skysight-inc/HackerNews huggingface dataset:
Yes, I'd say at worst its 20% slower. The implementation is naive and readable (and therefor hackable). I did not have the time to implement all the heuristics that make STL as fast as it. The goal is hackability and ease of use (think text book function examples), while giving embedded engineers (or even desktop engineers with an aversion to C++) a chance to focus on getting their work done.

That, and lighting fast compile times, where programming feels like (oh, the heresy) a _drastically reduced C++_.
There is a basic problem that if you see an obvious problem with a product listing on AMZN but you didn't buy the product they could care less.

Sometimes the listing is obviously a scam, sometimes it is is just something that could be better: somebody is selling a box of assorted TTL ICs for $30 which were ill chosen for any use than testing your logic tester. (e.g. with $30 of quad-NANDs you can build a lot)

In the early 2000's I would avoid Staples to avoid crap brands like VTech and go online to seek out Plantronics instead. AMZN got a reputation as a fair dealer for things like HDMI cables compared to a place like Best Buy which might only stock a $99 monster cable.

Slowly AMZN got worse and I have less trust in the marketplace products than I did before,
At a 10x difference, it should clue you in that something is wrong. Choice quotes from a UK Gov page:

> A report published by the FSA has found it is not possible to compare foodborne disease rates effectively between countries.

> The report concludes that attempting to accurately compare different countries’ foodborne disease rates is an almost impossible task. The only way you could attempt this would be for different countries to have the same type of study with the exact same study specifications, over the same time period. Even then, differences in underlying surveillance data available in each country could cause issues, particularly in terms of determining what proportion of IID cases are due to food.

https://www.food.gov.uk/news-alerts/news/report-into-interna...
Zstandard uses finite state entropy (FSE) for entropy encoding (after finding repeats), which in turn us based on asymmetric numeral system (ANS) encoding.

The canonical paper on ANS is indecipherable to me (i honestly think it's poorly written, it's not just me, although it is partly me!), but this seems like a clearer explanation (although i still don't entirely get it):

https://bjlkeng.github.io/posts/lossless-compression-with-as...
Technical preview version of Parallels 16 now available for M1 Macs
I don't trust Wells Fargo to handle cryptocurrency securely. Don't they have rampant internal fraud problems already?
Clever use of static IPs, loved the write up!
why only two months?
What is the real value in a privacy policy? I assumed they were similar to EULAs - totally unenforceable. Are there actually any legal repercussions if they lie in their privacy policy? Or is it just ill will that might be accrued (and probably quickly forgotten) if they are found out to have violated their own privacy policy?
Shoutout to the extension "I don't care about cookies" that removes all these banners automatically.

[1]: https://www.i-dont-care-about-cookies.eu/

[2]: https://addons.mozilla.org/en-US/firefox/addon/i-dont-care-a...

[3]: https://chrome.google.com/webstore/detail/i-dont-care-about-...
Could you please stop creating accounts like this? We ban accounts that do that. It's in the site guidelines: https://news.ycombinator.com/newsguidelines.html.

For HN to be a community, users need some identity for other users to relate to. Otherwise we may as well have no usernames and no community, and that would be a different kind of forum. https://hn.algolia.com/?sort=byDate&dateRange=all&type=comme...

You needn't use your real name, of course.
"chip fabs is in Korea, China, Taiwan and Japan. Hence, 85% "

that is going to change very soon as the european union is going to make their own supply chain in fabrication of chips. for security reasons.
My thoughts too. I ran a few damaged photos to see how it behaved.[1]

[1] https://imgur.com/a/rW7Ac7k

----------

[Edit] It appears Imgur has decided against preserving image upload order and I can't change it now. The first image should be at the bottom. Sorry!
>Can you defeat gravity by somehow energizing matter to affect its spin and acceleration

Except there is no mechanism through which this could work. That would be like me saying "if I flip these bits arranged in a pentagram fast enough surely this will create an AGI." It doesn't make a bit of sense.
Free Software prioritizes Freedom[0]. Both permissive and copyleft licenses can support this goal. Free Software developers use a permissive license when they judge that best supports their goal of maximizing Freedom (e.g. Ogg Vorbis using a permissive license to encourage people to switch from patent-encumbered MP3).

Open Source Software prioritizes quality. Open Source Software developers do not care about Freedom except as a means to that end. However, almost all Open Source Software is also Free Software, so despite this difference they end up supporting Freedom as a byproduct.

Proprietary software development also prioritizes quality, but the important difference is that proprietary software actively opposes Freedom. The article is discussing priorities, so it's natural for it to compare two methodologies with the same priority, but the two are not conflated. Open Source Software still (usually) provides Freedom, while proprietary software never does, and Freedom still matters even when the developers don't care about it.

