skysight-inc/HackerNews huggingface dataset:
> It actually feels like this app was designed for people who only use one finger to type and the other hand driving a mouse all day.

I think there's a great product somewhere in Notion – the blending of wiki/database/etc is great – but THIS is the biggest issue I have with it. Everything I do just takes that bit longer than software that I choose to use, because everything is designed around the mouse.

Keyboard shortcuts aren't enough to create a good UX for the keyboard, the whole UX needs consideration, and Notion has unfortunately failed on that.

For a while their text editor was very poor, to the point where my colleagues and I all edited text in other software and copied it in. This has improved a lot in the last year or so, but there are still plenty of issues at the block level and upwards, it's just the word-level that got better.
And their mac app isn't electron garbage! It's amazing that they can pull off real native apps for each platform yet companies like Slack with tons of cash can't.
That's literally what insurers are doing with Fitbit + corporate wellness plans right now.
Yes in some regards. Both offer eventloops (in GCD: dispatch queues), which run small chunks of code which belongs to independent tasks on the same thread.

However there are some differences:

- Tokio is focussed on running async/await based code, whereas libdispatch currently mostly targets running callbacks/continuations. This might change once Swift offers async/await support, which for sure could run on top of GCD queues.

- GCD queues provide a lot more fine-grained control. users can exactly specify on which queue to run some code on. And tasks can jump between code. There might also be a dedicated main thread (UI) queue. Tokio just spins up a single queue which runs all code, which might be empowered by a multithreaded executor. This makes it less usable for UI.
Alternatively use async everywhere from the start and your headaches go away too. It's mixing blocking code with async code that causes issues.
The point is this

> AlphaZero
used the set of legal actions obtained from the simulator to mask the
policy network at interior nodes. MuZero does not perform any masking
within the search tree, but only masks legal actions at the root of the
search tree where the set of available actions is directly observed. The
policy network rapidly learns to exclude actions that are unavailable,
simply because they are never selected.

MuZero still masks legal moves, but only at the root.
All its parts are eventually trained on the output of its root, and so learn the legal moves.

The justify this root level masking by how the Atari will only allow you to perform legal moves, while a weak enough player may consider illegal moves while planning in your head.

The main thing that's slightly "hidden under the rug" is that for "masking" to make sense in the first place, MuZero needs to know a set of all moves that may be legal at some point in the games.
I'm guessing 1% is actually common. Mine:

"You are 1% basic. Oh wow Penelope Trappes and Titi Robin! Your taste is so obscure that's so cool I bet you're super interesting..

You're too trendy for your own good. You only listen to music made in the last year."
Meanwhile I was clamoring to find a copy of DesqView as fast as I could, because my favorite MOD player had a DOS shell, but you had to exit your shelled-out program to return to the player and pick another song.

That was acceptable for a quick dial-up-and-toss-a-mail-packet session, but not for door games or chat, so the prospect of being able to run something in an _alternate_ task, not a _parent_ task, was incredibly attractive.
Ads are never, ever reasonable. Never let other companies brain hack your users. It's unethical and an awful UX. No one is ever pleased to see an ad.

It's not like we can't do instant messaging without ads. I have used IRC every day for the past 15 years. Not every project needs a business model to work and not every approach is justified because the business needs it.
HTTPS client certs are one of my favorite authn mechanisms for certain purposes, and I'm planning to next use them for an IoT appliance.
We are talking about Rust. There is no consensus in Rust.
> complete and working OS

What is a "complete OS"? You always need to install some new packages.
Unless you inserted a cartridge into the C64 ... in which case there was no typing required!
There's ureq for sync/blocking HTTP requests.
All those points can be summed up as: The point of web PKI is that the decision of who to trust and who not is not supposed to rest at the end user but at some central authority.

Then however, we get to the political question who exactly that central authority should be and why.

> Like, just last week the browsers had to remove a certificate authority from their root cert programs because Kazakhstan was issuing certificates to MiTM traffic.

I may have misunderstood the incident, but wasn't it such that the CA was not even one of the built-ins, but a "custom" root CA that all users were required to install on their systems? As such, the block was more equivalent to block a specific to TOFU key.

Of course, blocking the MITM CA won't magically turn off the ISP's MITM proxy. It will simply make it so that kazhakh citizens can't access any web sites at all until the government hopefully caves and turns off the proxy.
None of this matters. In the end, you die and nobody will remember shit about you. Or about anyone else. Because the world also will die.
A lot of these complaints seem to take me back many years - when I still worked in tech as a profession. Mainly because they are the same frustrations with decades-old attempts at creating a WYSIWYG that is remotely successful. It is interesting to see that this space is still difficult to solve.
LinkedIn makes it pretty simple to get many recruiter contacts a day. These are not qualified leads, and many are dialing for dollars -- hoping to fill a vacancy with a warm body long enough to get the agency fee.

