skysight-inc/HackerNews huggingface dataset:
It's certainly true that a lot of people have been doing that. That will probably settle down somewhat, but I think we need to raise the bar for what counts as acceptable on HN. That's why I've been posting a ton more warnings, and I'm glad that you noticed that I wasn't singling you out!

I take your point that you've been participating in other sorts of discussion too. I look through account histories fairly quickly—that's all there's time for. It's a pattern matching game. If I matched you to the wrong pattern, I'm sorry, but if you'd please err on the side of avoiding political battle and sticking to intellectual curiosity, we'd appreciate it.
The have to go through an approval process on every update but AFAICR only with a study including 300 adults, so substantially less then the tens of thousands that were included in the Biontec/Moderna trails.
Or actually do that and let everyone verify and build their own binaries. This is preatty much how Linux distros work, the multiple third party distro packagers packaging upstream code make it preatty hard to sneak in mallware unnoticed and almost impossible to affect multiple distros at once.

In comparison proprietary software companies are a single point of failure where customers can't access the source and have no means to verify what ghe binaries they get actually contain.
> No need to ship a hard drive, just send it over the regular internet.

Well, then it isn't an unbreakable cipher anymore.

It's only as strong as whatever encryption you used to transmit the pad over the clearnet. If you were using a one-time pad to do that then you used up the pad in the process, so you could've just told the reciever to transfer the pad from their internet-decryptor to their HF-radio decryptor.
They really do need an OAuth rather than save-and-forward-credentials approach to account access. Hopefully the new FedInstant platform will have improvements in this area.

That said, I personally wasn't surprised to see they have this access. It makes sense that if you give them your bank password, they will have full access to your account unless they clearly convince me otherwise.
I can't speak to how good or effective it is, but the issues you mentioned are, I think, why the rust-lang community communicates through Zulip (instead of email, IRC, etc).
Are you sure?

Bicycle frames have to be a lot stronger than phones and laptops. That means greater wall thickness (I think ½ mm is on the lower side for steel bicycle tubing)
Great link...I wish I could up vote it twice.
The difference is the pinky promise that they will not do bad things with their access.
but full text search of Telegram is still buggy, especially on CJK character:

https://superuser.com/questions/1374761/telegram-message-sea...

https://github.com/telegramdesktop/tdesktop/issues/7096

https://github.com/telegramdesktop/tdesktop/issues/7022
> A store is absolutely allowed to refuse service.

No, that is not true for all private services.

For example, common carriers have strong restrictions on their ability to refuse service to others. Common carrier laws aren't particularly controversial.

These existing common carrier laws could be expanded to apply to other things.
I am willing to add to the pool, I am also betting core components of Windows will be open sourced soon.
>I think we agree that no private platform should be forced to host a tenant that they object to. Yet a landlord isn't allowed to arbitrarily throw you out of your house on a moments notice. Even if your lease is on a month-to-month basis, the law requires giving the tenant a reasonable timeframe to let them find new accommodations.

This is false equivalency. AWS didn't "arbitrarily" kick them out. If you are destroying the property you live in or using it to commit or facilitate illegal acts, a landlord can ABSOLUTELY evict you immediately in all sorts of states.

https://www.arizonalandlord.net/immediate-eviction-action-in...

https://ipropertymanagement.com/laws/missouri-eviction-proce...

AWS gave them the time agreed to in the contract to remove offending content and present a plan for continued moderation to prevent the same thing from happening a second time. They wouldn't even commit to moderating the speech Amazon told them was in violation of the TOS.

I think AWS can very easily make the argument that continuing to host Parler when they're allowing calls for violence would do significant harm to their business.
Sort of true, but not quite. You may infer that a paper is from a certain lab or that the first author may be someone specific as it builds on their work... But last author? Not as easy as supervisors/lab leads can change.
What entity approved the test for distribution?
That's not an option—it's not that easy. I've explained why this is so many times, most recently here: https://news.ycombinator.com/item?id=25723581. If you check out that post and the ones it links to, you'll find thorough explanations. If you read some of those and still have a question that hasn't been answered there, I'd like to know what it is. Just please make sure that you've familiarized yourself with the material and understand the constraints we're subject to. If it's something simple like "just ban politics" or "just allow everything", I've already answered many times why that won't work.

The bottom line is that a certain amount of political discussion is inevitable here, and users (all of us, on all sides) need to learn the skills of doing that while remaining within the site rules: https://news.ycombinator.com/newsguidelines.html. That's definitely doable, as many HN commenters demonstrate every day.
OK, so I was at least somewhat wrong, since presumably (xi) is the means-what-you-want clause.

