skysight-inc/HackerNews huggingface dataset:
Both companies are being hypocritical. FB is of course trying to spin their image to be the “champion of small business”, when the only thing they care about is ad revenue. And the only reason Apple is so pro-user privacy is because their business model doesn’t depend on user data, i.e. they don’t have skin in the game.

If FB was smart, they would attack Apple as supporting the death of middle-class America by outsourcing their labor to overseas sweat shops and being in bed with the CCP.
> Because compiling Qt (and QtWebEngine) is a very heavy operation, we would need to pre-compile and distribute Qt so that the Dockerfile could simply download and include it in the build process (rather than compiling as part of the installation process).

Just in case: Release build of my Sciter.JS ( https://github.com/c-smile/sciter-js-sdk ) gets re-compiled in 55 seconds on pretty average dev machine that I have here. Sciter.JS is version of Sciter (https://sciter.com) that uses JavaScript (ES6) script VM instead of custom TIScript.

Sciter.JS covers functionality of Qt UI, Qt Quick and QtWebEngine.

It already runs MithrilJS (micro-React), SvelteJS compilations, Leaflet (Maps) as they are. See: https://sciter.com/sciter-js-runs-leafletjs-as-it-is/

The end goal is to provide UI runtime that is in times smaller than Qt+QtWebEngine and ElectronJS but is still capable to run tons of existing Web components and frameworks.
CEPR is an activist org. Their claims are their opinions, like any blogger.
(It's a combination of not wanting to trivialize a religion, and that 'RESTafarian' has a long history of use, and that's just confusing)
Coffitivity
SEC Sues Ripple over XRP Cryptocurrency
isn't every business decision self-serving in a capitalist business?

i mean lets be honest, facebook didn't get to be its size by being nice and altruistic(nor did any of the other FAANG'ish companies).
Seeing as Plotly.js describes themselves as "Plotly JavaScript Open Source Graphing Library" #1 is what I was going for in my question.
> In response to the discussion on his post, Levy [Facebook’s vice president for ads] said the campaign was “not about our business model.”

> “That’s Apple’s marketing working and convincing you to scapegoat us so they can decide how the internet should work — even beyond their devices,” he wrote. “I’m an optimist who works in technology because I think tech can be a lever for democratizing access and giving opportunity. Including for businesses. And if you think this is going to stop with personalized ads . . . well, then I disagree.”

Allowing users to choose whether they want to be tracked passes the decision of "how the internet should work" from companies that sell ads to the users. It sounds like Levy just wants to remain in control of that decision.

Then he has the audacity to mention "democracy" despite wanting to remove power from the majority of the affected people.
Thanks! I'll have to try it out again after the holiday madness calms down.
Falls a bit short:

- Should use the django-env package to have a generic settings file

- Models are incomplete

- Where does registration happen? In the backend? Fronted?

- Weird code around the user model

- Unused imports

Overall this needs some polish in order to be a strong boilerplate solution. I’d say request code reviews from the community in order to improve it. Also think about using cookie cutter for it as well.
Mmmm, if they're trying to play on a Mac, Slippi is currently a bit rougher than the other platforms. A common misconception is that Slippi = Dolphin; in reality, Slippi is (currently) a fork of an older Dolphin and doesn't have the features for macOS that modern Dolphin has (e.g, a Metal/MoltenVK graphics backend). OpenGL on macOS is a nightmare - and indeed, if you opened mainline Dolphin right now and tried to play it using OpenGL, it will tell you in bright yellow letters that it's going to be bad. :)

I backported an earlier version of the Metal/MoltenVK backend to Slippi which should hopefully be in the next release, whenever they get around to it. This provides decent performance on Intel Macs and ARM Macs under Rosetta 2, and ideally tides the (mac) community over until Slippi finds parity with mainline Dolphin.
... for not-so-fun parties. ;-)
I wouldn't mind a return to less commercialized web and I certainly wouldn't mind one where privacy-invading ads weren't required to be competitive.
Hmm... Apple already has a "social network" with iMessage. It would be interesting if they made an Instagram competitor, so you can publish photos/videos for friends. But I guess the main pull of Instagram is that you can reach the general public and be "an influencer".
Or the opposite happens.
Show HN: Markdown-Anki-Decks
> Pardon the rant. Im at a job where no one seems to be listening to my case against react when plain whole JS would do.