Most people ignore these contacts, so it does kinda work to match needy recruiters with underemployed IT pros. But when you're already at FAANG making 400k a year, it can take a recruiter phone call, two tech screens, and an onsite before compensation comes up, and you're now invested like 10 hours into a negotiation where your BATNA exceeds whatever budget they have written down. I've had one recruiter get a bit angry even over it, as if my number was unrealistic (I assume they were unprepared to make a competitive offer).

Since there are so many of these lowball recruiters, some people resort to screening them out up front with a salary negotiation.
> If you're willing to take lower salaries, lower your minimal salary requirements to receive more of them.

To me that feels more complicated in Silicon Valley with equity. Once a minimum salary is met, I'll care about total compensation, not just the base salary. I'd be nervous that mentioning a low salary could lower an offer, and I don't a have reasonable number for salary I would accept if the company doesn't give much equity.
I'd say history remembers those who were successful. Being first doesn't matter if you can't sell what you make: Steve Jobs didn't invent the GUI and Henry Ford invented neither the assembly line nor the car. The LG Prada was the first phone with a capacitive touchscreen and nobody gives a crap about that.
> This mechanism is implemented by Apache httpd, Tomcat and pretty much every classic application server.

True, but there's a reason that Apache usage is declining at the rate that it is.
It took Steam years to get to that point though. It was a piece of #$#$ when it first launched.
Blog post below on how the hate5six creator made this algorithm. Boils down to using the lyrics and community listening habits from last.fm to build a similarity graph for artists, then community detection to group similar artists.

https://medium.com/@hate5six/sage-an-artificially-intelligen...
I think that you're misrepresenting the process of solving these problems. Recognising that you need to use a certain data structure or that a problem falls in a larger class of similar problems is a skill that you can develop. Just because you get better at it with practice, doesn't mean that it's the same as memorization or that there is some special trick to solving each problem.
One can argue whether it's good or bad but, in an online (or mail order) context, companies absolutely know in general who their customers are. Which has, as I say, both positives and negatives. Mostly I think it's a positive so long as the seller doesn't abuse it.
Interestingly most of the examples it gave me for being stuck in the early 2010s were from the second half of the decade.
Oh okay. So it's a technique that essentially allows the tree search to be less "pedantic" about the rules in future states. Very interesting.

I would love to see how this might go for more complicated games such as NES adventure games and RPGs.
A friend once took the train from Beijing to Pyongyang, changing trains in Dandong, where the Yalu River Broken Bridge (half of an old bridge damaged during the Korean war, next to the new "Sino-Korean Friendship Bridge" [1,2]) serves as a reminder of that war.

On the train, they met some North Koreans and talked to them (in North Korea it is pretty impossible to talk to people, thanks to the government minders. So, this was still in China, and they were guarded and circumspect, but talked.). They said that they had just come from a work assignment in Uganda, doing construction. The friend asked, what sort of construction, residential or commercial? The reply: "Museums and monuments!"

Yep, that's one thing authoritarian regimes are good at, monumental architecture...

(For example, the Arch of Triumph [3], which, it was pointed out, is 10 m higher than the one in Paris...)

[1] https://goo.gl/maps/MZkFVC7v4sBTisqS7

[2] https://en.wikipedia.org/wiki/Yalu_River_Broken_Bridge

[3] https://koryogroup.com/travel-guide/north-korea-guide-arch-o...

More examples: https://thespaces.com/mapping-pyongyangs-monumental-landmark...
Yup, building libraries on IO traits which then are implemented by the particular runtimes is a good way to have a runtime agnostic library. Ideally the IO traits are defined in the library itself, to make them not again dependent on another moving target. You can provide implementations of the "glue code" for particular runtimes in separate crates to ease integration for users.

Another way to be runtime agnostic is to start a particular runtime as part of your library, which is used internally. The public interface of your library can provide async functions which are agonstic to a particular runtime, since all actions will be deferred/forwarded to an internal runtime. That approach has a bit more overhead, but can ease usage.
Reading this makes me sort of sad that I'll never buy an Oracle product.
True.

But might as well feel as good as practical, while you can. These don’t appear to hurt that. If anything they lead to more enjoyment of the limited time we have.
Not mentioned: passwordless authentication

See:

https://www.microsoft.com/en-us/security/business/identity/p...

https://query.prod.cms.rt.microsoft.com/cms/api/am/binary/RE...

In passwordless authentication, the device creates a public and private key when registered. The private key can only be unlocked using fingerprint or PIN. If an attacker knows the PIN he also needs the device. If he has the device he also needs the PIN.
What you're saying is fair. The poster who called it "casual racism" may well have been jumping to conclusions. It's totally possible they didn't use the most generous interpretation of OP's words hastily accused them of something that was not intended or even present in OP's statement.

