skysight-inc/HackerNews huggingface dataset:
Two possible approaches, one social, one technical:

The social approach is to change a culture so that we make deep friendships for life. Like having a new family, except by choice. Make it normal for friends to buy houses next to each other, so that in future they can help each other take care of kids, cook for each other, and other things family members could do for each other. This could help people live in a commune of their own choice.

(The obvious problem: two people get married, each of them has a different group of friends. In some sense this is a nice problem to have, because it assumes that many people already have communes. Still a problem.)

The technical approach is to make houses like Lego bricks, with standardized dimensions, that can be picked up from one place and placed to another place. To make relocation easier and cheaper than it is now. So again, you have a group of friends, and you agree to live together. Except, if you find new friends, you move to live close to them.

In places where most homes are rented, this is a potential product for a very rich company: make a few buildings in different parts of town, with identically shaped flats (or maybe two or three types of flats of different size, each type existing in each building) and provide a furniture that is easy to disassemble and reassemble. Part of your offer would be the possibility of cheap and simple relocation: if someone chooses a different bulding where a flat of the same type is available, you could disassemble the furniture, move it, and reassemble in the same shape in a week. You could also provide some related services, such as redirecting mail coming to the old address.
That's a workaround.

Implementing prefers-color-scheme is the correct thing to do, and I daresay it wouldn't damage the admirable minimalism of the site to do so.
Australian mathematician helps crack 'Zodiac' serial killer's coded message
".a | .b" is just ".a.b" in jq.

Netmasks might not always be three characters.

Perhaps something like this:

curl -sf https://ip-ranges.amazonaws.com/ip-ranges.json | jq -r '.prefixes[].ip_prefix' | grep -o '/.*' | sort | uniq -c

If you really wanted to, you could even do the splitting and counting in jq:

curl -sf https://ip-ranges.amazonaws.com/ip-ranges.json | jq 'reduce (.prefixes[].ip_prefix | split("/")[1]) as $mask ({}; .[$mask] += 1)'

It's a super handy tool with a real language in there!
Isn't there already civil liability for this?
I actually built one myself, but used raspberry pi so it needs usb cable for power. It works well but contrast on the display is not that good for photos. Would work well for text or like smart home panel.

https://imgur.com/a/HraSGsj
And awk doesn't let you easily select a range of fields like cut
Great questions, thank you. It may take me a bit to answer, but I will :-)
The cards stolen this way are mostly sold individually for $10-$20 a piece.

You can search those marketplaces like any other store: "I want a Visa card from a guy in Florida".
Runs on my computer.

(not a big fan of chrome though)
That this is so high right now is quite reflective of HN.

It's nearly an exact match of the meme like utterance often seen on reddit: "chrome bad".
Thanks for taking the time to dig in and reply! Yeah I was figuring it was networking where they would really get you.

The way AWS complicates their pricing to the point where it's hard to tell what you're on the hook for just comes across as so... shady to me. I understand what they offer, and which problems they solve, I just don't personally like doing business with entities like AWS.

No, I'm not building anything that really needs the scale of AWS, and yeah I guess that invalidates my opinion of it to a certain extent. I'm just a stranger throwing their voice into the void for fun and to learn new things :P
Still at least two sites [1] actively exploited on https://www.newbalance.com.hk/zh/checkout/cart/ and https://www.clear4vision.com/checkout/cart/ if you view-source

[1]: https://www.nerdydata.com/reports/cloud-iq-net/b9f4d0cc-a686...
Genetic mechanisms of critical illness in Covid-19
Are you like this with cars too? “Gosh there’s just so many brands and models to choose from, I wish there was just one choice so I didn’t have to think or make a decision”
Decks are shipped directly from the manufacture in Wisconsin to people who want to begin the adventure
To make an argument of this scale you have the burden of proof. There is no proof here past casual correlation.

