skysight-inc/HackerNews huggingface dataset:
Hey denysvitali. oso CTO here.

oso was designed to be embedded directly in applications as a library. So there's no additional service to run to use it to make authorization decisions in an application.

The other part is that oso policies are written directly over your application data - e.g. the classes/types, and can access attributes and call methods. There's no integration work needed to get application data available to the policy to start making decisions, nothing to keep in sync, and no additional network overhead.
I realized the original comment was about surgical masks.. I was commenting about the filtering properties of multi-layered polypropylene masks. I'm afraid its a bit beyond my Science / Engineering / Maths skills at the moment to try and explain it any better.. but maybe this link will help? https://www.tandfonline.com/doi/abs/10.1080/00022470.1980.10...
What's a safe way to buy crypto? Obviously the crypto values can change, but is there a recommended platform? I've considered buying for some time but am always put off by now knowing whether a platform is considered shady or not. I see a lot of stuff about people losing keys or bitcoins and don't know how to safely purchase
Show HN: Instantly search speed metrics for 8m websites (30TB of Chrome data)
They do, in a way...

A HFT typically has a given stock of Siemens and offers to buy and sell. Suppose one has 100 shares and offers to buy and sell two, you want to buy forty. You'll get two, and the HFT will put two more on the market, at slightly higher prices, and wait to see whether you buy.

How much higher/lower? Obviously they'd like to raise the price quickly to the highest price you'll pay, without raising it so high that you buy from someone else, and equally obviously you don't tell them what price that is. Will the HFT firm's software have better heuristics than your broker's?
That's the first thing that drove me initially to Emacs. I never found a Git client that well-crafted.
The most downvoted comment in the Github issue seems totally right.. why did this guy put his life savings in a crypto? Even without making any mistake this seems like a dumb move.
OT: Just checked their privacy statement in which they say "NO TRACKING (EXCEPT GOOGLE ANALYTICS, AND INTERNAL TRACKING)". That is quite a cheeky statement.
When Google announced Chrome User Experience Report (CrUX), I was immediately excited and started to dig. It's a 30TB BigQuery dataset with a ton of insights into how real users experience the web.

But working with raw data is hard and expensive (5$ to scan 1TB). So I built – Treo Site Speed (https://treo.sh/sitespeed). It caches CrUX data and makes it accessible for everyone, and for free. No signup, just enter a URL and explore Core Web Vitals, server responses, and other speed metrics for top 8m websites on the web. Build your custom metrics using percentiles and intervals (including p99).

I'd love to hear what the HN community thinks about it. Check out an example for HN vs Reddit to get a quick taste: https://treo.sh/sitespeed/news.ycombinator.com/vs/www.reddit...
Lazygit is an alternative that I like.
With Ubuntu you have the choice to install newer kernels and video drivers if you need it and you are competent enough to read instructions.

The advantage of stable distros is that you are not surprised with new bugs,feature removal or shiny redesigns.

When I needed a new driver to play some game I just installed an official PPA and got the driver and if I did not like it I could install the older version.
Yes people think I’m insane when I manually add files to a commit. -a is another foot gun.
What’s the recommended DB host? Does the Next community have a go to?
SBCL is great, but one should not use an editor, which doesn't have proper paren matching and some indentation support. That is just making your life miserable. So SBCL+Slime+Emacs is a great combination. Or alternatively, get the free version of Lispworks.
Why would interest in irrational exuberance for a commodity with no intrinsic value supersede posts about serious failings of the technology?

Pretty hard to wax on about how crypto is the future of retail finance in a thread about someone who lost their life savings with no recourse due to a typo. Could’ve just gone to the bank if this was fiat.
Let me add my own anecdata: I've been running linux on machines since 1998, and I've never experienced a failure like the one you describe. In fact, the only hardware failures I've experienced have been external (usb) hard drives failing after a few years, and a laptop keyboard failing after someone spilled tea on it.