[0] https://www.gnu.org/philosophy/free-sw.html
If you want to go the other way, and have the phones ping the network instead of the other way around, there are applications that regularly publish to message queues. The Android app Presence Publisher [1] for example publishes to MQTT.

[1]: https://f-droid.org/en/packages/org.ostrya.presencepublisher...
> On certain browsers, password managers do not work with a shadow-root.

Eek. Worse than that, certain browsers (e.g. IE11) don't support Shadow DOM at all! You may wish to consider widening your browser support.
> since I've moved away from an AZERTY to a QWERTY I cannot imagine ever reverting back, but on the other hand this means no accent is directly accessible

You can use QWERTY with accents very easily with "International keyboard with dead keys"[1]. You can configure OS to switch keyboard with Alt+Shift to have the regular QWERTY and the International-QWERTY when you need it.

[1] https://web.cortland.edu/ponterior/keyboard/#:~:text=The%20U....
I don't find a convincing argument to use people living in traditional societies in Tanzania to illuminate the sleeping cycles of people in industrialized Western societies 100 years ago for people who had to be at a factory or office by 8am.
They also probably had several processed snacks throughout the day like chips and oreos.
Yes, thats exactly it - from our experience with talking to devs and startups. Once the project starts scaling, things change
iPhone 6S captures descent after it falls 2,000ft from a plane
My issue with this "processing" designation is that its meaningless once we enter practice.

> But the reality is that 99% of processing is directed at making foods hyper-palatable, calorically dense, and easy to digest. Because that's what consumers crave.

Yes, people want unhealthy foods.

You can buy a perfectly organic, fully unprocessed meal from Panda Express. Its called rice stir-fry, and as long as you hold back the soy sauce its "unprocessed".

---------------

A friend of mine went vegetarian for better health. He ended up eating potato chips and gaining weight. Yes, there's a general "vegetables are usually better for you than meat", but, there's no guarantee that following such vague advice helps anyone.

You need to think harder, and eat smarter than that if you want a better diet. This "unprocessed vs ultraprocessed" designation is too vague, too unhelpful. It will just cause people to eat Panda Express all day every day.
> But then there's the fact that I don't trust Google with my user data and that I fear that at any time they could start charging onerous amounts for the service, or worse.

What, Google would never do that :)

But seriously, I think that developer focused solutions are safer than other products, especially if they are tied to revenue and are fully established.

A quick scan of https://killedbygoogle.com/ shows a few dev focused products, but more consumer focused ones.
It probably affects everyone a little differently, I know if I start smoking every day my brain is noticeably slower. I can still get by but I cannot visualize and store as much code in my mind at one time.

Adversely tons of sleep, creatine and coffee seem to expand my context and I can hold a lot more simultaneously.

Life is also not about being the best programmer though, so I would definitely trade ability for comfort if weed was offering that.
No, but here's an interview with the founder about how it came to be:

http://libregraphicsworld.org/blog/entry/interview-with-pat-...

Hopefully others can learn from him and forge their own collaborative communities.
Sure, but this is an implementation detail. It is designed to be consistent in the style of and support the affordances of more traditional single-node RDBMS.
A lot depends on the product. A custom object often requires an advance raw material deposit and even progress payments as the item is made. On the other hand a mass production widget by a start-up can legit use a fund me campaign. That said, there have been some fund-me fails - some were frauds, some were mangled management - each case differs.
Then there are the stock frauds via booked sales counted as true sales. There is also the copy risk = you debag the cat, and someone else with $$ makes it and Amazons it = you are cooked. Sometimes you have some protective IP to prevent this.
In many cases you both need to know each other to form a basis of trust you are both happy with.
So you see the many shades of gray.
Thanks for the comment and disclosure :)

We do intend to be a full featured solution. Though, since we are relatively new, we only provide email and password.

That being said, our approach is modular in nature so that users get only what they want.
I think this is great, and I would love to see the automatic builds with preview urls for commits and branches extended to Cloudflare Workers.

They will first need to raise the script limit, which will mean rethinking how worker code is deployed to the edge. If you're going to have potentially hundreds of preview versions deployed per script, you can't eagerly push it to every server worldwide.

But in turn solving that problem and raising that limit will also open up Cloudflare Workers for more potential use cases. Currently if you want to deploy multi-tenant applications with customized per-tenant code on workers you would run out of scripts and need to set each tenant up with their own workers account.
If you want to read more about how shady sellers abuse the system, and why it's so hard to deal with it, I recommend this well written medium article:

https://medium.com/swlh/unaccountable-chinese-retailers-thre...
Is SuperTokens multitenant capable? My understanding is that keycloak suffers in a multitenant enviroment with a sufficiently high number of tenants.
> We think that Auth0, Firebase etc are great services but auth is complex.

