skysight-inc/HackerNews huggingface dataset:
I do find it curious that the body seems to need to sleep longer after long bouts of insomnia (or a week of 18hr work days). I think the hypothesis "You need an extra hour of sleep for every hour missed" is disproven, but the body clearly needs a single dose of extra recovery time after exhaustion.
"If you eat dinner today, I'll commit suicide." - I'll probably skip dinner to save life.

"If you eat dinner today, I'll quit my job" - then, I'll probably tell person that they can quit their job. I'm not gonna skip my dinner for that.

I hope this illustrates that, when death is involved, everything else becomes secondary, and we prioritize not death over everything.

So, it's a bad analogy to use in Timnit's situation where she will quit if she doesn't get to see the identities of peer reviewers. This situation is not life and death.
Simpler and open source AWS Cognito.
Electrification
Space Mapping [pdf]
I wouldn't start CBT-I without first getting a sleep test, particulary for sleep apnea which can be present without obvious symptoms beyond insomnia or a delayed sleep phase. It's also much more common in young fit people than is often thought.
That existed. https://en.wikipedia.org/wiki/Do_Not_Track

It failed horribly because it was voluntary. But now that it's a GDPR requirement, perhaps that might have a snowball's chance in hell of succeeding.
localStorage and cookies are the same in terms of GDPR. It encompasses all local storage mechanisms such as IndexedDB, cookies, localStorage, sessionStorage, etc.

(source: I read the directive way back when it came out, and also skimmed large sectoins of GDPR)

Other sources: https://softwareengineering.stackexchange.com/questions/2905... and
https://law.stackexchange.com/questions/30739/do-the-gdpr-an...
The absolutely funniest interpretation of ”legitimate interest” is in a recurring spam message I get from (of all things) an email lead marketing company.

They have small print after each of their emails that says that GDPR allows them to email me because they believe I might be legitimately interested in purchasing their services.
This reminds me of my drafting classes (back when paper was used). I was re-taught how to make letters. One would think that it would not be necessary but for their standards, it was.
Americans care about their private money. Public money is other people's money, and there are books, movies
and entire college courses on the subject of Americans spending public funds unwisely.
This is wrong. EU law absolutely does require cookie banners if a website uses non-essential cookies, even if those cookies are not used to harvest data.
I got experience mainly with firebase and identity server. What is the usecase for supertoken instead something like identity server for .net, whatever Java spring uses or something like django or flasks authentication?

I’m far from an expert, but in past startups I’ve been scrambling to get SSO working for b2b saas, they bluntly said. Without sso we don’t want to use your service. So that was moved up our roadmap.

Even something like e-mail verification is something I will not go without anymore. It’s mandatory in some countries.

Honestly, next service that I will build will just be federated or magic email link if I can get away with it.

From the frontpage I cannot understand yet what makes this easier then the options above. Is this something you would use for your first 3000 customers? Imagine being the cto, when would I feel confident going for something like supertoken?

Also, it’s easy to ask questions like this, less so than building amazing things, so definitely Congratulations on the announcement!
I take Tom Hanks or Bill Murray over Keanu any time, but he's extremely dedicated. The amount of work he put into gun and martial arts training...Maybe that's part of being a good actor, after all.
The 30 series was also just a much bigger jump in performance for price than the 20 series represented over the generation before that.
You can actually eat pork belly without it having bad effect on your health. You just have to avoid to do it too much. Is grain berry in the amount that satiate you actually good for you to be eaten every day for breakfast?

It is puzzling to me why low-fat cereal would be some kind of win or automatically should be considered great thing. You get energy from fat, sugar and proteins. Healthy human can and should eat all three, but I really dont understand why specifically amount of low-fatness of some cereal box would be advantage.