In terms of what the repairman told you, when I called Compaq's support to get help with the keyboard, once the person on the other side of the line heard me say I was running linux on it, he said "that's your problem". I had to reiterate that my problem was someone spilling tea on it, and that I had been running linux on this particular laptop for almost 2 years without any keyboard issues, thank you very much. In the end, Compaq told me they didn't have spare parts, and the keyboard started working again after letting the machine dry up for a few days (that was the last time I bought Compaq though!).

My point is: computer repair and tech support people are almost programmed to find out something that they're not responsible for and that could explain your problem. I don't hold it against them, I think it's a normal bias, but I would never take linux advise from a repair person, unless they work on a linux shop.
Why is UTF-16 considered very basic? Can't it encode everything UTF-8 can encode?
TLS doesn't necessarily mean everything is encrypted with FTP, because data and control channel have to be encrypted independently.

See for example https://security.stackexchange.com/a/115565 or https://en.wikipedia.org/wiki/FTPS#Secure_data_channel for more detailed explanations.

Most of the time both are encrypted when configuring TLS, but it's not as easy as with IMAP or SMTP where you basically disallow all commands except STARTTLS.
Using Lobe AI to train a face mask classification model
That's sort of what I wrote.

I just make sure to have a single location for sensitive stuff, then ignore/move it.

I will store the contents of the file as an encrypted note in 1Password, so I do have a stored version controlled variant.
Apple's mandatory app privacy details on the App Store
I stole this from somewhere, don't remember where. It's a pithy observation about HN:

HN is open minded about intellectual inquiry as long as that inquiry doesn't challenge anything an average Californian already believes
You might need bubble sort if you have to rearrange a train using a turntable that can fit exactly two cars.
If you did this with a bank you’d be up shit creek as well.
GitHub already warns you if you accidentally check in an API key.

It's like a rite of passage for new devs at my company setting up a new project. Then we have to walk them through changing the keys.
> The past administrations were happy about fighting illegal deforestation.

No way. You are trying to recreate the history. The last administrations were the worse in term of numbers.

Look the Table on:
https://en.wikipedia.org/wiki/Deforestation_of_the_Amazon_ra..., "Anual Forest Loss".. look around 1999 and 2008.

Here some articles describing the scenarios back in the days:

https://www.reuters.com/article/idUSN13420813

https://www.bbc.com/news/world-latin-america-11888875
Huh, TIL. I find "wall-eyed viewing" much more comfortable and defaulted to that, then also wondered why the image didn't seem impressive at all...

Never realized there was this difference, though it seems obvious in hindsight. Thanks!
Aavegotchi setup a donation fund to help out the guy: https://www.reddit.com/r/ethereum/comments/ke2hxz/aavegotchi...
Dow breaking 30k isn’t Hacker News either, you can read about that stuff on CNN if you want focus on random numbers.
Yes that would still work, aliases don't need to be created in advance.
The dialog in that scene says, effectively, he must have done something to deserve it. To me it showed police violence and then immediately tried to justify it. I took away a very different message from that scene.

But that's the beauty of critique, I think we can both look at the same work and draw different messages from it.
While that's a very valid question, it's not helpful to the OP.
+1 for jellyfin. It is a lot of work going on and 10.7 which will be launching soon will bring a lot of more nice features.

Also, SyncPlay is sweet!
I would consider it except it often feels like iOS was designed specifically to aggravate me. I can hardly remember another interface I've used that was as painful. Is there any way to customize the UI on iOS or is it still just whatever apple decides for you? I remember jailbreaking used to be popular, not sure if people still do that
tig seems like it could be a cool tool, but trying to view screenshots (on ios latest safari) left me stuck on a flickr login screen. ):
This guide[1] is pretty extensive, a bit old but still works.

[1] https://feeblenerd.blogspot.com/2015/11/pretty-i3-with-xfce....
I thought they killed this of many years ago, but maybe that was just the portfolio piece? Hard to want to delve into a Google product these days when the norm is many years without meaningful updates and the constant possibility of the project being killed.
Bitcoin breaks above $20k
Yes, that's what I've been doing. However, somehow screen-recording and video overlays don't seem to work (I don't use it enough to really chase down what's going on).
(oso CTO, somewhat biased)

> The programming language specific code just is some plumbing for accessing the policy agent.