An analogy I see here is the scene from an old film where a woman walks behind a wooden screen and a goose walks out thus the woman is a shape shifting witch.
Keeping a CSP updated is beyond the technical abilities of people running most small online stores.
Who’s Trump?
Next on Hacker News -- Why your mom is a whore from this totally objective website yourmomisawhore.com
I don't work for Red Hat, but I saw a post that was saying that there is something in the works to fill the niche that CentOS offered. It just wasn't ready yet so the announcement hasn't been made yet. However, they needed to send a statement out regarding CentOS so companies were aware of what would be happening with CentOS 8 and perhaps avoid migration right now.

For a community that depends on LTS, the sysadmins seem to make some rash decisions/drama. I think the logical decision here would surely be to wait and see what happens and make a decision in a year when support ending would actually become relevant.
Hm. I figure I'll give it a try. I have stability/slowdown issues, but I don't attribute it to anything more than I'm a native software/device control developer, and often running dodgy, hacked-together tools. I generally have to do a "deep cleaning" of my system once a year or so.

I do often have a windowserver hang.

I don't really use Chrome much (just for testing, or the odd times that a site won't work on Safari). Not a big deal for me to rip it out.

If it were a tool that I use all the time, though, I might be more comfortable with a posting that had a bit more detail.
The whole point is the sanctimonious, heavy-handed nature of a platform that otherwise likes to act like they're concerned about the public good.

I recognize they have a right to do it, but I have a right to make noise about it and criticize them.

We got so many pop-ups, accounts suspended, etc. around the Hunter Biden stuff, and what do you know - it turns out there was substance to the story.

This never happened around the Russian collusion stuff and I suspect most of the city lib elite that inhabits tech companies wouldn't find that a sanctimonious.
I completely agree, and it’s one of my favorite dark modes ever. In my editors, I also use #000 backgrounds. I think this is the sort of “can’t please everyone” type situation which warrants even more options. If there are accessibility concerns, they should absolutely add a more accessible option with better contrast (and it should probably be the default if so - I really do wonder if it’s actually inaccessible). IIRC, more color options are on the roadmap? Perhaps I misremember.
> chrome's security is, however, light years ahead of anyone else's

give evidence to support your claim. I've been using Firefox for the past 10 years and I fail to see how it's insecure. I do see however, how it's not nearly as user-hostile as chrome.
A starter-kit or your next React app to build full-stack SaaS applications
> You might as well argue how Bootcamp doesn't run on iPads.

This isn't much of a "gotcha" - I do think it's outrageous that Apple gets away with selling these gimped iOS devices that only run Apple-approved software.

Would consumers stand for this with any other devices? A stapler where you had to buy staples from the manufacturer? A car that only drives on manufacturer-approved roads? A dishwasher that will only wash approved plates?
They aren't looked up by index into an array, they are looked up by name, even if stored in an array. Roughly, an object with __slots__ is a mutable counterpart of namedtuple. Both need to map a name into a field/slot index. Of course, there're ways to optimize that lookup (which primitive Python implementations, like CPython, may not do, but other implementations definitely do).
The only clue this domain might be newer is he mentions the 16inch MacBook Pro which first came out in 2019.
For scriptable editors the difference is more like giving you a home depot vs a multi-feature nail gun. There're option to use other people's scripts (buy nail gun directly), or script yourself (buy parts and build your own nailing tool that suits your need, but do need to invest time in learning and building).
No, there's a concept of "burden of proof" which applies here.
Another thing you can do: profile the process to find out what exactly it’s spending all that CPU time on. There are a few different ways to do this on macOS, including the GUI Instruments.app which comes with Xcode, and dtrace. But if you’re the sort who always has a terminal open, the quickest way is to just run

sudo spindump

Also useful when a process is hung, even if it’s not taking up CPU time.

