skysight-inc/HackerNews huggingface dataset:
Are VPNs really private? It feels like VPNs are the best way to centralize data about people who are worried about their privacy or have something to hide. How trustful are the most popular VPN companies? In the end, you do run 3rd party software and send all your data through 3rd party servers.
YouTube, the Library of Babel, and Section 230
I have no idea what this is, and it feels like every single page of the website assumes that I do.
Children of MacPaint: SuperPaint and Canvas
Do you really? I have been trying to get it to run properly for years for c++ and I found it buggy to the point of uselessness.
Indeed and thus life is hard whether your poor or rich, especially for those who suddenly get mega wealthly or fame. They seem to cant handle it very well from Michael Jackson to Whitney Houston to Tony to many others.

A lot of us I imagine wanted to be in Tony's position, yet would you still want to be him with how it all went down? His mega-wealth and fame of wealth seem to be his un-doing.
Just a tip for those looking at trying out Go (and the author of the post): this repository, https://github.com/golang-standards/project-layout, is NOT an official or standard Go folder structure. It's not necessarily bad, but it shouldn't be seen as Go's default folder structure. Too many newbies have gotten tripped up by the name.
Hundreds of millions of Android users exposed to hack due to CVE-2020-8913
AWS is several versions behind, and only supports a limited number of plug-ins and does not allow custom plug-ins.
Both algos will crash if the target is not on the list, so both are equally bad :)
Any one know of any datasets for pavement/sidewalk based robots?
I stopped reading at "would-be dictators like Trump".
The most difficult part is the backbone, not the software. The internet's power comes from its large scale and resilience, bypassing censorship and copyright is just a side effect. WiFi Dabba's [0] approach is quite interesting but I am not sure whether it will scale well in practice. Optical communications through free space generally requires line of sight and the bandwidth is low due to atmospheric losses. Broadcasting across oceans is another issue, especially when sovereignty is involved.

[0] https://news.ycombinator.com/item?id=24790350
Before the pandemic, it always seemed like in-person proctoring rooms would be more practical. There are just too many ways I could arrange for outside help in my home environment. Maybe a bag search and a bunch of Faraday cages at the county fairgrounds?
You are of course correct that the CA was announced then, but the news article was also about the fact that Let’s Encrypt had just turned five years old on the day that the article was published, and was a look back at what they have achieved over the last five years as well as looking to the future.

It was also noteworthy that they are moving to ECDSA and have reduced the length of their certificate names to save bytes (packets) in the initial TLS connection.
Whichever group has the highest number of votes during the 2024 election!
The following bit from the documentation [0] ("step 2") is a bit strange:

> A good practice is to create and test your LAMBDA function in a cell to make sure it works correctly, including the definition and the passing of parameters. To avoid the #CALC! error, add a call to the LAMBDA function to immediately return the result:

> =LAMBDA function ([parameter1, parameter2, ...],calculation) (function call)

> The following example returns a value of 2.

> =LAMBDA(number, number + 1)(1)

> Assuming the LAMBDA function is in cell A1, you can reference the cell that contains the LAMBDA function in the following way:

> =A1(1)

What this seems to say is that (1) you get a #CALC! error when a cell contains a bare =LAMBDA(...) expression, and (2) if the lambda calls itself (doesn't produce a #CALC! error any more), then you can call it with a different argument by referencing the cell containing the self-invocation (the "=A1(1)" example above). This seems like a weird model, because just "=A1" would give you the result of the self-invocation.

Maybe the documentation intends to say that you can do the "=A1(1)" call iff the cell containing the lambda is not a self-invocation (but then shows the #CALC! error)?

[0] https://support.microsoft.com/en-us/office/lambda-function-b...
What History Can Teach Us About the Post-Covid Economy
No. Nothing will change in terms of support for Dockerfiles or support for running Docker images. The whole thing is massively overblown.
It's an opensource video game: sauerbraten.org
Sauerbraten has a hugely nostalgic place in my heart. Glad to see it is still being updated
Turns out Sauerbraten is a free multiplayer & singleplayer first person shooter, the successor of a game called Cube. Here is a youtube video of the gameplay https://youtu.be/fX7o-1OH-WM
My Parents still have the same artificial tree from when I was a kid, it has lasted 30+ years.

Here in Australia I think Artificial Trees are the norm, I've never really thought about it before, Possibly because Christmas is in Middle of summer and real trees would be difficult to keep looking fresh.

I always felt a lot of cognitive dissonance around Christmas growing up all the songs and decorations are about snow and winter but the weather here is oppressively hot.
My hardware is unable to run Qubes OS. So I did something else.

I sandbox using different machines and a KVM switch. That limits what domain the potential applications can reach.