Refusing to grant the initial cert. seems unlikely for a new organization, so revocation is the key problem. And indeed (xi) is a problem there.

I wonder if LE really thinks this way. Their primary role is to say "foobar has certified that they really are foobar". I wonder how suspectible they are to the sorts of considerations that have driven FANGT to take the steps that they did.
Take away section 230 and now companies can be sued for what they're hosting, and so they will more aggressively start banning people.

Also you can't realistically remove section 230, the risk is too high. Say a rogue user uploads an illegal image to your site, you've now hosted this illegal image which is a felony. Even if you delete it quickly, you've already committed the crime by hosting it in the first place. It's completely impractical to run any internet service without this protection.
Maybe...

With all Australia's hard border closures and mandatory hotel quarantine, we've still had the UK Covid strain get out into the community. A cleaner at a quarantine hotel caught it from a returned citizen in quarantine (they're still not sure how), and spent 5 days in the community while infected. So far, it looks like we got very lucky, and the only person they've found that she infected is her partner.

From my point of view, the US (and UK and India and many other countries) have a categorically different problem to Australia (and New Zealand and Singapore and Taiwan and a few other countries).

We've _largely_ got things under control in Australia. Most of our cases in the last ~3 months have been hotel quarantine, with worrying incidences of outbreaks where it's escaped from quarantine but been tracked back and identified. Sydney currently has 3 clusters, with about 200 locally acquired cases between them in the last 4 weeks. I'm pretty sure every single one of them has been contact traced back to it's source of infection - and that contact tracing has also proactively got forward to get a very significant percentage of close contacts of infected people contacted and tested, and the places they visited while infectious identified, contact traced where possible (lots of venues are required to have covid checkin so people can be contacted an informed if they've potentially been exposed) - and any venues where they are not confident the covid checkins are comprehensive they publicise fairly widely and strongly encourage testing for anyone who visited during similar times.

This _only_ works because the numbers are so low. It all went to shit in Melbourne when a quarantine hotel breach happened and it got up over 700 cases a day, the contact tracing ability totally fell apart, and Melbourne went into a hard lockdown for several months to get it back under control.

In the US? Our approach just won't work. The virus is out and prevalent in your community. You have no hope of comprehensively contact tracing all of your positive cases, or identifying and mitigating all the venues they were in while infectious and contacting all the people who are at risk of exposure. The scale of your problem is totally insurmountable using the tools that work for us. If vaccination and/or herd immunity doesn't work out soon? You people might be totally fucked. ~1% of you will probably die from the virus, and quite likely a lot more will die from your medical system breaking under the load.
They switched provider, apparently.
> Also, giving your credentials to any third party, including Plaid, voids the warranty at many financial institutions. If your account gets hacked and your money stolen, you may find out that the zero liability policy no longer applies to you.

The trouble is, giving someone your account number also makes it not the bank's problem what they do with that number, even if it was clearly unauthorized by you. There's no good way to do ACH transfers without a high degree of trust in the recipient.
Upvoted for teaching me a new phrase.
>I think a lot of confusion comes from people who only acknowledge free-speech-as-legal-right encountering people who support free-speech-as-moral-principle.

I think we can agree that there is confusion but not on the type of confusion.

Even free-speech-as-moral-principle has limits, as defined by John Stuart Mill, who said that free speech can be curtailed when the expression causes harm. People get confused about this because they think free speech means all speech is free of consequence.

Inciting violence, coordinating death threats against individuals, and other similar expression causes harm.
Wow what a WinFgt. Learn Linux! What a f wreck!
“ As in the whole point of EC is that mostly urbanized states won't overwhelm the sparsely populated ones?”

Pretty much.

Also the idea that the election would have been the same only less close if the EC was abolished is a fiction.

It would just change where the battleground states are, largely to the places with the biggest urban populations.
Still doubt that that many people will travel long distance because of the hassle, the risk of getting stranded or having to deal with the local overwhelmed health system. Anecdotally I know a couple of people in Europe that travelled quite a bit during summer because it was an unique chance to see some historical places e.g. in Italy without the mass of tourists they are usually overrun by. But that was a tiny fraction of the usually very travel happy social circles of mine.

But for the US I think the main attractions are the big cities and the national parks. The former are not really tempting to go to atm and the latter you usually want to go in groups and they seem so vast that I don’t think it is that big of an opportunity to go there when there are few tourists. The only people I know that traveled in between continents in the last months did so for family reasons and it was a huge pain for everyone with multiple flight cancellations, chaos with ever changing immigration requirements that not even the officials can keep up with, self-isolation, etc.
> Nothing stops you from NAT'ing IPv6.