Sometimes the output isn’t useful due to a binary having been stripped of symbol names, but all macOS system libraries have symbols, so you can usually figure out something.
Never seen any drama in the freebsd camp. It’s utterly boring. Which is how I like it.
Chrome does have the capacity for screen sharing (e.g. Chrome Remote Desktop), but I assume it wouldn't inject any extensions into the window server unless it was actively invoked.
I remember quite well the Google update process being notorious for evading Little Snitch firewall rules. It popped up every intervall as if it were a new (unseen) process. There's definitely something going on with the app signature. (Haven't used Chrome for some time by now.)
>Why don’t you eat like a normal person, eat less then 2000 calories and exercise

>Because I AM A FAT GUY. My relationship with food is garbage. Moderation has ALWAYS been a challenge. I need an extreme intervention, it’s either change my life style or get some kind of gastric sleeve. NO WAY. I do not want surgery for a LIFESTYLE change. If I eat like a NORMAL person, IE, STANDARD AMERICAN DIET, I’m going to get fatter. I have to change my relationship with food.

Oh boy, can I relate to that. I'm not fat, but I can eat a lot, to the point where I am feeling quite unwell. It is very difficult for me to stop, even when I am "baseline sober". When I've smoked a bit of weed, which I do for mental health reasons, of course, forget it.

Many don't understand why I try to not have any easy food within reach where I dwell. It's because of this.

"Self control" and "willpower" is a stupid myth. We're animals who evolved for food scarcity and scarfing as much down as possible whenever it is available, because it won't be tomorrow, and then we'll be starving for two more weeks.
If you have reddit account you can disable it in account settings[1]. Reddit Enhancement Suite[2] has an option to disable per subreddit. New.reddit.com breaks all CSS so that's an option as well, I guess.

[1]: https://www.reddit.com/prefs/#show_stylesheets

[2]: https://redditenhancementsuite.com/
Building a SaaS platform is hard and takes time. This starter-kit helps you to get going quickly. Instead of spending weeks or months implementing basic features like authentication and billing, you could start building the things that make your product unique from the start.

- Landing page, blog, and CMS

Start with a nice landing page that includes a blog and is easily manageable with an integrated CMS

- Users & Authentication

Allow users to sign up and log in to your SaaS application

- Subscription payments

Monetize your application with a powerful billing system that uses Stripe Billing.

- Manage a team

Allow your customers to manage a team and invite other members. You can, for example, choose to allow this option only for "Premium" subscriptions.

- Send transactional emails

Easily send emails from your application. A couple are already added for you, like a welcome email for new users and a team invite.

Made with modern web technologies:

- TypeScript
- React
- Next.js
- Tailwind CSS
- Firebase
- Cloud FIrestore
- Cloud Functions
- Netlify CMS
- Stripe
- Postmark
Or perhaps that Chrome exploits are more useful?

In fact, given Firefox's tiny market share (despite my efforts) I'm surprised the disparity isn't higher. Maybe it's harder to find Firefox exploits?

It's more likely that more popular browsers equally have more people attempting to crack them; and software in general is so buggy that results probably scale in proportion to the number of people looking.
the question should be what does covid have to do with that
I didn't mean to frame the IDE as a crutch, I'm merely saying that you should try to not let it become a crutch aka. overly rely on it.

I recently worked with a colleague who couldn't run the python program he wrote without the IDE. The IDE was not installed on the PC we were testing the program on.

He is a better programmer than me.

And I'm not saying "people who are using IDEs don't know anything".

I'm literally only talking about the benefits of also knowing some basic shell and CLI stuff.
CentOS releases were supported for much longer (10 years vs 3+2 years)
I too recently got the Friesland Melitta teapot, and decided to put it on the shelf in my office despite it being very nice at making tea; I then supplemented my tea station with a slightly different vintage Friesland coffee set that included cups and saucers.

Who would have thought that the utah teapot was my gateway drug into buying vintage porcelain?!

I mean, seriously: look at how cool this shit is: https://www.ebay.com/itm/Vtg-MELITTA-20-100-Germany-Coffee-P...
I have one question in case Raph passes by:

Isn't that a bit risky to go this deep? If I understand things correctly, you are currently trying to build a font editor in Rust(runebender). Because there is no good UI library in Rust, and there's good reason to think Rust is a good fit for this, you want to build your own (Druid). So far so good. But, now you are also trying to build your own 2D renderer and not a basic one: you want to advance the state of the art in that field too.