Yep that tends to happen when you are supporting SSO and certifications like OpenID Connect. Using one SSO portal to handle mobile, spa, web apps and code auth with evolving techniques like PCRE. That's probably why some customisations are not available too because it breaks the standard. You will just end up with the same models once you've implemented all the same features. Okta, Auth0 and others are all really similar because of the standards behind them not because they thrive to be complex.
Thank you.

In all my (extensive) commentary in this topic, I feel this is the first response that addresses the root of my confusion in a way I can understand. Sincerely, this is helpful.
It's possible they rejected it simply because it didn't review the product.

A review that expresses an opinion about the product and also mentions that other reviewers are being paid might be accepted.
Also, at [1] there's a filter list you can use instead of installing the extension.
I thought this too then I lived in a room without shades for months. Amazing how I started to wake up earlier and earlier and get tired earlier and earlier.
Is there any legitimacy to the notion their b-model was built effectively on 'piracy' and that they ignored take down requests?
Lone developers have the option of dual licensing, and I think more people should do that. Use GPLv3 or even AGPL for the free version and offer commercial license as well.
It's important to note the methodology employed in the original paper used "did not have meaningful structure or variable names" [1]. If the code's like that, then yes it's less like reading a language and more like cryptic puzzles.

But limitedness of the methodology means the conclusion can't apply to software development at large, something that the title misleads us about.

[1]: https://twitter.com/wcrichton/status/1339235494102753280
It's also common to see "It's open source, fix it yourself."
And Snowden's job was to keep the US government's spy systems working. So what?

Just because it's their "job" doesn't make it right or not worthy of whistleblowing.

If companies are doing bad things we want whistleblowers to tell us. I just don't understand your argument - "you can do bad things if it's your job." No. It doesn't work that way.
A Breakthrough (of the Year) crossword puzzle
> I'm just a little uncomfortable with a feature that uses diffs for purposes other than display for humans

Git is based on the idea that it is generally safe to do that. You can't do any kind of work with git other than commits on your own local repo without relying on diffs and merges based on diffs.
Our plans to relaunch verification and what’s next
Not public AFAIK. But multiple news agencies cite US officials who make the claim it was Cozy Bear / APT29 [1].

Microsoft claims [2], "We believe this is nation-state activity at significant scale ... Because of the sophistication of the techniques and operational security capabilities of the actor, we want to encourage greater scrutiny by the broader community..."

[1] https://en.wikipedia.org/wiki/Cozy_Bear

[2] https://blogs.microsoft.com/on-the-issues/2020/12/13/custome...
I wonder if the review would have been allowed if it was focused on the actual product and then mentioned that the company pays for reviews. What if the product is great and people are giving it 5 star reviews because it's great, and not just the $10?
I got the same kind of card ordering a laptop charger earlier this year. Tried to report it to Amazon. Got back a canned response telling me to report individual reviews. Amazon doesn't care.
Dapper, a Large-Scale Distributed Systems Tracing Infrastructure [pdf]
Yeah, unfortunately that whole trade matter got well out of hand before any of us realized it.
Bouncy Castle cryptography bug enables easy password brute-force and auth bypass
Trichinosis is also very well controlled in many third world countries that just have a bunch of good local regulation agencies. The FDA shines more on the regulation of mass produced packaged food on an unprecedented scale. The only other countries that can independently feed their populations with mass produced packaged nutritious food are some Asian countries that also have rich governments. Even in Europe they piggyback on work that the FDA does via international cooperation.
While this is the prevalent quotation mark used in France, " starts to catch on a bit. In my opinion, it is mainly due to the fact that « and » are not present on French keyboard layouts (and rather rare in general): https://en.wikipedia.org/wiki/Quotation_mark#Keyboard_layout...

Another issue is that you are supposed to type a non-braking space inside, which is a hassle, and often not present on keyboards either. Word processors usually take care of both these issues, replacing " with the appropriate (opening or closing) guillemet + space.

Spaces are also used in Switzerland, but narrow (&nnbsp; instead of &nbsp;).
For certain types of products Amazon is degenerating into a virtual big-box warehouse store, one of those places where you basically have this giant pile of crap to sift through.
What about the day after?
What does this mean for people with severe Delayed Phase Sleep Syndrome (DSPS)? I do not feel the need for sleep until usually about 2am, and I find it exceedingly difficult to wake up before 10am.

And yes, it's made it extremely difficult to live a "normal" life like your typical person who can wake up at 7am without issue. It's been a problem with relationships, poor performance in school, issues in promotions and work performance, etc.
Oh! Thanks for the heads up! I have created an issue about this on our github, referencing this comment.
> Going public comes with a lot of work, expectations, obligations, and has a high requirement for corporate maturity.