I don't know your job, your coworkers or your context. You may be right… probably not, though. React is a powerhouse in terms of developer productivity.

I have 17 years of software engineering behind me, and while I dabbled in a lot of things, most of these years have been spent using Python (and Django). And the current typescript+react ecosystem is several orders of magnitude more productive than anything else I've ever used, be it in Python or any other language.

You say "overcomplication", but React is far, far simpler than Django's template system. You're basically throwing away a LOT of overly complex shit that is simply there to generate HTML in non-html. React generates HTML with actual HTML -- well, okay, JSX/TSX is not technically HTML, but it maps perfectly where it needs to, and still gives you that added layer of typing for extra safety. React can't generate invalid HTML, and if your app compiles, you won't ever have a client-side syntax error.

I can't stress how bad a tool Django templates are for the job of generating HTML.

Oh and JS without React? I mean, sure, if you're literally just adding a couple of dynamic elements on a mostly static site. If you're actually going to have JS-driven UI elements in a dynamic interface, just use React. Not saying you have to, but it's probably the correct choice.

There's a lot of purists out there who will cry foul at 50kb more of some gzipped code, but do you want to spend your time tweaking and manually testing imperative UI behaviour for all your little widgets and how they interact with each other, or do you want to be productive?

Feel free to email me more context on your situation and I can give you a more specific assessement … but my €.02 here is, spend some time learning react & typescript, and playing with the more useful bits of it (NextJS+Typescript). It's not time that will be wasted either way. Give it a week and re-assess.
Mason Jars, Bitcoin and the Doomsday Industry
Eh, seems to me some minefields have a lot more mines in than others.

"Did their solution to FizzBuzz coded within 20 minutes produce the correct output?" has far fewer mines than "did they communicate clearly throughout?"
I think that by standardizing the font, they have removed the possible benefits for people with dyslexia.
If you've ever try reporting vulnerabilities, you'll see that some companies won't ever fix the problem until it is widespread.
I can't find where I read this, but I thought Comic Sans makes text easier to read for people with dyslexia. A pretty narrow use-case, I agree, but there's at least one redeeming quality from something so ugly.
Some do, surely. But it is more likely that at a population level the effect is akin to food advertising, and it is not difficult to prove that food advertising does not just shift consumption from one source to another, but also increases calorie intake.
Is there a list of these anywhere for Django and other languages? Eg rails jumpstart etc
Exactly! That's why they should tell you what the expected compensation is upfront. Recruiters might push more junior people more easily as well.
Another point I should make about the Bryant crash (now that i've looked it up): while the pilot was IFR rated and the helicopter theoretically had the required instruments, the owning company was not certified for IFR passenger service. That means he the flight was filed as VFR. One of the things they teach you when you get an IFR rating is that you don't fly into IFR weather (IFC for the pedants) during a VFR flight without a pre-filed plan. His IFR training didn't teach him to fly in those conditions---it taught him to avoid them. They didn't have an IFR flight plan or clearance, so
flying into a fog bank and persisting in that flight was forbidden and if unavoidable would constitute an emergency. Which is why I tend to look pretty hard at the pilot in this case, not the instruments.
You should a small vacation sometime ;)

Bugs can always be fixed, mental health can't.

Thanks for all the awesome work Greg!
NJ latest state to join Supreme Court battle over income taxes on remote workers
I don't see to use another if all this is in one program
Why is a union collusive but a corporation and their HR department not collusive?
Double nitpick: People often colloquially use "I feel like" in place of "It is my opinion that" and it doesn't even strike me as literally wrong to describe an opinion as a feeling...