If they were alleging bias or bigotry based on nationality, it's not the dictionary definition of racism but it's something equally bad. You and I both know what they were actually alleging, right? So nitpicking the specific term they used is counterproductive to the discussion - especially when there isn't an easy, single word to describe bigotry based on nationality or national origin.

I'm objecting to the logic that goes "racism = bad, X group isn't a race but a nationality/ethnicity/religion/<something else immutable whose -phobia word isn't well known>, therefore this != racism, therefore this != bad". I know you mean well and I hope you understand where I'm coming from.
I don't think this properly describes the situation. If this goes through, Facebook doesn't have to "bake into their service is a fallback for when a user doesn't give them permission", they can just make sites require this permission. If the user declines, the site won't load. Alternatively, the do what you're suggesting, but the site gets no revenue for that user, this will pressure the sites to continually ask for the user to re-enable the permission or change the way the notice shows up so that they eventually accidentally allow it. Either way, nothing will change.
The other day I watched some video from this bearded British Linux nerd about awk, and since then, YouTube just won't stop recommending me videos involving Arabic expats to English-speaking countries.

Thanks YouTube
Rather than comparing it to the authoritarian architecture of the postwar period (which was horrible), I think it's more fair to point out the actual inspiration for Speer. It was the City Beautiful movement and the existing examples of grand boulevards in imperial capitals.

That main boulevard he envisioned lined by monuments and institutions of great importance was a German equivalent of basically Philadelphia's Franklin parkway or Paris' Champs-Elysees. Philadelphia razed entire city neighborhoods only decades earlier to build it.

In fact, an almost identical vision to Speer's Berlin already existed. It was Washington DC.

On a smaller scale, dozens of other cities had already embarqued on similar projects, Brussels Parc du Cinquantenaire is another on, or Budapest's parliament building and Heroes' Square.

Germany was playing catch-up to what was fairly mundane practice. The only thing that gives pause is perhaps the Volkshalle, which has a little too much of a mine-is-bigger vibe when putting it next to DC's congress building.
I miss it so much. Nothing else has come close. I'm surprised Spotify hasn't added a feature like it.
You are probably getting downvoted because this is the best we have right now. We would all love to stop playing whack-a-mole, but for that we need more resources for groups like EFF, not disregard them for what they actually accomplish. If you know any ways or groups more successful in achieving the goals of intellectual freedom, a lot of us are very interested.
> It's their potential customers, who don't know the difference.

Their potential customers (forensic examiners not just in law enforcement, but also corporate investigators, incident response etc.) do know the difference. Being able to get data from the endpoint is exactly what they are after, because the alternative is that some poorly paid soul has to sit and photograph thousands of pages in numerous applications. Having access to the database saves time, reduces interaction with the exhibit and gets metadata which isn't shown on the phone.
Well, the rumors are that Apple is working on their own search engine...

Remember the Apple Maps fiasco with iOS 6? That was because Google wanted more data on the users and Apple refused. So Google left and the whole story was spun as Apple’s fault by the media.
JWT is just a format for passing signed authentication/authorization data between two systems, possibly through untrusted channels (e.g. web browsers, mobile apps).

If the receiver trusts the signer, they can use the data. Sometimes the two systems cannot share a database, or a cookie.

Like everything else, JWT is sometimes used inappropriately.

And of course it's not the only way to pass signed data between two systems. Sometimes it makes sense to create your own equivalent that supports only the pieces you need.

One popular criticism (and historical security risk) of JWT is that the spec allows signing algorithm flexibility. This is easily mitigated, but of course any tool that can be used improperly, will be, by someone.

But honestly, JWT is straightforward, simple, and has good library support across all popular languages. It's a good choice for an API that you expose to groups outside your organization.
Yes. There are some difficult technical issues. In practice, borrow checker works less well on async code than threaded code.

This is partly why I prefer threading over async in Rust. Look, we went through some enormous effort to make threading good and fun again. Why wouldn't you use threading?
I believe the idea is that within a project that uses async functionality, you should only use non-async functions when the logic does not call blocking functionality. If you are mixing async functionality and synchronous functions with/blocking I would consider the latter a defect unless it is handled properly within an asynchronous context.
Loom is going to be a game changer. Hopefully they release it soon.
there is a pithy quote from a Nobel prize winner

There isn't even that! The Nobel laureate is just part of the schtick.
Browsers won't always download all available icons if they don't need to. To test a browser, open its network monitor and hard-refresh the page.
What is different between Notion and Google drive except Notion is sexy?
I think Comic Sans was also used in ESA's presentation of breakthrough black hole photos.
What if you aren't using a browser?