If you want to make policy decisions over your application data you still need to work out a way to move it into the OPA service, or send it as part of the policy request.

You can make oso policies language agnostic if you take a similar approach and have a small number of shim rules that handle the application-specific parts.
Changing the xkb mapping is not a happy path? It's perfectly portable to any system running X11, you can define your own shortcuts to quickly switch maps with setxkbmap... It's a backbone of my workflow with a 60% keyboard.
Any computer repair shop that says "Linux destroys computer Hardware" and "not allowed in his Shop" is clearly trying to scam you.

Also, If the computer stopped working entirely and did not even boot how did you spend hours fighting it?

If you have a malfunctioning CPU/RAM it should not be possible for you to "try to reinstall linux". What would happen I think is failure to boot and your laptop playing a certain sound as a diagnostic message.

Either way, you should refrain from making comments like "avoid Linux like a deadly disease", clearly you've messed up the installation process. You could've just chosen a one-click install linux distribution.

If you don't know how to make a chair, don't try to make yourself one. And if you do don't blame the people that gave you the wood. It wasn't even sold to you, you grabbed some free wood.
I've seen studies where they tracked wild Norwegian salmon, and found that 90% died before spawning. As far as I understood it, this was interpreted as "natural death", but it's the same figure as the one in the article. It seems like a very plausible explanation that those deaths also largely occurred due to the same poisoning from tires.
If you did what with a bank? You can't accidentally send money to a black hole with a bank.
Highchart's has a UI that is very similar to this and is SVG based (I believe): https://www.highcharts.com/demo/stock/stock-tools-gui

Sadly this seems to continue down Google's trend of simplified controls, fewer power-user type interfaces.
I am using both a dedicated 35mm film scanner (not flatbed) and a DSLR with macro for repro, the latter for medium format film.

The outcome quality of both processes is identical and great quality, but the DSLR repro way is a little bit more cumbersome. It takes me longer to get a really good result with a lightbox than with the dedicated film scanner. Not by long, but it adds up if I have a couple of 120 film to repro.

I shoot repro with a Nikon D700 in RAW using a 105mm macro lens on a regular stand, with a bubble calibrator. The lightbox is a small cardboard box spray painted in black, with flippable/removable cutouts to fit 6x4,5 up to 6x7. I use an old discarded iPad mini, setup with a white image on max brightness as backlight.

Using Capture One (my preference of editing suite), I connect my camera with a USB cable and import directly into the editing suite. No need for importing of a CF/SD card. Smooth process.
I've used `tig` for years and it's wonderful.
I think you're missing the fundamental point that the pair 0 O is very easily confused, but o O and o 0 are less easily confused, by virtue of differing height.
I agree that high end gaming PCs can be a bad target to aim for because they’re unrepresentative of most rigs, the advantage that consoles have is consistency. No game developer should be surprised by their games performance on consoles at any point in the development lifecycle, since this is a known factor from day 1.
The last few months bitcoin was already breaking ”all time highs” (in total market cap).

In other respects, ₿ is not even close to breaking all time highs, like the RHoDL indicator: https://studio.glassnode.com/metrics?a=BTC&category=indicato...
Dry waste doesn't get a bin liner for me either, but being on this thread implies you are unusually engaged with the issue.

There are definitely negative externalities (whether that's paper bags, or bin liners, or food spoilage, etc!) that are entirely ignored when people in general talk about the benefits of the plastic bag tax. We don't know whether there has been any net benefit because that has not been properly studied.