Then I use pledge on OpenBSD to further limit what apps can do. This is the default for many apps on OpenBSD and they can't access anything other then the specified directory. Firejail used a few times, but optional security is no security at all. I played around with SELinux, but it seems to overcomplicate it.

The situation seems to be, that OpenBSD is the only system that limits what applications can do by default. Perhaps Linux systems or Mac will limit what apps can do in the future. OpenBSD has often been the first mover. As I get older, the "by default" is the way to go. I'm not a teenager anymore that can spend all afternoon toying around with the kernel configuration or xf86config. Obviously I can't use OpenBSD for everything, so I switch between systems.

Because they are physically different machines, an app can't break out of the VM. You'll want to block SSH though. This is a simple and cheap solution that requires only some discipline about what laptop you use for what and a very messy table (4+ laptops).

The machines will be compromised (pessimist view on security), but at least it would stick into one machine. OpenBSD takes security the most serious on kernel level, but X is still a security circus. The access applications have on default Linux, Windows or Mac is way to much for my liking.
Papers I Love: Gg
I would love it if dang could weigh in on this tough issue. There were a number of people being downvoted asking questions about how this could have happened, and now to see that someone posted the true answer and it was flagged and hidden, that I think reflects poorly on HN and warrants an explanation.

I'll never forget at my first friend's funeral when his mother said during the eulogy "My son was a drug addict." It was so heartbreaking but so important to speak the truth and be open about it in order to pay respect to him and call out for action so that more mom's don't have to make that speech.

She did not bury the truth and "wait out of respect", she confronted it head on. If she can do that and do it in a positive way then I think an Internet forum could do it too. The truth is it seems if it weren't for a few of Tony's friends sharing the whole story, the truth may have been buried and many more may have gone down that path.
I would add to that:

7. Java was easy to learn, compared to languages similar in features, such as C++.

8. Java is easy to debug. No memory corruption, core dumps etc.

9. Tooling: Java IDEs were fantastic! I cannot say the same about C++ IDEs, 20 years later.
How a device (Android, iPhone, Mac and others) do initialize at first boot/system recovery if this CA is not installed?
Ah, yeah. :) My state seems to be doing pretty well, mostly. They break everything up by region and county, so they can monitor available beds, new cases, new hospitalizations, etc. They are doing contact tracing so as they change the rules I assume they are using that data to make sure the rules actually are affecting the places where people are getting infected. So far, the hospitals aren’t getting overwhelmed so it looks like they are doing it right.
They've deeply weakened .net as it was always second fiddle - now there are more specific/relevant second fiddles to choose from.

Good .com's are worth much, much more now (e.g. Voice.com sold for $30 million USD recently).

I think some of the shady behavior from the new extension registries (they seem to hold back every decent name as a "premium") really hurt their adoption.
Yeah, many “Christmas tree” species can grow in highly acidic soil that’s otherwise only good for blueberries, which are tasty, but usually not much else.

At the end of the Christmas season, you can still compost the tree or turn it into wood chips.
Are you using a mobile processor to keep the thermals down? Or underclocking a desktop-class processor and using a giant heat sink?
Goodness I played this game for YEARS and ever since I drop in every few years to check it out. It's seemed dead for so long, a release coming now makes me eager to jump in again.
also, the subscription was only $5
Worth remembering Private Eye are biased towards insinuating institutional corruption, leading to their support of Wakefield against the pharmas in the MMR scandal.

They are generally good, but they aren't immune from bias and it still pays to be critical.
Vlog bait spam.
Yeah, I think the garbage collection was a big factor. Especially in comparison to C++. JS is not compiled, so the real competition was only C++. Still I would always choose it over Java :D something about the syntax probably...
> There is still a risk to leak the length of the password. If the font is known and the size of the rendered text can be inferred that would limit the search space considerably.

I do a lot of screencast videos and what I typically do is put a black rectangle well past the point where my secret text really ends.

If my secret is:

mysupersecretpassword

You might end up seeing a black bar of:

||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||

What I'm most afraid of is accidentally having literally 1 frame of video where the bar isn't present. This is super easy to do if you're just scrolling through a timeline while editing. You need to really dive in and move frame by frame to ensure you get everything. I usually extend it a few frames in either direction just to be safe too.
> "If your account is in GBP and the destination is in EUR, the bank gets to charge you for the exchange. 2.5% is a typical rate."

2.5% is a rather expensive fee for a GBP-EUR transfer, especially on £10,000! Some banks offer as low as 0.4% (on top of the real mid-market rate), probably even less on large transfers.
Petrovich
Ikea has some loss leaders.

Christmas probably isn’t busy for them since there’s not a lot of real estate turnover in December.

I once ran the numbers for their tealights and I couldn’t even buy bulk wax that cheaply.
Because pixelation doesn't attract attention as much as black box and is therefore a better placeholder. A black box with sharp edges has much more contrast than all the legit elements in the image and becomes visually dominant whereas typically you want to attract attention to something else on the page.