Not that I'm not exited, because if all this lands, it will be super great for the Rust ecosystem, but sometimes because you're so deep in the rabbit hole, I'm afraid you get burned-out (or bored) and that everything would be lost because nothing would be polished enough to be usable at that point.

Is that a risk you're taking on purpose? Or is it just that you have a plan to avoid it?

Thanks in advance.
> True but with the Analytic / Continental divide in philosophy you still get a lot of folks on the Analytic side of things who think that anything not quantifiable in the way that they are used to is bunk.

I am glad you pointed that out. Anecdotally, I have found that "philosophy" to many in the tech industry when used perjoratively means Continental vs Analytic philosophy. Plus, even with analytic philosophy, when people recognize it as the sort of thing that Russell and his lineage worked on, they don't really get what these philosophers "cared about" - that it mattered to them if mathematical symbolism expressed truths about the Universe in a metaphysical sense. They weren't just manipulating symbols to prove consistency etc.

To me, Wittgenstein's concerns portray the bridge between the two major schools (well, naturally, he was a European who chose to go study under Russell, the Englishman) very well. He cared about the formalism, but he also cared that it made sense in terms of finding meaning in the world.

Somehow, it's the latter struggle that seems to pass by unnoticed when "techie people" (to generalize) think of the work of philosophers.
> At the same time, I know that's extremely unreasonable to expect.

However, that's exactly the path every Electrical & Electronics Engineer classically took.
Perhaps staring into a light for a long time is more problematic? I certainly find it more draining on my eyes to use light UIs for extended periods.
Appears website is newer - https://twitter.com/lorenb/status/1337832978253230081
And it's also important to keep in mind that if your team is using various external tools, there is a high chance that only a couple of people will actually know how those tools work and even less of them will be able or happy to use those external tools.
Let's say you run RHEL on your production servers. You pay for licensing those servers, which gives you Red Hat support, and also because you have proprietary software which is only supported on Red Hat.

You pay a pretty penny for those production servers. But you also need development servers, and staging servers. For those servers, RHEL would be a gigantic waste of money. It's the production servers you need enterprise support for, none of the rest.

CentOS was a downstream release of Red Hat, with the same packages from Red Hat compiled. It was, for the most part, identical to Red Hat without the support. This meant you could develop on CentOS Dev Servers and test deployment on CentOS Staging servers, and expect it to work exactly the same when you sent it to production. Lots of less licensing costs, same results.

Now, CentOS Stream will be upstream of Red Hat. Instead of getting the same packages as Red Hat, now you're getting the testing packages of Red Hat. You can no longer expect to get the same results from CentOS stream as from RHEL. The end of life for updates for existing CentOS releases has also been moved up drastically. By all appearances, Red Hat and IBM are essentially forcing companies to license and use RHEL on their dev and staging servers, by making CentOS Stream unusable for it.

Lucky for many, Canonical went and got Ubuntu certified for many of the same proprietary hardware and software systems that were previously only supported for proprietary linux distros. This means your dev, staging, and production can all be the exact same distro, and the only difference is which servers you're paying for Canonical support for. This is a recentish change though, so many companies locked into Red Hat / CentOS because of the clear path that was established between Development and Production. And certainly not every proprietary software/hardware is supported on Ubuntu, yet. Lots of companies won't switch (the structure of Red Hat to Debian is pretty drastically different), and IBM is counting on that.
The London Beer Flood
For me - it works properly on spotty connections. I have fast, but unreliable internet that drops connection few times an hour and Safari and Firefox are almost unusable - when connection drops for just a few seconds they cannot open many websites for up to 5 minutes (reddit, google and youtube among many others; hacker news is one of the few that work all the time).