And do you think this episode is evidence of trustworthiness on the part of the BBC?

I agree with you that politician sow distrust, but poorly researched pieces are the fault of no one but the journalists.
There's plenty of ordinary evidence that corporations decline to monetize some data.

Example:
https://support.google.com/adspolicy/answer/143465

"Advertisers can’t use personal hardship categories to target ads to users or to promote advertisers’ products or services. See below for specific examples of what we don't allow."

"Examples: Treatments for chronic health conditions like diabetes or arthritis, treatments for sexually transmitted diseases, counseling services for mental health issues like depression or anxiety, medical devices for sleep apnea like CPAP machines, over-the-counter medications for yeast infections, information about how to support your autistic child"
after update i used it as usual. some functions was gone but i think when they fix most errors it will be a great app again
Phony Targets
Go to `Settings -> Privacy and Security`. For each option (calls / groups / etc) change "Everybody" to "Contacts".
> One of the biggest learnings was how much speculation would dominate over anything non-financial

Yup. And still does. There was a huge sea change circa 2013(?) when everything became about currency and speculation. Every idea had to pivot to being its own coin, or including some useless utility token (a bit later) because that was 99%+ of the value to investors.

> Is there any reason that Bitcoin doesn’t have Turing completeness, faster blocks, oracles, etc? Not really; but ...

It feels like the first implementation couldn't have gotten it right if it aimed for too much more than Satoshi did. But technically, yes, BTC is a plausible base for this as much as anything else.

> debate inside the smart contracts community about the halting problem and how it could be used to attack the network. This is probably practically solved with transaction costs alone, but I think it was a practical software engineering compromise do scripting without looping and backward jump instructions because they made the software much more complex and vulnerable to attack.

Unbounded loops are an issue, but functional constructs (foreach) have 99% of the power and little of the risk. Ideally we'd have Satoshi take three months now and make v2, which would be BTC in spirit but with the lessons of the last ten years.

> To go further, the gas price itself doesn’t solve the problem of computational complexity because only the miner that wins the block actually gets the reward, while all others downstream are expected to verify it, but they have no incentive to do so, and frankly, today, most don’t.

This seems like where we need a mechanism that allows a script to be audit-executed, and if its outputs don't match expectations a deposit can be claimed by the auditor and the script will be marked as unreliable. If the precondition of the code is that it returns the correct public key, make sure that key works. If it doesn't you can claim the QA/Security prize - which can be set at whatever amount the script author wants depending on their belief in their code.

> Most of the early eth discussions I was involved with implied doing this in snarks or some other provable computation in the initial discussions, but that never made it into eth. So no; that problem was never solved, although we are getting closer.

Is there a specific blocker for this or just that the complexity is 1000x what is currently supported?
Papyrus for combining Comic Sans' lack of professionalism with Orientalism.
Right, Cellebrite's clearly way off base here. But the BBC's headline seems to accurately describe their wild claims.
It's mostly sequential performance, but it's also very odd. Deleting a single 2 GB file sometimes takes tens of seconds, or copying files from one volume to another will again be extremely slow.. .
Free Basic Swiss Geodata
Out of curiosity, why do you use a monospaced font for non-code?
Lovely to see Cling progress so much (see the CUDA+jupyter example on the page), but a major challenge remains: dependencies. It used to be that you had to use a forked LLVM just to use Cling, but major kudos they cleaned that up. However for large C++ projects with all sorts of compiler flags, include paths, etc, it’s still a major effort to get stuff running.

An alternative strategy is to wrap your C++ stuff in a library and use pybind11 for lightweight bindings and python-based interactivity. This approach means more glue code, but python has much better data science tooling.