The issue with nutrition is that it is complicated. Food is rarely straight in the "good" and "bad" category. If distinguising between processed and ultraprocessed allows us to simplify it enough to reason about stuff in contemporary stores, then it is useful.
Congratulations on the launch! Innovation in the Auth* space is really necessary. How do you plan on differentiating from other open source solutions, such as https://github.com/ory/kratos or https://github.com/keycloak/keycloak?
First Ever 100% Digital Prescription Worldwide
I find it staggering how misunderstood GDPR seems to be at large.

First and foremost, it's not about cookies. EU laws required you to inform visitors about "cookies" and have them acknowledge them long before GDPR passed into law.

Second, it's not about third parties or required cookies vs. marketing cookies.

What the law actually states is that you may not, in any form, make individuals using your service identifiable or track them without prior informed and active consent by the visitor, and you also may not make such consent mandatory for accessing your publications content. plain and simple.

all the "cookie banners" out there are ONE form of solving this problem but are in no way mandated by law. If you find another way of solving this issue, all the better.

But the way these banners are designed and implemented at large are geared towards soliciting consent by means of obfuscating actual selection (think: bright "accept all" buttons with tiny "save settings" links) and by making it hard and tedious to actually select and submit your preferences (think: giant lists of all trackers with opt-out for legitimate interest and optin for consent side by side). These are in clear violation of what the law states imho and are largely in use because there is still no juridical precedent that clarifies what goes and what doesn't.

what we are experiencing is a clash of ethical mandate and economical interest. GDPR is aimed at protecting you, the user, from beeing identified and tracked along your wen history, be it by cookies or fingerprint or whatever.

dropping functional cookies for logged in users is perfectly fine though, as registration itself is likely a process where users can be informed of such personal identification and is an active decision by the user.

saying "the site needs it to function" and tracking users first party only is NOT a way around GDPR, as much as this narrative gets retold.

in short: it's not about cookies and third parties. The law is purposefully formulated in a way that isn't scoped on technicalities and seeks to prevent such "workarounds".

I would love to see more details disclosed by GitHub about HOW exactly they implemented this, as i am certain they have enough professional legal councel to have digged deep into this question.
It's be nicer if the Mayer herself paid the fine, not the city of Paris. She did the hiring after all, so she should be the one punished.
Part of the problem is that when it first passed, the advice was to just add a cookie banner no matter what to be safe, since no one really understood the law and exactly when it did or did not apply.
Haha we both did laugh at this one.

I mean we were sick of doing it when we trying to build a product whos core value prop was different because auth was a distraction. We wanted to focus. Now that we're focussing ON auth, we are happy to do it cause it is the core product
Yeah, I really wouldn't recommend doing this in a city. Even though the output power probably isn't much, there will be so many spurious emissions and harmonics that you don't know who you'll interfere with.
I don't remember ever doing a proper write up of that project, I was hip deep into all kinds of esoteric computing a few years ago (which started with brainfuck and ended with computing fabrics). Fascinating stuff. I was not aware of the Amulet processor, I will definitely look into that, thank you very much for the pointer.

edit: http://apt.cs.manchester.ac.uk/projects/processors/amulet/AM...

They apparently almost got it deployed commercially, which would have been fairly big news.
If a thing annoys you it'll probably annoy a lot of people that are probably willing to pay to solve the problem.
In stock GPU selection at some European retailers:

OverclockersUK: 5700XT, 1050 Ti, 1030

Komplett.ie: GT 1030 and some random Quadro

computeruniverse.net: 1650 Ti, GT 710, RTX 3090 (for $2400)

scan.co.uk: Teslas, Quadros, GT 1030, GT 710, GT 210

That's it. No other RX 5000, no RTX 2000, no RTX 3000, no RX 6000.

So that's two of them don't even have gaming GPUs in stock, as an entire product category, and the others you get some last gen low end cards and one retailer with a 5700XT. It's a little more noticeable here.
That's a good point. Microsoft has been much less heavy handed than I expected. But your point about how the data is used, I am very curious too. I wonder if they'd be willing to make the privacy policy readable?..
I made a completely async. HTTP app. server and then added a distibuted async. JSON database on top:

https://github.com/tinspin/rupy

The problem with async. is that once you add one thing as async., you need to change everything to be async. for it to work well!

