skysight-inc/HackerNews huggingface dataset:
In my response from three hours ago about threat model I said “service authentication helps control the blast radius if someone gets inside your perimeter”. I’ve been saying that I think we mostly agree for a while.

If you have a perimeter with well-defined entry points (e.g., a bastion for HTTPS and SSH) then you can lock people out at those entry points. Mutual TLS is defense-in-depth, and how you implement least authority for services inside the perimeter.

I know that CRL is literally active revocation. If you want active certificate revocation you can literally do active certificate revocation. Whether you need it depends on your threat model. And it’s not actually that hard in many scenarios. It is harder than not doing active revocation, and if you find yourself needing it to satisfy your threat model you probably should consider other alternatives for client authentication.

I’m not telling people they should use lots of mTLS but not worry about revocation. Any content I have written that discusses short-lived certificates is very careful to point out the fact that a compromised certificate will be considered valid until it is revoked. Most people who are using our open source toolchain are actually using it for internal server auth TLS, for narrow use cases like issuing certificates for database authentication or VPNs, or for mTLS to satisfy the sort of threat model I’ve described here.

We haven’t implemented anything around active revocation yet. But it is planned, because it is necessary in many scenarios.

If you’re worried about keeping a simple web service running 24 hours a day then you shouldn’t use our stuff. If you’re far enough along to need our stuff, you’ve figured out how to keep a web service running... you have to keep your own web services running 24 hours a day otherwise your microservice system is already going to have availability issues.
Sure, you have opinion, i have opinion.

Medical reason is not the only reason for it to be legitimate.

You too are selfish for forcing other people to wear mask.

>Is avoiding some mild discomfort really a worthy risk/benefit trade off?

Very much Yes
Your reply was probably flagged because it had only a link. Generally people expect some content to go with a link.

I also doubt most people on HN have the patience to wait for that site to load. It took like a minute.

And of course it's pro-Trump, but I'm sure that's only a small reason why it was flagged.

(Odd thing, I posted a comment to you earlier and it's not visible except when I am logged in. Hopefully at least you saw it.)
For cases where you don't need to access any non-slot attributes (packet capture would generally be one of those cases), yes, __slots__ can speed things up as well.
Can you call something a private company when they are the defacto monopolistic standard? What other video social media sites are there that eve remotely come close to competing?

When that happens, you're either basically a utility for the public, or a monopoly and need to be broken up. This whole concept that these "first amendment protects companies even though they control the market" reasonings are just absurd. It's exactly like defending the railroads for not wanting to ship black people because they don't have rails for "colored folk" and since they're a "private company" they can do what they want.
Poll: Would you rather go back to an office or stay remote?
Once the coronavirus is behind us, will you willingly go back to an office or will you strongly try to stay remote (or some combination)?
Happy to go back to the office
I don’t want to go back to the office full time
I don’t want to go back to an office at all
Easy searching is definitely in our roadmap but for people who might pass by I did want to point out that you can already get some form of text search due to the way we index arrays. You can easily write a sort of 'inverted index' yourself if you place ngrams in an array within a document. The concept of bindings makes this particularly easy. This is option 2 as explained here: https://stackoverflow.com/questions/62109035/how-to-get-docu...

We realize it's not the perfect solution and doesn't deliver the best Dev XP at this point though :)
You can run X11 with a non-compositing window manager on very low performance hardware.
The details escape me, but I recall being about 13 around 1990, 1992?, newly into coding, and meeting up with Andrew Welch in some kind of chat forum. What I remember was that he was incredibly kind and offered words of encouragement for my budding programming future. Ambrosia was a serious fan favorite for their commitment to quality games. The 90s were exciting times for software.
Show HN: Will find the secret on this page?
Again, the iPhones have lightning ports. Almost everyone who buys this is going to be an iPhone users.

This is like complaining that the microwave at Best Buy doesn't have a Europlug because you're in Italy and that's what you use. Great, but not important to the actual buyer of the microwave in Milwaukee.
I don't want more collaboration. Slack is enough of a distraction. Something integrated with even more tools sounds like a detractor to me.
One reason I've seen is that the companies behind the vaccine have not actually disclosed how the mRNA gets inside the cell. They have said its some type of nanoparticle lipid mixture that is able to get inside your cells, but they haven't disclosed publicly or to the review panels what it actually is or how its made, since its proprietary tech. [0] Back in 2017, Moderna was taking a similar approach, wrapping the mRNA in lipid nanoparticles, but found that it had safety issues, and never made it to human trials. [1] Hopefully they have fixed their problems, but nothing I've seen has outright proven that its safe over the long term.