>I think what we actually want is the ability for us normal people to invest in private companies more easily

I think these two sentiments both make sense and are in tension with one another. A lot of the work of going public is putting the company into a state that outsiders can understand. Preparing a prospectus isn't just writing down what exists, it's ensuring that there are controls in place to check that expectations are being fulfilled.

An individual can decide that one or more of the requirements to go public aren't important to their particular investment strategy, but that choice involves a certain level of expertise about how public companies work v.s. how this particular private company works. So you're really suggesting that we should let individuals make their own choices about if the current circumstances of a private company make it suitable for investment. That's, as you said, a lot of work. We generally demand companies do that work before they can receive money from public markets. It's unfair, because it means wealthy individuals can get in early on companies, but the whole reason they can decide which companies to get into early is that their wealth gives them access to the resources to evaluate these companies. Allowing people to enter into investments they don't have the resources to evaluate is not going to, on average, help people build wealth.

Personally, I think we could have more "levels" of public-ness. But I'm also aware of the penny-stock scams of the recent decades and think that opening up private companies to early investment has all of the same problems.
I purchased the same webcam for my high school sophomore in September 2020, as school restarted (all online for him). The box contained a $20 "gift card" if I emailed proof of my 5-star review. It looks identical to the one I received (including the email address). Only the reward is different.

I didn't try to write a review, I notified customer service in an attempt to report the seller.

I documented everything including photos, my exchange with Amazon customer service, and the confirmation from the seller that they would pay me $20 for a 5-star review. I did not take the money offered ... I was appalled at the situation and more than a little angry that I had been tricked by bogus reviews.

Here's what happened when I reported the seller:

Me: Hi. The box for this product contained a card that says “Amazon $20 gift card” and looks like a gift card, but the back says I have to give a 5 star review and send my order information to an outlook email address. Is this legitimate? Is it really a $20 Amazon gift card?

Amazon: Thank you so much for your information on this, I will certainly pass it along here so that we can check this promotion or offer directly with the seller. Because I am not seeing that advertised on the item at all And would not be capable of confirming if that is a legit Amazon gift card because, I do not see that offer on the item

Me: So what should I do?

Amazon: My best suggestion would be to contact the seller directly for this through this link [redacted] So that you can confirm directly with them if this is legit or not Certainly giving away gift cards for good reviews is not professional And I have to report the seller for that

Me: I thought this type of offer was forbidden by Amazon’s own policies for sellers. But I will contact them using the link you sent to ask them if that’s what you recommend.

Even though the CSR reported the seller, and I confirmed with the seller through Amazon's own communication system that they were paying $20 per 5 star review, nothing happened to the seller. The item (a webcam) is still for sale on Amazon, with thousands of additional 5-star reviews - more than 12,000 now, compared to 3,266 when I let Amazon know how they were gaming the reviews in September.

Once again, the good guys (in the case, customers and honest sellers) lose out while the bad guys win, with no repercussions.
There is lots of evidence that the "best and brightest" are also totally incapable of defending and maintaining networks against skilled individuals, let alone skilled organizations, let alone state actors. I can not think of a single commercial organization which would even dare to claim they could protect against state actors or even provide any legally binding, quantitative assessment of their security that should inspire any confidence in their ability to defend against a single competent individual. You can just look to Google Project Zero to see a continuous stream of evidence of singular skilled professionals breaching these systems within mere weeks to months. Hardly comparable to the resources of state actors who can deploy hundreds or thousands of skilled professionals for years. To go from being unable to defend against skilled individuals to being able to defend against state actors would require on the order of a 100,000% improvement in capability by the "best and brightest".
In order to attract jobs back to USA from China you can simply stop buying goods from China.

It’s down to the individual shopper to think twice before buying the imported product manufactured with unethical labour.
That extension hides, and sometimes accepts cookie consent popups for tracking cookies, it's harmful for your privacy, and should only be installed if you literally don't care about cookies, nor your privacy.
In case you've been skipping the intros of your tech podcasts, TWiT hosts a large number of tech podcasts.
I don't think intelligence agencies are generally keen on revealing their methods, but I understand why you're asking.
I think this is a little different. Demanding legal authority is all well and good. In a country where there is strong rule of law, like the U.S., then you should be in good shape as long as your nose is squeaky clean. This guy would not likely have gone to jail if he didn't do crime.

It's another story in a country where there is weak rule of law, or where legal authority gives the government powers that we in the U.S. consider oppressive.
The official Google Firebase SDK... I didn't know there were third-party SDKs. All the React layer (views, state management, etc.) was my own.
> A review telling me that a seller is doing shady things tells me nothing about the product

It's not telling you anything about the product, but it also making you aware that those other review you thought were telling you something about the product, actually are not.

In essence you are saying that it is a reasonable stance to remove off-topic bad reviews, but keep off-topic good reviews.