For a similar reason, designers use "lorem ipsum" placeholder text rather than all-white or all-black placeholders when mocking up a layout
Show HN: Squiggle – A Sketch library for making low-fidelity wireframes
got my start programming making "hacks" for sauerbraten maybe 15 years ago. Got a huge kick out of making myself invisible, flying, infinite ammo, etc.

Simpler times..

The feeling of power at such a young age was intoxicating
> It sounds like the fire rated assemblies were not being followed in this case.

The fraud by Celotex and Kingspan is more literal, in this case.

The only assemblies that managed to pass the large scale fire test cheated by using a bunch of nonstandard parts, materials that weren't available on the market, and even put kiln insulation material blocking the temperature sensors on the test rig.

They then truncated any test reports sent to customers, omitting mention of the cheats. It was literally impossible for any customer to build the assembly that had passed fire testing, as they were never told about the cheats.

They then took the reports from these cheated "third party tests" and converted them into certificates from further authorities.

And their manufacturers' marketing departments "misunderstood" the test reports and put out marketing material claiming the material was of limited combustibility - which it was not.
There is no extra layer of indirection.

The idea here is to make the "p" pointer point on the "next" field of the current element instead of at the structure itself. There is the same amount of indirection in both solutions.

The first solution does pointer->structure->pointer, the "elegant" solution does pointer->pointer->structure. The reason the first one may be easier to read is because the C syntax "prefers" it, as it is a more common construct.
I'm sorry, do you mean build the tunnel in an entirely different country?
You seem to be conflating the problem of weak or no pear review (i.e. the reason why paper-mill publications are shitty), with the problem of judging a paper by the author's name and not purely by its content (i.e. what the OP proposed).
This is a Very Hard Problem™. All current music gen is either:

1) obviously algorithmic and pattern/rule based
2a) generated from computational statistics (deep learning) but handpicked to show only the best results, or...
2b) applied to very simplistic musical styles that sound roughly fine no matter what you do (techno, elevator pop, etc.) or...
2c) not handpicked, but exists within a strange "uncanny valley" where you can tell it's not quite right and just feels a little "off" the whole time
I was trying to make something recently, and I couldn't find the source material any more on the web. Luckily I turned to Pirate Bay and bittorrent and found what I needed. I forget how cool those things are.
Speculating about the circumstances of someone's death can be in poor taste even if some of the speculation turns out to be correct.
I like how Lambda means very different things between AWS and Microsoft.

"Let's just create a Lambda for this"

Ok... But which one?
Question for experienced C programmers (I'm not one). The comments for remove_list_entry strike me as fluff, only suitable for a didactic piece.

Would you find the comments in the second version helpful, or should they also be removed?

Edit: let me lay my cards on the table. If the comments really are necessary, it doesn’t seem elegant. I’m pro-comments, but that’s because not all code can be readable and elegant all the time.
I don't think branding was really the issue here. Nore does the semantic weight of Diem vs. Libra really present a significant difference.

The problem has always been that it's an attempt to create an extra-governmental monetary system spearheaded by one of the largest tech companies in the world, in particular one that has a low level of social trust within both the political sphere and the libertarian-privacy-maximalist sphere that represents a cornerstone of crypto support.

For my own opinion, it doesn't matter how independent the oversight group may be from Facebook, it is still a Facebook initiative. Web standards, ostensibly independent, can be subverted by corporate interests. I have no trust that something as foundational to the world economy as a global monetary system would not also be subject to such interests at a fundamental level. Give the ACLU a seat, give the EFF a seat, find a dozen other non-corporate NGO's with a tangential interest in such a project, and I will still not be convinced that the system wouldn't be coopted a plutocratic oligarchy, if not outright kleptocracy. There would simply be too much power and money that would acrue to the "winners".

Whatever the future of crypto may be, it should be shoved forcefully away from such a direction, as well as any direction that makes it easy to facilitate criminal enterprise/money laundering. I freely admit that I don't have a solution that solves that range of problems though.
> There's nothing really practical to replace that artifact at this time if you ask me.

I am required by law to spruik Cloud Native Buildpacks. For most uses, I feel Dockerfiles are not necessary or desirable at this point.

Disclosure: I've been around CNBs for a while for Pivotal and now VMware.
Ask HN: How can I get the equivalent of undergrad phsyics knowlege?
Despite the growth of MOOCS and other online courses, this area seems to be rather lacking (along with mathematics)

Not looking for anything super in depth, but what's the quickest most streamlined way of getting the equivalent knowledge you'd get in a say, engineering program?
Docker compose development was compromised by the agenda of pushing people to use swarm.