As an example, the UK government has tied the plastic bag tax to charity donations (but supermarkets were promoting charitable donations before any bag tax...?) and accepts self-reporting of sales by supermarkets (not amount of plastic consumed? and "bags for life" are not reportable!!), which makes it complete non-sense https://www.gov.uk/government/publications/carrier-bag-charg...
In Europe, you are required to return funds not meant for you.
Seconded. PCL ist in my eyes one of the best and most "modern" Common Lisp books around. SBCL is probably the best Common LIsp compiler and free on top of that. Paired with Slime and Emacs you have a professional development environment. I use it regularly.
Or a state backed initiative in the early stages. In order to get to 5 million you have to pass 5,000.
We haven't had a breach in 10 years, and follow best practices with security (prevent injection attacks, etc). Nobody is invulnerable of course.
Some security procedures are automated, others are a manual checklist.

Mistakes happen, but this was a big one.
The only thing Apple is doing here is allowing the user to give their consent to being tracked and having their data used.

How are Facebook arguing that they're entitled to people's data??
Google Analytics consultant here.

A plain-vanilla GA installation does not connect GA data to any of Google's data. Google is a Processor under GDPR & Service Provider under CCPA, meaning that the data "belongs" to the site owner and Google has no legal rights to use it for their own purposes.

BUT

A key feature of Google Analytics is integration with the rest of the Google ecosystem, including Google Ads (formerly AdWords) and Display & Video (formerly DoubleClick). It is extremely easy to connect GA data with Google's data. Configurations that give Google legal access to the data are easy and common. (If you remarket using GA, Google is not just a service provider.)

From a GDPR perspective using Google Analytics is still problematic because of Schrems II. Any data transfer to a US-controlled entity is troublesome, because the EU has declared that US does not adequately safeguard user data (the main sticking point is the lack of accountability of law enforcement & intelligence agencies to request access to the data). But that's about the US, not about Google specifically.
Well Clojure most definitely does support state-bearing entities that communicate using message passing (channels / agents / atoms...) and, while I confess I that I personally don't use them in _quite_ the same way that I use objects and method calls in an OO language, I find that programming in OO and functional languages is kind of converging towards the same point: functional programming in the small (immutable value objects that are worked on using pure functions) and OO in the large (state-bearing entities communicating using message passing).
A timeless classic, have for years and will continue to use it daily
Good question. Of course, like many things, the answer usually is: the moment they discovered the 6PPD was a cheap substitute for xyz.
Nope, depends on the situation and which country.
No you wouldn't. You could almost certainly recover the money.

If you wire money to the wrong place, and that person won't return it, that's theft. Likewise, if someone suddenly receives an unexpected million dollars in the account, they should not consider spending it -- that would be a big mistake.
In the supply chain, not necessarily. Any software that goes onto a classified information system is supposed to go through a security review and audit, though. Based on my first-hand experience with various DOD agencies, though, I don't think many of the people working the information security side of the house are as up-to-date on technology as they should be.
New Modified Stem Cells Can Deliver Drugs Specifically to Tumor Cells
You're not alone. I'm also not a fan of tiling window managers. i tried to like them once but i just don't. I feel like tiling wms result in less chaos on the screen and that just doesn't work for me.
Also this --> Security researcher Vinoth Kumar told Reuters that, last year, he alerted the company that anyone could access SolarWinds’ update server by using the password “solarwinds123”
https://www.reuters.com/article/global-cyber-solarwinds/hack...
I think you might want to post this under Show HN.

Now it appears in Ask HN.
That last is actually rather hard to determine. Detected attacks tend to divide into two groups - the scripted continuous probing that's just background noise these days (but if you have access to the logs on any internet connecting device in front of a firewall you will typically see it being probed at least every 10 minutes), and targeted attacks - where the first rule is to be very careful, lay low, and perform careful data exfiltration. Reading the reports on the kinds of the latter that were discovered, and in particular how they were discovered, suggests there is probably much more of that going on than is generally realised.
SMTP checks need to be run from the actual mail server/cluster that will be sending emails, using the exact same EHLO greeting, etc. Otherwise you may get both false positives and negatives due to IP blocks and mail header filters on the receiving end. That's without getting into timeouts and remote-side enforced TLS.
I thought that the front page was determined by votes?