There's no difference between browser authentication via a cookie and app authentication via a token. The cookie stores the session token, the app store the session token.

What if you explicitly want to know that the contents of the auth token aren't modified

There is no content in an auth token — it's a random number.

What if you want to work with a IdP that only provides JWTs to offer centralized authentication and user management?

When there's no choice, there's no choice.
Biden team slams Twitter over plan to wipe followers from White House accounts
> I don't see the evidence against Bob. If I were Bob, my defence would be along the lines of 'The software says there was $x in the office. Then surely all transactions must add up to this number. Your allegations are baseless without the transaction data.'.

Presumably, they have the transaction data from the software, and the transaction data is saying he's lying. Software bugs are perfectly capable of creating bad transactions (i.e. by converting currencies incorrectly, double-submitting transactions, failing to actual cancel orders if the user cancels, etc).

In those cases, the presumption is that the software is working correctly. Those transactions are deemed legitimate because the software is presumed to be working correctly. That is the evidence against Bob; an "infallible" transaction registry that says he's embezzling.

If you are Bob, you have to prove that those transactions aren't legitimate, and never actually occurred. Or that they did occur, but the actual amount transacted was less than what the computer recorded. In essence, Bob is fucked, because he has to prove that something didn't happen. Probably something that he wasn't even there for (since presumably other employees would have handled the actual transaction).
I wish they'd extend the option to the Daily Mixes. Sometimes they throw in a random song into an otherwise perfect Daily Mix.
Show HN: MIDI to Blob Opera Converter
Analyse Your Security Headers
In rust you can block your thread on the completion of an async future. Let other people use async code if they want to, and you can write your code in a syncronous blocking kind of way.
Maybe in your world!
Israeli Cyber Experts Uncover Attack on 85,000 MySQL Servers
To be clear, it looks like the oauth scope they're requesting only allows read-only access to your account. So it's not like they could actually post on your behalf without additional express permissions, barring a Spotify API bug (as far as I understand).

That said of course I agree they should have an explicit privacy policy regardless.
Rosetta was first publicly available with Mac OS X "Tiger" 10.4.4, released in on January 10, 2006; the initial release of "Tiger", 10.4, was released nearly a year prior on April 29, 2005.

Mac OS X "Leopard" 10.5.8 was the last version of Mac OS X that supported booting on PowerPC-based Macs, released August 5, 2009. Apple's final update for the operating system was released in June 2011. An update for Safari and iTunes was released in 2012.

Mac OS X "Snow Leopard" 10.6.8 was the last supported version that contained Rosetta, released August 28, 2009. It became unsupported in late 2014, though it received an update in 2016. For all intents and purposes, let's end support in September 2014 with the final iTunes update.

So from 2006 to 2014, roughly eight years of official Apple support for versions of Mac OS X containing PowerPC-support. Eight years across three versions.

This was before the era of major releases being made available for free every year. If Rosetta 1 was anything to go by, and given that the Rosetta 2 technology is Apple-built, not licenced, we should see Intel support for quite some time — it depends on how quickly software is ported to Apple Silicon, iOS apps are ported to AppKit or Catalyst, and high-speed emulation of an Intel-based release of macOS becomes viable.

We may see Intel releases of macOS for a while longer than with the previous transition, given that the most popular Macs are MacBooks, and they run on latest gen Intel processors; compare that to the iBook and PowerBook, stuck on the G4 for years after the G5 came out.

But either way, 8 years is nothing to sniff at. :-)

Edit: mistook 10.5.8 as the latest Rosetta-supported Mac OS X release; it was actually 10.6.8.
> Apple does not disclose to you who bought your app

As a user, I am happy when I can avoid leaving PII in a developper’s database. It might suck for those who are honest and take security seriously, but there have been just too many data breaches.

Can’t argue with your other point.
> here's my secret to success:

> effectively, I manually make my own playlist.
The title of the article is kind of inflammatory but it is the title cnn chose so I left it. More clearly:

“Twitter will notify followers of these accounts to provide context that the content will be archived and allow them the choice to follow the Biden administration's new accounts," Pacilio said. "For example, people who follow @WhiteHouse will be notified that the account has been archived as @WhiteHouse45 and given the option to follow the new @WhiteHouse account."
Not to mention how slow the store is and music app too. Loading one single artist or app it takes time. I guess both the app is slow rendering the items and architecture delivering the data.
more context: https://twitter.com/Overlapping/status/1341865216049618944
They don't even need to produce false records/logs if the courts believe that any computer system is working as intended without evidence that it isn't then they don't need to produce any records as the court will already accept their computers result as correct.
Yeah, e2ee importance for chat is grossly overrepresented. Vast majority of users would happily trade security and privacy for convenience.
> Poorly written, over-priced assumptionware.

https://www.zdziarski.com/blog/?p=3717