That said time is the hardest thing that humans have to deal with, we simply are not built to understand it.
I find this to be true. I sleep in 90-minute sleep cycles. I time my morning alarm thus (adding 10-15 minutes for initial spindown).

When I wake up, even if it's 4.5hrs, my brain is typically going a mile-a-minute. There's so much I want to accomplish, it's hard to be mindful and go back to sleep (so I rarely do, especially if it's 'only' 6hrs vs. the 7.5 I seem to need).

I looked back at my sleep logs, and I've slept longer than 7.5 only a handful of times in 2020, and it's always correlated with several nights of 1.5, 3, or 4.5 hrs.
> Then browser vendors can ship a delete all non same origin cookies on tab close or something.

That doesn't prevent Facebook or Twitter or advertisers in general from tracking you across dozens of pages or more, it just means that they'll have to issue you a new cookie each session.
The EU cookie ban should've just been a ban on third-party cookies, then we wouldn't be in this mess. Props on GitHub for following the rules right!
Must-Knowns About Image Optimization
Gotta love some good customer flattery
The switch from from DOS-based Windows to NT took place over many years: development started in 1989, the first release was in 1993 and the switch only really completed in 2001 when Windows XP was released, which was the first NT release targetted at consumers. That's well over a decade. Microsoft bet a huge amount of resources on NT because they could see that DOS was never going to work on in the long term, especially on servers. There's no reason for them to spend so much resources and time on a switch a *nix kernel when there's (currently) nothing like that at stake with the NT kernel.

Longhorn was the codename for Vista, which just used the same NT kernel as before (with some feature improvements, just like in every new Windows release).
Fabulous painting. That title!
Hm I tried "fixing" it it with return value optimization, like:

Data val(uint8_t c) {
Data tmp = { c };
return tmp;
}

but it made it worse?
It's a pain point. It's always a good place to plant your flag.
That's awesome! The thing that would make it valuable to me would be to send links to friends or family that have never heard of Cloudflare. If it got tied into Cloudflare Teams or something that added even the tiniest bit of friction it would significantly devalue it IMO. For example, I'd consider OAuth "log in with X platform" to be too much friction. Signing up for an account somewhere would never happen, at least for my use case.

The ideal scenario for me would be if I'm on the phone or video conferencing with someone and can send a link to their email that would grant them instant access with a single click, plus repeat access by doing the one-time-pin flow.

Do you know of any Cloudflare products that would let me build something like that one-time-pin auth flow into a user facing app driven by Workers? Most of the info I can find seems to assume it's going to be used to protect internal resources for companies and the pricing would never work for a user facing app. I might just be missing it though. It took me a while to figure out MS has Azure B2B vs Azure AD which is a similar scenario.

Just rouging it out in my head, I think (I'm probably getting some of it wrong) I could build something like that that's really inexpensive to run using Workers. I'm thinking something like 1 invocation for "unauthorized", a second for the auth request + JWT generation + email link, and a +1 per request cost for a worker to check the JWT / resource request.

IIRC Workers are $0.50/million runs with KV to match, so I could do _a lot_ of authenticating for $5. Compare that to something like Cognito where it's $275 USD for your second 50k users and the one-time-pin style auth running on Workers starts to feel like a good option for low value accounts that don't require a sophisticated auth system with 2FA, etc..

I say that in the context of thinking about a product where people would log in so infrequently they'd probably be doing a password reset anyway. Or they could just be like my parents where every login is a password reset. Lol.
How can a lawsuit have censored content? Surely "Not only must Justice be done; it must also be seen to be done.", and if one cannot see the documents then how can one see that the deliberations and decision make sense?
Ask HN: How do you cope with ever increasing complexity of software ecosystems?
How do you cope with the accelerated increase in complexity of the software ecosystems?