Another childhood dream scattered :(
Thank you for the suggestion, yes - that is on the todo list.
You too, thanks! Here's what we exactly talked about by the way https://news.ycombinator.com/item?id=25441986
Sure thing, look: https://github.com/CodyReichert/awesome-cl#web-frameworks and https://github.com/CodyReichert/awesome-cl#parallelism-and-c...

The Cookbook on web development: https://lispcookbook.github.io/cl-cookbook/web.html
I have a site (https://familytreechart.com) with a similar integration with Shopify but one thing I've never figured out is how to send someone to Shopify's checkout page with a preconfigured cart. It looks like you are managing the cart on the nextjs side. How are you generating the checkout page with the right items? I've resorted to creating a DraftOrder, but those don't allow for discount codes so I also had to handle that on my end when creating the draft order. Email in profile if easier.
A very happy customer of Vercel here, and a Next.js user.

Vercel makes it really easy to deploy isomorphic JavaScript applications, to the point where I barely have to think about the runtime context. Thinking back to the ~2015 era, it feels like magic in comparison.
I will say though: OPA is an awesome project and we drew a bunch of inspiration from it early on. I'm excited about more people being aware of the power of declarative policy as code :)
Regolith Linux – An i3, Gnome, Ubuntu based distribution and desktop
I'm trying to decipher what this is. So far I've learned there's a thing called "Jamstack" that seems to be about static websites. How does one manage databases with this technology?
This is one of very few reasons why having centralised banks is going to be necessary. Whether the pros of having banks outweigh the cons decentralised currencies, is yet to be determined. Personally, I still don't believe they do.

Anyway, the usual bank transaction care should still apply, especially _because_ there is no central authority to reverse charges. Normally when I send money to anyone, I check it first by sending a small amount, then I get confirmation that it's received, then I'll send the rest.

I don't know if such a precaution would have made sense in this scenario (as I don't know enough about LINK or smart contracts for that matter), but it's something that I take especially serious when transacting large amounts in crypto currencies.
Nope. Literally just wired money to a wrong account number (banker mistyped one digit). It was sent back. Sure, if you get tricked into wiring to a fraudster, they can keep your money. However, nothing in the banking system is like this unless you put your money as cash in a bag and burn it.
If you don’t like the documentation (or lack of free documentation), write the code and documentation yourself; fixes the problem.
I'm a heavy user of both i3 and emacs.

I would never use emacs as a window manager, because it's simply not stable enough for me -- it crashes and hangs quite a lot, and I have to restart it from time to time when I update my configuration and want to test it out from scratch, or when emacs get confused after running it for a long time.

i3, by contrast, has been 100% stable for me, and I almost never have to quit or restart it. So it's completely reliable, and I don't ever have to worry about it not working.

Regarding i3's config, it's really easy, and except for occasionally telling i3 the title of windows I'd like to float by default, I haven't touched my i3 config in decades.

As for how I use i3, I mostly have one full window taking up the entire screen, with other windows in the background, as tabs that I can switch to. That's 99% of my use. Occasionally I manually make a window float, when I want some odd-sized window or want it to overlap another window, and some windows I make float by default. These floating windows are all very temporary. Sometimes I'll also change my tiling configuration so that more than one window appears on the screen at the same time, but that's also pretty rare, but it's there when I want it.

Overall, I'm much happier with a tiling WM than with a floating WM, because with a tiling WM I don't have to manually fiddle with window resizing, stacking, or positioning. 99% of the time i3 just automatically does the right thing without requiring any interaction from me.

It would be nice to use emacs for this, but it's just not nearly stable enough or reliable enough for me.
Notably, this doesn't work for sending out purchase receipts.
Only as a company or government, as a person you are usually out of luck and get a "bank says no".
Why do they get to make the market and you don't? Why do they have the power to set this spread? Wouldn't you also want to e.g. buy $90 and ask $100 to mitigate your own risk? Where does the asymmetry come from?