Personally, I can kind of understand this reasoning, I would prefer to know exactly what is going into my body and how its made, and that information should absolutely be made open. Something I also wonder is that moderna had a bunch of mRNA vaccines set to go to human trials, and I wonder where they went. [2]

[0] https://www.ncbi.nlm.nih.gov/pmc/articles/PMC7553041/

[1] https://www.statnews.com/2017/01/10/moderna-trouble-mrna/

[2] https://www.biospace.com/article/why-secretive-5-billion-bio...
Indeed.com is not FAANG scale but appears to be a big player in the jobseeker market.
Didn't the GNOME project try this in the mid 2000's? For me, that was peak GNOME: the 2.x series.
The fact that we see ads says otherwise...
It comes from a misunderstanding: antibodies last around that long, but so far no one's T-Cells have stopped reacting to the virus. Immunity lasting only as long as the antibodies is also how I understood it to work until mid-summer.
QUOTE - about child porn on different platforms:

Pornhub also attached the figures provided by Internet Watch Foundation comparing CSAM found in other platforms:

Facebook: 84,100,000

Instagram: 4,452,000

Twitter: 1,466,398 - You can navigate through the old reports near the top on the right hand side, adding up the totals from the last two years.

Pornhub: 118
Yeah, and othre mainstream media organisations - including the freaking New York Times - have successfully campaign dto get many of their remaining advertisers to pull out. To the point where, at least if the people campaigning for this were to be believed, many of the targetted Fox shows couldn't get ads at all.
The first problem doesn't exist, the second is really a "bad government" problem.

But why not misdiagnose the both so that the usual answer of more, and worse government can still apply.
> Do you think it is the responsibility of academia to teach "industry relevant stuff"?

In college I learned a lot of math and how to do things like calculate stress and bending. I learned nothing about material finishes, material selection, fastener selection, tolerances, drafting, etc. But the latter was easy to pick up on the job, while learning mathematical analysis on the job just doesn't happen.
Two working parents, two kids. Well compensated, both. My god do we envy friends who have family nearby. We both prefer to work, but it's still incredibly hard. As a culture we have to figure out a better way that allows everyone independence & freedom to either work or stay-at-home parent, while providing a support network.
That, or you set up an anonymous Wyoming (I think) LLC and register everything through that - leases, cars, etc.
Because it will take days for you to notice that you have it and you will continue to spread it. Even if you do not die from it, others that caught it from you might. If you are vaccinated it might be that you do not spread it anymore. It seems that there is no data yet for the current corona vaccines, but other vaccines prevent spreading so the new ones might as well.
Another consideration is that non-competes are not valid in CA but are valid in TX. I believe moonlighting is also protected under CA but not TX law.
This inspired some of our design principles in the CLI Guidelines: https://clig.dev/

The CLI is the opposite of the Mac in a lot of ways -- reality instead of metaphors, remember and type instead of see and point, make it a conversation, and so on.
It wasn't necessary to copy/paste this eight times.
They should leave it up, obviously.

I mean they have the right to take it down, but if I were running YouTube I wouldn't.
I must say though that there is a difference between putting a disclaimer next to a video to provide facts/context vs outright banning it from being posted.

Yes, it's not directly an issue of the first amendment, but it's still a topic with discussing since sites like YouTube, Twitter, and Facebook constitute a lot of where discourse takes place these days.
Missing choice:

4. I overcame COVID already

Otherwise those people will probably answer NO, which can lead to poor interpretations.
Meanwhile Minneapolis is handling their housing crisis much better than we are. They responded to rising housing prices by liberalizing their zoning code in the hopes of attracting more construction. Portland has done the same thing this year by legalizing the construction of multi-family dwellings on almost any parcel in town. This, of course, is also the secret to Houston's low cost of living.

California today is, for practical analytical purposes, a state with a fixed number of houses. This means we're currently operating in a regime where only the most successful and luckiest people can remain here. Unless we restart our housing production, this will continue.
No no no, you misunderstood. The whole post I linked you to was about why Workers does not allow forged Host headers.

What Workers does allow is for you to send a request to a different hostname. In this case, the Host header matches the DNS lookup. So if the third party is on Cloudflare, the request will go through their Cloudflare security settings.

It also allows, via the `resolveOverride` option, for you to do DNS lookup that doesn't match the Host header, as long as the Host header specifies a hostname within your domain. You can't forge a Host header specifying someone else's domain.
Which park or playground is gone?
From memory this was very much pre-Thunder cards (I designed the Thunder graphics accelerator).

We had done a lot of early video-work prior to quicktime actually being released, we had hacked together a motion-JPEG card as a daughter card on one of our unaccelerated cards that could play video in a window, I suspect this was based on that (but could be wrong, it was a long time ago!).

We certainly hacked on the drivers to slow down the refresh rate, but that was just a matter of changing some numbers in the video timing controller - in a time prior to multi-sync displays it may have involved getting a bespoke display manufactured.