Everyday a new tech, a new framework, a new tool, a new language.

Particularly in the Cloud world, the complexity is just shooting up like crazy.

For any engineer who wants to stay competent, doesn't it feel like too much of a stretch - to get shit done and keep up with everything that's changing around always?

How are you folks managing it? Any tips and tricks for those finding this a daunting thing?

Please share your views! Thanks!
If calories in the bars are equal, and if your body can absorb the same number of calories from the food, and if your metabolism stays the same on the different kinds of foods, and if you have the self-discipline to eat only the same number of calories when the sugar rush from the chocolate bar wears off and you want another.
Unless you live underground, then you'll just look like the rest of the ground.

EDIT: On a more general case, I wonder how expensive and feasible it would be to cover the roof/ceiling and walls with an array of 9ghz emitting "pixels" with the wire mesh behind that. Then show the satellites whatever image you want. Make it look like funny stuff is going on inside for their own amusement.

Wouldn't be able to account for the different angles the satellite might take pictures from, though. Unless you track it.
Go on ARM and Beyond
Huh, last time it was contractor treatment issue. Make a show of protest and then get back to desk at work. I wish these world leading AI ethics researchers show some ethical spine and at least go on strike if not resign until management come to talking table and meet their partial and full demands.
Facebook and Instagram disable features in Europe
This is what they were created for. I think they were more diligent when the USPS was the primary telecommunication medium, even after telegraph and later phone developed.

Now, though letters matter less, parcels are increasingly important, especially given the pandemic. So you'd think they'd be interested in parcel theft.
Hi everyone who doubts privacy is important. This is just one real world example as to why privacy matters even if you have nothing to hide.
> That feels like an abrogation of responsibility.

How often are people who deal with OS packages working on kernel level vulnerabilities or are dealing with microcode for CPUs? If someone is working on libc or libcurl are they supposed to follow and track all of the kernel level issues for every place the code would run?

I would argue that someone working on libcurl is working at a different layer in the stack than someone working on a kernel. libcurl can run on multiple kernels.

The same idea of layers is true when you're talking about someone working on a nodejs app and those OS layers.

> To put it another way, there are two realities:
> (A) No tooling support is provided to address a risk efficiently and quickly = no one addresses the risk
> (B) Efficient, effective tooling is built, maintained as platform evolves, and advertised to the community = everyone does what they should

I think Kelsey Hightower said it best when he said that Kubernetes is a platform for building platforms. I would argue that container systems in general are platforms for building platforms. I know people who spend a bunch of time building a platform on top of k8s at different companies.

Yet, in these conversation we keep coming back to Docker or container platforms as being the platform that app developers _should_ interact with. App devs speaking out, people like Kelsey speaking up, and security issues like this all say that maybe that _should_ is wrong.
Sure, but you left out the actual situation:

"If you eat dinner today, I'll quit my job" - then, you fire them and get on with dinner.
Is the implication that old black and Asian politicians don't read newspapers? Or that they don't have the same incentives to support Facebook?
My house has tile floors which get visibly filthy really quickly. I have a roomba and I personally clean the floors quite often manually. In my parents house which had wall to wall carpet, they would vacuum relatively infrequently but the same amount of dirt was likely being tracked in and around. Their house was more dusty than mine seems to be because of the fact that carpet tends to hide how "dirty" it is.
I hate the "hacking tools" category. I can't have a copy of netcat on my work machine because it gets flagged as a "hacking tool" and automatically deleted.
Scalpers are also proving that companies can charge more. People laughed at the price of the AirPods Max, but they're selling very consistently and quickly on ebay for 750+
I really like the “local” grid idea: visible only around the zone of interest.

Maybe the first time I see something like this?
But wouldn't that be asked for at the same time as signing the EULA, i.e. at account creation? If you're avoiding banners, I can't think where else you'd put it.
(no longer at cloudflare)

This is the TOS for cloudflare.com, not the TOS for cloudflare's services, I believe.

