least enterprise and open-source, perhaps more?).

It also doesn't mention which license limitations the "community" edition has, I only found a blog post talking about them https://blog.timescale.com/blog/building-open-source-busines....

I would have expected one place which compares all available options.
The trouble with the GDPR seems to be that it relies on government enforcement.

For example the UK's enforcement arm, the ICO, recently found that the adtech industry was in violation of the GDPR, then did nothing:

https://www.openrightsgroup.org/blog/the-ico-must-fix-the-ad...

As far as I know, I can't personally sue these companies for this, and if the ICO does nothing then what's the law is meaningless.

The follow up from the Open Rights Group is here:

https://www.openrightsgroup.org/blog/parliament-must-hold-th...

If you care about privacy in the UK, please donate to ORG, I started a direct debit years ago and have always been impressed with their work and focus:

https://www.openrightsgroup.org/join/
They are correct for Japanese, probably not so much for Chinese.
Spotify dominating the podcasting market because of a million-plus tiny podcasts
Coal use was common throughout all of recorded history. In Europe it picked up significantly in the 13th century.

As to abandoning energy sources, total amount of wood burned is actually down significantly as agriculture has dominated land usage age. In the Middle Ages for example large tracts of land where devoted to having little forests as a replenishing source of wood, various useful plant species, and wild game.

Less well known energy sources like whale oil and animal dung are also down in absolute terms.
Information Needs: Lessons for Programming Tools [pdf]
I would love recommendations for more serious/less poppy books on the same topics.
Is this true, legally? Can they not accept a demand for resignation and be legally immune from claims of discrimination?

I assume they wanted her out and she accidentally gave them immunity, so they jumped on it.
A good advice: disable background app refreshes if you use an iPhone.
I wonder if there is any verification
Oh, I think I misunderstood your comment. I thought you were referring to third-party auth specifically.

Another option more on the cheaper side would be a library that handles algorithm selection and migration in a "black box" way. I.e. the public interface is only `db.put(user,newPass)`, `db.compare(user,suppliedPass)` and maybe something like `db.doMaintenance()`. You would need to handle storage yourself in that case but I don't see the downside of this when you are storing your users' data anyways. I'm not aware if such a library exists though.
While I agree with you and I am personally an "inverter" I think it is interesting that I don't invert the X axis as would be suggested if it was strictly a lever.
https://outline.com/8AfK3c
> anybody who has an argument for this must be racist

Anybody who believes people of one skin colour should be treated different than people of another is, in my books, a racist. There's no conversation to be had here.