I don't know of any archive, here's a few stories:

- when we first went to Sony to buy 19 inch monitors we asked them for 15k/year, they laughed at us, they had never ever made that many, unlike TVs 19 inch monitors were made by hand on a single manufacturing line, the didn't believe there was a market for that many , in the end we sold 25k+

- when we first sold monitors to Australia/NZ they were crap, people returned them, turns out all monitors were aligned in Tokyo facing east .... southern hemisphere ones needed to be aligned in a special magnetic faraday cage

- we first demoed quicktime in a window at MacWorld on an HDTV monitor, one of only 5 in existence in the US at the time - most people had never seen video in a window, or a screen that big before - the monitor was so heavy it required a forklift

- Premiere was written by a Supermac employee, partly in his spare time, to work with our video capture card, we sold it to Adobe, he quit and followed it very soon after

- one April fools the boss carefully locked his door and set traps (people went in thru the false ceiling) next morning he started work, his screen slowly got greener and greener, he rebooted his machine, it happened again, he started removing suspicious inits from his system folder, rebooted again, it did it again .... just before he wiped his harddrive and did a full install people offered to put his original video card's rom back in ....
> The reality is that a lot of enterprises and organizations don't really need a chat service. It's not a must for them.

I don't understand this. Chat has always been an integral part of work in all my jobs. Before Slack it was Skype. I can't imagine working through email only. It would be hard enough when we were sitting in the same office but impossible now when we're remote.
Having lived in Africa (Tanzania), I don't really agree. People their aren't very smart, for a variety of factors: poor nutrition, parasites, life history factors, terrible education system, limited access to books and technology, limited access to factual information, a terrible suppressive government, etc.

Of course I can't generalize to all of Africa, but saying everyone is equal intelligence everywhere doesn't make any sense. Like as a thought experiment, if I locked a kid in a box and didn't teach them anything, or interact with them at all, would they be as smart as the kid who wasn't in the box? Probably not.
My two cents - what’s useful for employers is giving students the confidence to jump into the code and figure it out. By this measure, what’s relevant for a compilers course isn’t the material itself. It’s that it’s structured to force the students to figure certain things for themselves.

There are college hires who need to be spoon fed, and college hires who just need mentorship and direction. Group two are invaluable.
Amateur Code Breakers Break the Zodiac Cipher After 51 Years
Why is there still no decentralized p2p open source search?
Amazon Aurora R6g instance types powered by AWS Graviton2 processors
I actually run a year old model Lenovo ThinkPad and the latest stable kernel. I mean it's mostly good at hibernating, but it's just not solid like other systems I've used.

You're right in saying that it's better on these systems with later kernels, I do remember a time when I was younger and buying the wrong laptop without suspend support though :)
They're clearly supportive of the science, and postulating the results as an explanation for a social phenomenon.
I am using Mojeek for more than one year now, together with other less known search engines. I mainly use it through eTools metasearch : eTools let you decide on which search engines you want to perform a search. You can define 15 search engines (including Google) and decide if they are important or not.
Sometimes, less than 10 times _a month_, I need to launch Google to check an address on maps or some images.
Mojeek is very useful for me and cover quite my needs, which is a bit of a surprise considering the variety of subjects I look for.
I also run a little Yacy node.

Everyone wanted to understand how very few search engines are real crawlers, should open "The Search Engine Map" https://www.searchenginemap.com created by Mojeek.
Just replying to each conversation and I'm lazy so couldn't muster a unique response for each person :) I'm sorry if I offended you with my copy/pasting

EDIT: One of my responses had a little extra tacked on so I'm deducting one apology from you
I think that's mixing issues. On the one side, we have a beautiful thing memorializing the most basic, and instinctually pleasant of human activities (sex between adults).

On the other side, we have something so unequivocally and fundamentally immoral that many countries place it on the same level as murder, and even typical murderers draw their own moral line against it.

The two can't be spoken with in the same sentence.

If PornHub is complicit in child pornography, every single executive involved should go to prison. If MasterCard has evidence, or suspicion that PornHub is complicit then they must turn such evidence over to the authorities immediately, and have a moral (not legal) duty to ensure that all the PornHub executives they dealt with are prosecuted. This is a poison barrel issue from which no one must escape.

However, the way MasterCard is acting is as if they merely want to break ties with a high-fraud risk client, whose risk profile may have changed during the COVID crisis. It reeks of a company protecting profit margins, and not of a company hurriedly running away from a tarpit of felonies and turpitude.

I may be wrong, and PornHub will be destroyed within 2021 like BackPage was, but right now I doubt it. VISA was their primary payment processor, and they only cut off access after MasterCard made public allegations. VISA has their own evaluations team, and I know from experience they're quite strict. The question is how could they not catch this before MasterCard?
No amount of distance is a boundary. People can travel, use cell phones, or any other method to get past distance. It is only a logistical complication.