I think Cling will see the greatest opportunity in algo tuning and multi-platform development. That’s a different kind of data science— focused more on benchmarking than consumer problems. I just wish the C++ build tool json ecosystem were friendlier.
Can't speak for the commenter, but I used to work for a team couple years ago that used rust and tokio extensively, and some projects were just not a good fit. At the time, futures were well fleshed out but the community hadn't caught up, so we were lacking a futures-compatible postgres and redis client. We wrote the redis client ourselves, and for the main project using rust that was sufficient. But for postgres, that was a show stopper for any other projects we were working on. So we ended up deciding between typescript and go for those.
Best to replace the term 'cracker' with security research, penetration testing, network security and there will be results. Also go broader than 'guy'. There's training programs, newsletters, books, certification, conferences. It's an industry of its own.

Ask HN: How do security researchers know where to look for vulnerabilites? https://news.ycombinator.com/item?id=17176711

Ask HN: How did you get started in Network Security/Penetration Testing? https://news.ycombinator.com/item?id=15152957

https://github.com/enaqx/awesome-pentest
> I'm honestly not sure what I'd replace it with if I were.

Just to theorize: how about having the interviewee write a narrowly scoped toy project that's relevant to the position? (Edit: On site, as a replacement for white boarding.) A JS to-do app for a front-end engineer, for instance. Just a short thing you and the candidate can attack together in a couple hours. The candidate can write "normal" code, google things, clarify requirements, use their own architecture/patterns/style to reach the solution, etc. You could even add/change a requirement midway through the session, too. That would be realistic, and test for brittleness (and maybe be mean).

I don't interview people, so this might be hopelessly naive, or maybe untenable for some types of positions. But that interview process strikes me as a far more representative microcosm of an actual job than regurgitating LeetCode solutions or hardcore algo arcana.
Starting at 40mg - thats sounds really high. I wonder whats the effect on the gut. Doesnt the food get backed up a lot which leads really really bad constipation or is that not as pronounced.
Cyber Conflict Dataset
Volcanic eruptions directly triggered ocean acidification during Cretaceous
If you're worried about dragnet surveillance- which is a large proportion of what Snowden revealed- then Signal is not a bad thing to recommend.

There are no apps that resist the phone being rooted. Everyone is vulnerable to 0days by definition.
Coming back to this... People lend their cars all the time - siblings, children, parents, etc. So you cannot pin who was driving the vehicle at the time of the fine. This is why red light cameras are a flat fee. They do not scale based on the number of tickets the car received. You would think that if someone received 30 red light cameras, it is time to increase the fee, but this is not cannot be accomplished without proving who the driver is.

>acceptable middle ground is for fines to scale with the value of a car at registration

The type of car one drives is not at all an indication of their actual finances. Many people, unfortunately, feel the need to impress others by spending money they don't have.
I feel woefully out of step here. If you can create a CA that browsers respect, have you really improved on cleartext transmission? And isn't the CA is now a new attack vector?
Hey everyone,

This is my first Show HN. Some of you may remember MDAnki, a program to convert Markdown to Anki Cards. I loved that idea but MDAnki always ran into issues where cards would be duplicated on reimports. This program is very similar but solves those syncing issues. If you've always wanted to write AND edit your Anki notes in Markdown and have been frustrated by existing tooling then check this program out. I would love some feedback.

[MDAnki]: https://news.ycombinator.com/item?id=22385408
Researchers create a device that can detect hand gestures
The upside of volatile space weather
$3K Robot Didn't Complain About Carrying My Groceries
"The Gita by Piaggio Fast Forward is the weirdest product (project?) I’ve ever reviewed. Created by a skunkworks associated with Italy’s Piaggio Group—makers of the Vespa—the Gita is a mobility tool designed for cities of the future.

And it also looks like a cute orange pig."
“we could limit RAM usage to 64K to prevent buggy programms allocating too much, those which want more can edit files in a tempfs; processes should run for no longer than 1 minute”

In JCL (https://en.wikipedia.org/wiki/Job_Control_Language), you can specify how much CPU time a program can spend, how many pages it can output before the OS kills it, and have to specify what files it reads and writes.