Nothing stops you from filling your car with orange juice either.
I don't think the EU is (or would ever) propose that these decisions be made on an EU level; generally this kind of stuff, e.g. GDPR, requires each individual state to set up their own regulatory agency implementing the standard EU-wide rules.
Erwin Kreuz
Yes this is exactly my experience which is why I still use Quicken. My other concern is if something happened to me it would be much harder for my spouse to figure out than Quicken. However I have used beancount, fava and python to do my own financial planning i.e. what will my income, expenses, and taxes be in future, and being able to have different inflation assumptions for say medical care vs say food or transportation, as well as to have different return assumptions for index funds, vs bonds or savings. They are really great tools.
Based on the description, the source code wasn't modified, only the build tooling on the developer machines. As such a CI server wouldn't be impacted.
I try to stick to the GTD approach and use a list with next actions for the projects, combined with a journal/lab-book for larger projects where I note thoughts, why did that, where, which folder, people, papers etc. That helps to continue after more than a few days (sometimes weeks or months).

Regarding implementation, I tried pen and paper/notebook, folders (hängeregister), git-repos for every project (even non coding projects) in gitlab with issues to keep track of todo's.

But for me, the best thing so far to implement GTD with a journal is a personal/private blog using a static site generator. Editing happens in Sublimetext, all under version control. I use Nikola because it's written in Python and easy to customize. I use a daily blog-post as inbox for all thoughts/notes/todo's during the day. And at the end of the day I write down what I did and what needs to be done tomorrow. And every project has it's own project-page with outline, milestones, journal, etc. From time to time, sometimes at the same day, sometimes at the end of the week I review and move content from the daily posts to their corresponding pages.
Washington Post attributed the attack to Russian actor APT29/Cozy Bear on Dec 14th [1], quoting unnamed sources.

FireEye [2] Dec 13th & Volexity [3] Dec 14th were more cautious, citing an unknown actor that they dubbed UNC2452, and Dark Halo, respectively.

Recorded Future made a fair but ultimately inconclusive case for Chinese attribution [4], Dec 30th.

US gov/CISA continues to claim "Russian linked" [5], Jan 5th.

Kaspersky reported a link to the Kazuar malware used by Russian actor Turla [6], Jan 11th.

CrowdStrike's report on the malware injector [7], Jan 11th says "does not attribute the SUNSPOT implant, SUNBURST backdoor or TEARDROP post-exploitation tool to any known adversary".

[1] https://www.washingtonpost.com/national-security/russian-gov...

[2] https://www.fireeye.com/blog/threat-research/2020/12/evasive...

[3] https://www.volexity.com/blog/2020/12/14/dark-halo-leverages...

[4] https://www.recordedfuture.com/solarwinds-attribution/

[5] https://www.cisa.gov/news/2021/01/05/joint-statement-federal...

[6] https://securelist.com/sunburst-backdoor-kazuar/99981/

[7] https://www.crowdstrike.com/blog/sunspot-malware-technical-a...
I'm honestly not sure. Why would it be?
I used to just be creeped out by the greed on HN but now I feel like it is a sinister place
Balkanisation of the internet is a feature not a bug and those companies are already too big for too long.
They are selling the data to marketing companies to build a dossier on you, and this could be used for any number of purposes once it is in the hands of data brokers.

They're tricking people into handing over the information, and then they're using it for purposes that may harm the victim, so like I said, it's hard to draw a line.
Like trisolarans then.
Ask HN: How do you prepare for senior+ SWE interviews?
I'm a senior (7+ yoe) front-end engineer looking for my next role, currently working at a large social network co. Most of my experience comes my current company. While the prevailing recommendation is to simply crush leetcode problems and memorize sys design approaches, I'm wondering if there's a better way. Honestly, studying b-trees and dynamic programming for an interview (especially when not using much of these on the job) isn't particularly motivating. At the end of the day, I simply enjoy building and shipping products.
So I'm curious: for more senior SWEs out there (especially front-end folks), what do you recommend going through to prep for technical interviews?
Build Rich Terminal User Interfaces with Rust
Not taking sides here, but I don't get the comparison. RHEL is based on the oss Linux kernel, whereas microsoft is closed from the bottom up.

That being said Microsoft is slowly "getting" open source. We'll see how far their gut will let them take it.
Canada has a stable 3-party (+1, Greens) Parliamentary system.

But either way - even in more proportional systems, people know what they are voting for. In the EU, they generally do not.
It is a trade off. However, you can control those trade offs via the optimization switches. You can compare either builds with no optimization vs full optimization.
Only one data point for Austin, TX
It is evident that you don't know what the word fascist means. Please check a dictionary and then come back. Not only that but you can read many many analysis on crypto and see that if anything FOMO is more bussiness for them than any illegaldealings. You are obviously partisan on this and you are so deranged and detached from reality that you call a conservative a fascist. Please come back when you can debate like an adult instead of throwing tantrums.
I guess the situation with Vietnam is more unique that I thought.