Psychological and emotional boundaries are required. Cutting off contact by itself is not enough. You have to communicate that you are cutting off contact. That's what establishes the boundary. In many cases you won't get a restraining order if you haven't established that boundary. The restraining order is a tool for physically enforcing an established psychological and emotional boundary.
Yes. The progressives were fighting against the mask mandate imposed by the lynching-friendly Republican mayor of SF. They were saying that mask mandates are unscientific, and turned out to be right:

> A study then in 1919 concluded that mandatory mask mandates did not make any difference on epidemic
Allowing people to make up their own minds doesn't mean you have to provide a platform for views you don't share.
I remember the days on forums when people screaming "YOU'RE VIOLATING THE FIRST AMENDMENT!!!11" after the admin banned them were treated as the laughable jokes they were. Now there are supposedly serious political thinkers subscribing to this same idea: that the Constitution forces private parties to do business with you against their will. It's a serious lack of civic knowledge.
And if you're on Apple devices, you're stuck with a skin atop what is essentially Safari anyway.

Posting from Firefox on a desktop. I like my Ad Blockers to actually work.
You're still missing the point. You're saying:

> issue an attempt to buy it, wait for that attempt to be confirmed/denied, and handle both cases.

Only one user should receive a success. The article describes a setup where both users receive a success because of write skew. This is the very problem that transactions avoid: locking the row storing the number of items in stock so that it cannot be decremented below zero.

You can still use Kafka. What the article is saying is that you can't just check the DB to see if items are in stock and write your order to a queue. Because there might already be an order for the same item in the queue which makes your new order invalid.

Literally the whole point of ACID databases is that multiple clients can operate on the same set of data and avoid putting it into a bad state. If I'm a bank storing an account balance of $20 and you withdraw $20 and I withdraw $20, only one of us should get $20. This is the same problem.
> I think we'd be in awe of the average health/fitness of a 30 year old hunter gatherer from 100,000 years ago, compared with the average corresponding human in modern times.

They're different, not really better.

Hunter gatherers definitely got more involuntary exercise. But modern people can choose to get better (more specialized/effective) and safer exercise than ancient people ever could have.

Hunter gatherers had to eat what was around them, and would involuntarily periodically fast. It's much easier and cheaper for modern people to have a varied diet. Many modern people also periodically fast. But you have to choose to do so.

Ancient people typically struggled with parasites and various diseases. That is largely not a factor in modern life. Modern people sometimes are affected by serious pollution issues - modern air quality from burning fossil fuels may be such a crisis. Airborne lead from leaded gasoline was almost certainly one. It's difficult to compare the effects of such problems.

There's also a pretty strong selection effect going on here: lots of people 100,000 years ago used to die. People would die in childhood, people would die in adulthood. This mean that women had to have lots of babies, which means women died in childbirth a lot.

So, I think it's true that, left to their own devices, modern people tend to be somewhat unhealthy. Mostly due to laziness. But modern people also pretty clearly have the opportunity to be much more healthy than ancient people.
I agree, beautiful campus. Fun fact: the buildings were designed to resemble the symbol for databases in logical diagrams.

https://images.app.goo.gl/ybduLEGuAFxeGaL88
So NYT essentially let an editor post a libelous piece of work now that has cost a company a major source of revenue? What are the odds this isn't going to turn into a lawsuit?
The veteran spyplane too valuable to replace
There is Yacy, but it grows slowly. See https://fr.wikipedia.org/wiki/YaCy
> All __slots__ does is mean that myObj doesn't need its own dictionary, it still has to go to __class__ for a dictionary hit

In view of a follow-up comment about slots, this should be clarified: an class with __slots__ does not need to do a dictionary lookup for slot attributes; those are looked up by index into an array, just as local variables in a function are. The dictionary lookup is only done for attributes that aren't listed in __slots__.
manufacturing consent
Orthogonal, but the website design is very refreshing!
> This is all the result of confusing 1st amendment rights with the right to access the audience that gathers at a particular URL.

No one is confused. The article mentions neither the First Amendment nor the Constitution. It only calls the matter "un-American." This phrase is clearly a value statement, not some neutral and dispassionate assessment.

The line you draw to separate the government from the private sector is quite useful in other contexts, but does not affect the matter before us today. After all, in a democracy (which the Constitution aspires to be) the ideal of free speech itself must proceed from shared cultural values; if those values change enough, we might also expect the First Amendment to be repealed anyway.

Of course YouTube of course is not required to represent these purportedly-American values; just as surely, it may be criticized as "un-American" by those promulgating such values. A much more interesting argument would assess the extent to which the values in question are, in fact, American, whether YouTube's choices are more representative (surely there's a case for this) or simply more desirable (I note many here agree with them) -- and whether American (or "American") values can coexist with these YouTube values.
> Key Points

> Flu activity is unusually low at this time but may increase in the coming months.

How did you even get the flu.