See https://www.cloudflare.com/terms/ for the self-serve plan TOS, for example.
True. Granted, the marketing material that I saw was 20+ years ago, and the recording was still done with videotape. One product would superimpose a text feed of the register tape on the video, so they were recorded simultaneously.
Must-Have Website Features to Boost E-Commerce Conversion Rates
I may be paranoid, but this looks like kinda a psyops move to make the adversaries unsure of the us navys real capability.
I'm looking for this as well.

The only think I found was https://www.adafruit.com/product/3686, but thats 4x the price of aliexpress.
Someone else out there is equally indignant that government would let capital take any nonzero profit off the fruits of publicly funded research.
It can, first iteration used the Do-not-track header, but that died in the standardization process, now there are a movement for the Global Privacy Control header that you can read about here: https://globalprivacycontrol.org/
I haven't done any kernel programming yet, but the curiosity has been there. What has been your main difficulty in finding the right APIs? Lack of documentation? Poor or unclear documentation? Something else?
If someone states I will do X if you don't do Y, it still comes down to the person choosing to take some action X. If you don't take action Y, it is still on the first person to choose to take action X. She may have intended to hand in her resignation, but she did not get the chance.

She said if these conditions are not met, I will work with you on an end date. That's not what happened, she was terminated immediately with the rationalization being that they didn't like the tone of the email she sent to the Google Brain Women and Allies listserv. That alone points to it being a termination.

Is she largely responsible for her employment ending at Google. You could say yes, but fact is that Google is the one who cut things off.
Does all this inferior execution boil down to Market orders? I learned early on (iirc from Jim Cramer!) to use limit orders.

There would never be an inferior execution with limit orders, right?

EDIT: this comment seems to speak to the topic: https://news.ycombinator.com/item?id=25456763

according to ^^ even if you limit buy for $100 they have a duty to get you $99 if it's available.
Notes on Cross-Compiling Rust on a Mac for a Raspberry Pi
I confess I don't really understand the controversy here. I thought everyone who cared was already aware of how RH makes its money, and everyone who didn't was still getting a better deal per trade than they would have with traditional brokers. I ended up switching away from RH once my trades for big enough that other brokers were effectively taking less, but I'm still really grateful that I was able to learn the ins and outs of standard speculation with a $500 account
(xz is a compression container format that doesn't imply any particular compression algorithm. It has a concept of "filters" that are applied in "chains" over "blocks". One filter happens to be "lzma2", but to say xz "uses lzma2" is a bit of a confusing mental model, as xz could just as easily "use zstd" if someone allocated a filter ID for such.)
Curious if you found the article interesting anyway.
Perhaps that's the unfortunate penalty for allowing the unregulated introduction of facial recognition technology everywhere and anywhere without a proper debate. Simply violating people's privacy just because technology has enabled the practice isn't acceptable.

Remember, no one first asked any of us for our permission to be tracked by our physical features just for walking down the street and going about our daily business as we've always done, nevertheless this all-pervasive technology was introduced without our permission nor with any public debate.

I posted this comment several hours ago in a duplicate of this story. Having now had time to think about it, I seriously believe we're just beginning to see the beginnings of a new war on privacy and that this new technology has now given ordinary people the means of fighting back. If this war escalates because of criminals/bad actors then don't blame us—we didn't start it:

"Perhaps we'll all be wearing them sooner than we think out of necessity to counter facial recognition.

(It's just occurred to me that a blank conformal OLED version of the mask would be the ultimate form — one's face could dynamically change on-the-fly whilst one's out and about. That would give all-pervasive surveillance systems a decent run for their money.) ;-)"
CubeRover Wheel Testing Videos NASA and Astrobotic
Sounds like this may pair with something like OSO for Python (osohq.com), thanks! Do you plan to directly support language specific client libraries or are you looking for community support of that work?