Chromium based browsers do not have that issue, I used to use Vivaldi but temporarily switched to Safari as I wait for ARM build of Vivaldi and I am constantly frustrated by that issue.

I have tried debugging it but got nowhere, it seems to be system wide issue as some 3rd party apps exhibit this behaviour too (for example live streaming through IINA or Skype) while others not (Electron based apps usually work fine). Recently switched to new M1 Macbook and it happens on it too.
Speaking of the GUI Instruments.app. Is there a way to start a process from there, instead of attaching to an already running process? I used it the other day and could only figure out how to attach to an already running process with it.
Abstraction without reference to concrete available examples is likely to result in beautiful theories unmoored from reality.

I personally prefer a maximalist position of no censorship of any kind ever. I would also like to live in a world populated solely by philosopher-scholars in which reach is based solely on the intellectual content of one's ideas, and phenomena like spam and marketing did not exist. Alas, I do not.
>>To make an argument of this scale you have the burden of proof. There is no proof here past casual correlation.

And yet, as of this writing, it has 200+ upvotes and is at the top of the front page.

HN audience really needs to do better. If you are reading this and are one of the people who upvoted the story, please really ask yourself why.
CUT and SCUT in this context mean compact utility tractor and subcompact utility tractor. This article [0] has pictures and discusses differences between the two.

[0] https://www.tractor.com/features/scut-vs-cut-1722/
> harden these electronic voting machines

Make that voting computers, and abolish. If even HN readers can't get this right, there is no hope of electoral reform in the USA to raise it to an acceptable democratic level:

ODIHR election observers must not be blocked anymore.¹ Elections are to be held on a Sunday to not disenfranchise the working population. Votes are always counted and tallied manually.² Postal votes that arrive after the election date must be invalidated. Amend the constitution to require elections to be universal, direct, free, equal, secret, transparent and effective.³

If anyone is against these reforms, well, I'm certain Taibbi will not hesitate to call you too un-American, wrong and other things.

----

¹ The USA are a member state.

² This must be done so that the proper following of the procedure can be verified by anyone. Voting computers cannot be verified by just anyone. –– Using voting computers, being general purpose computers, are inherently easy to manipulate. Cracking just one model enables wide-spread fraud. Counting manually however means that wide-spread voting fraud requires undermining each location separately which is much harder to pull off and also multiplies the risk of detection.

³ These words have a specific legal meaning.
The higher amount would generally indicate its harder to get an RCE in Chrome

That does not follow at all. Chrome has the highest market share and so an exploit would have the greatest impact potential. More users affected => more economic value for an exploit.
(2) Is a great idea I hadn't considered. A surprising number of sites require "browser" user-agents but otherwise have well-defined rate limits, robots.txt files, and everything you'd need to write a respectful crawler.

I'm not sure that (4) matters for larger sites? Their rate limits are usually a drop in the bucket compared to the background traffic.
Supply chain integrity is a huge issue that normies take for granted. The surest way to lose normie friends is to point out how much faith people put in supply chains.
I don't know. I feel like my AWS certs are already next to worthless. The companies just want people with certs as part of their AWS contract constraints.
You don't get to stack "hand waving" indefinitely. The person who made the original claim is responsible for providing refutable evidence.
Yep - pretty critical missing bit of functionality unfortunately.
Oh no, a fever!
Good point. I should add "non-technical" to my comment.
> The author went so far as to create a domain for this rant

It's not a 'far' thing to purchase a domain anymore. Domains are cheap as chips, and have gotten cheaper now since the advent of novel generic TLDs where usually the first year is sold cheap but to roll it over into the next few years the price is hiked (which is why so many people now purchase a domain for a year only).

It is common now and expected to see single-serving-sites[0] that are just thinly veiled blogposts.

[0] https://en.wikipedia.org/wiki/Single-serving_site
I'm not sure that FLOSS developers have no plans to monetize. First, many of those devs offer paid support. Or their employability gets better. Etc. If people could not get any reward whatsoever out of FLOSS, it would be a much less active space.