That was useful at a time when CPU time, memory and disk space were scarce and expensive, and still would be useful when sandboxing untrusted code.
I enjoyed using Fitbit for years but came to the realization the calorie estimates were laughably off and that, for my body type and movement habits at least- the steps were inacurrate.

I wouldn't call them pioneering future medicine- it seemed to me the idea of the company was great but they had to have had a flippant attitude to the accuracy of the data provided.
I once worked with a guy who wrote everything in Comic Sans - despite being counseled about it repeatedly. Fonts set a "tone" to your writing, and while Comic Sans if maybe fine for inviting people to in impromptu office pizza party, it represents yourself poorly in a professional environment. Here's some examples of how inappropriate some of his emails were (all real):

- Contract negotiations

- HR issues

- Announcing the unexpected death of a co-worker

- Announcing layoffs on a contract loss

It looked ridiculous. It also turns out he was a terrible employee and manager. The two seem to be pretty correlated.
One important thing I want to note for chronic "interview preppers":

The interviewer wants to get to know you, not the interview you! They want to understand what it would be like to work with you and how you tackle new problems. It is therefore of very little use to them if you just have boilerplate answers to throw back at behavioral questions and/or if you already know the answer to every technical problem off-hand. Assuming your job will involve creative problem solving struggle, displaying some of that in the interview is a bonus (although it's of course up to the interviewer to tailor the problems accordingly). You probably won't be rejected for doing too well on the technical part, but don't hide your personality and technical aptitude behind walls of preparation.

> "Remember, never let them see you sweat" Vince told me. But when the stakes are low and you’re having fun, who sweats?

This can backfire. It's great if you enjoy tackling the interview problems, and sincerity is great, but indifference is not a good look.

> And as an interviewer, I can attest: sincere interest is always a good sign.

Fully agreed.
Slippery slope argument.

"Sure, it's tracking today, but next they'll want to make it illegal to browse without an iCloud account!"

Shrill.
https://chromium.googlesource.com/chromium/src/+/master/docs...

>Integrity levels are available on Windows Vista and later versions. They don‘t define a security boundary in the strict sense, but they do provide a form of mandatory access control (MAC) and act as the basis of Microsoft’s Internet Explorer sandbox.

And yes, chrome uses it as a sandbox.
The first HN post with the original source:
https://news.ycombinator.com/item?id=25515569
woah there, your California mandated board member might quit with that talk
Small Animations; Big Impact
My rudimentary understanding of most reinforcement learning systems is that there is an "probability of optimality" associated with each action. Wouldn't there be a way to make the AI take the Nth optimal move or vary the degree of optimality with each move?
Without trying it - my spotify is terrible. I used a website to feed 8 years of lastfm and all my youtube plays, but Spotify just thinks I want versions of all the most annoying songs.
I've found you can somewhat mitigate it by asking questions yourself. For example in one tech screen once I had the algorithm pretty much done I asked if I should look to optimize and to add test cases/handle odd input and the interviewer said it's fine as is and let's talk more about other topics like architecture in the real world.
When I reached the page, I only saw a ,,view in telegram,, button.
is the equivalent to calling oneself a lock picking expert because they had the actual key to the lock?
That's not entirely right. You need to be licensed by the provincial engineering body to call yourself a P.Eng. An engineering degree from an accredited program is often part of the path to that credential, but is neither necessary nor sufficient by itself.

And as to being strictly enforced, IMO, it's not really enforced for software people, so long as they stick to "engineer" and avoid "Professional Engineer". Plenty of firms have job listings for "Software Engineers" that don't require the P.Eng. credential, plenty of people have easily discovered LinkedIn profiles holding themselves out as Software Engineers, but there's not much enforcement.

There was a push by the Professional Engineers Ontario in the early 2000s to regulate Microsoft's MCSE terminology, but I think it basically failed. IMO, they've given up on regulating the term "engineer" unless it's really egregious, like holding yourself out as a P.Eng. when you're not, or actually doing work that requires a P.Eng. without actually having one.