This is why v2 features like resource limits were moved under the deploy: key and you have to use the special "--compatibility" flag to get them to work locally.
As I follow it, you're the one arguing it definitely didn't happen, based on one discredited witness, when there's evidence going back decades of abuse by political, military and intelligence figures in children's homes across Britain and Northern Ireland, and cover ups going all the way to the Prime Minister.

And what's the alternative to 1? That the Establishment commits suicide by allowing investigations capable of destroying (all public faith and confidence in) the Establishment? I'd love to know why that would ever happen.
TSLA investment had been the best passive income for me
Sometimes I don’t: I feel overwhelmed, I start to despair and I become very sensitive. Coming back from those times is hard, and sometimes I get into cycles of bad habits that persist for days (or, at the worst of times, weeks).

When I do manage, it’s a mix of things going on.

It helps to follow genetic advice like exercising, staying hydrated, sleeping enough, and not drinking too much. It’s generic advice because it’s pretty universally applicable.

Separating tasks into “must do” vs “want to do” helps keep things from falling through the cracks and makes it easier to prioritize.

I try to be mindful of when I am giving myself leisure time vs demanding performance, and reminding myself (preferably aloud) which mode I am in if I find myself distracted. Speaking of speaking aloud, vocalizing my internal monologue (aka “talking to myself”) helps me debug it, sort of like rubber ducking. I like to declare my goals for the day out loud to myself in my room, and it’s easier to get through hard times and make tough decisions when I talk to myself. I also feel like it improves my memory, though I haven’t measured to confirm.

It helps to work on my relationships with success and failure, and with meaningness. Some days will be failures. Most successes will be modest. Evaluating your self-worth on a day-to-day basis is like day-trading on the stock market, very risky and not the best growth strategy for most people. Warren Buffet’s investing advice is remarkably applicable to life in general.

Being in nature is incredibly healing. I love camping with friends/family, but any outdoor activity is good.

I’m incredibly optimistic about the potential of therapy involving psychedelics and I am a monthly donor to MAPS. Some people may benefit from pursuing similar treatment modalities on their own, though there are inherent risks and of course there is no silver bullet for mental health treatment.
It is not really cheap at all. Freeholds do not trade at a significant premium compared to leaseholds. And for flats, outside of Scotland, there isn't really an option.
Many purchases are virtual goods these days even. Its difficult to understand how anyone could argue that Apple is not exploting this situation, its gross and pretty unethical
>conspiratorial reason,

No, not conspiratorial. People just don't like functional disorders, as they think it means they are weak/crazy/lazy etc. Having recovered from CFS, I have seen this preducice first-hand.

>Let's give credit to the many neurologists on this who know about FND, and many other disorders, and assume that they and the authors probably have considered it.

Unfortunately FND (and functional disorders in general) are very misunderstood by almost everyone, including the authors of this report (they say that vestibular and balance symptoms would be "hallucinations" and are very uncommon, and liken them to schizophrenia).

According to the DanFunD study, the prevalence of functional disorders is about 16% in the general population (which includes all the symptoms being discussed).
You'll never beat the real thing without the smell but if you spend decent money you can buy a convincing looking fake.
A similar method was used to uncover the name of a game mode in a teaser video from nintendo. Since it was a video the pixels would change as things moved and you could reverse the pixelation fairly well.
Good news for a special game. Will definitely hop on to see the improvements and catch a game or two. SB it's a great fast paced game like quake and unreal, in case anyone is wondering.
https://apps.apple.com/us/app/beorg-to-do-list-agenda/id1238...
These functions can be thought of as two steps:

1. Find the thing to update

2. Update it

Linus's version does just that.

But the first version is more complex because step 1 instead emits something that may or may not be the thing to update, and so step 2 has to reason about that. Additionally, it introduces a bookkeeping variable -- cur -- which becomes redundant before step 2 (by which point it's equal to target).

IMO Linus is right here. The form of his solution directly matches the problem and allows you to look at the code as two clean steps -- no reasoning about the output of the first step and no bookkeeping cruft variable that you have to ignore or remind yourself that it's the same as another variable after some point in the function. At least once you're used to working with double pointers I think that's a much easier function to read.
Demo in the video at the end of https://piraxus.com/
How easy is it test a function add(a, b) that just adds a and b and returns the result?

Or how bout testing:

function divide(a, b, fn) {
let [_a, _b] = fn(a, b);
return _a / _b;
}
The point is that if browsers block the cert it will make the MITM impossible without them releasing thieir own browser. It will be much more clear for normal uaers that the custom browser can intercept internet traffic than that "security certificate". Also good luck getting that browser into the AppStore and PlayStore or making users install the apk.
You can take the freeholder to a tribunal to force them to renew the lease, but in addition to the lease, you have to pay their legal costs.

So if the leaseholder is bot cooperating it can get very expensive. If the lease goes below 80 years even more so.