This is an unrelated rant since the absurdity of the situation got to me. If you can hear the rumors about the reasons why there are fewer repatriation flights in January though, it definitely takes the cake.
"My feminism will be intersectional, despotic and Orwellian."
For what it's worth, I have bought many laptops over the years. Acer, Asus, Toshiba, HP, Lenovo.

Toshiba were my preference for a long time (mid-90s to about 2010), but lately (the last 12 years) I've been happiest with Lenovo.

Having said that, the quest for ever lighter and thinner laptops means that compromises are necessary. My last Lenovo laptop's keyboard is not as pleasant as my 12 year-old Lenovo laptop's, but the screen is phenomenal.

I had nothing but grief with several HP laptops. So much so that I put HP laptops on my 'never buy again' list.

Acer and Asus were laptops that I quite liked to use, but they weren't as long-lived as the Lenovo.

I've probably confused you further with the above comments. Good luck with your choice.

My latest Lenovo laptop is the P53 with 32 GB of RAM and a 4K screen. I bought it with a 1GB SSD and I have added a 4GB SSD. I run Linux Mint on it. This laptop is bigger (15-inch) than what I usually buy (14-inch), but it's smaller than one of my HP laptops (17-inch).

AFTERTHOUGHT: In many cases, Lenovo allow you to 'customise' your selection, with different screens, different disk sizes, different RAM sizes, etc. That can make a big difference to the amount you spend. I tend to get lots of RAM, and smallish disks which I can upgrade later. I also tend to get high-res screens. I believe there is a 14-inch version of the P53 (maybe a P43 ???).
Not LukeShu, but I skimmed the guide for wmii from the WaybackMachine and found its idea of events quite unique and interesting (though I'm not sure I can think of a good use for it). i3 seems like it might have something like it, but that particular feature doesn't seem to be well documented.

Anyway, I wanted to ask you both, what do you like most about wmii that you'd miss by switching?
Right, we are talking about social norms. The social norm for most transaction commerce seems to be, that if the fees are paid and the services isn't "abused" (in a criminal sense) then the private beliefs of the purchaser don't matter. The grocer should still sell lettuce to heinous racists.

But we are starting to break that norm, beginning with the natural wedges: commerce where the service or product _IS_ enabling the purchasing in a direct way. The question is if we can stop at _direct_ enablement or whether it will continue to indirect forms.

A scary example would be for Square to start refusing to process payments for ideological reasons.
Ok, but that's no reason to destroy it further.
No, I'm concluding either malice or incompetence-to-the point-of-being-indistinguishable-from-malice, based on the premise that login (to the local computer, when the end user has not explicitly configured it to) involves any network interaction at all. It might not be true that OSX login involves network IO (as I more or less admitted above, I haven't checked), but that was not a assumption I jumped to.
This is a cool repository! fairly old, as others have noted.

There's a directory [1] containing some "historical notes" written by the creators of llvm: Chris Lattner and Vikram Adve. One of them is the original clang readme [2].

[1]: https://opensource.apple.com/source/clang/clang-800.0.42.1/s...

[2]: https://opensource.apple.com/source/clang/clang-800.0.42.1/s...
Irish PM says perverse morality drove unwed mothers' homes
Isn't there an argument from principle that violating a quarantine during a pandemic is not actually peaceable?
Dont worry, visa, amex and MasterCard already do it directly
> I shudder to imagine how much worse it could have been without generics!

It probably would have just become a very long String pretty early on. It would have xml in it, but not always, because nobody is that lucky.
Maybe that depends on what "state of the art" means? It sounds like it might mean https://en.wikipedia.org/wiki/Superoptimization, but that's so slow-to-compile that I don't think any production compiler does anything like it. It might be that what "state of the art" really means in practice is "the slowest-to-compile level of optimization that regular folks are willing to put up with on a day-to-day basis." In which case, it cannot be fast kind of by definition :)
I think BofA does this, which I like. When I linked my account to Robinhood through Plaid, it asked for 2FA (text or phone call, BofA doesn't support TOTP codes) and verified in, then asked me to select which accounts to grant access to. Since it doesn't need the 2FA subsequently, it must be doing some kind of OAuth style authentication when it passes that token to the bank and then gets a long-term access token for that specific account.

From an HTTPS perspective this is still pretty concerning though. AFAIK browsers would block the Plaid widget if someone tried to load it insecurely and the page was HTTPS (what users have been trained to look for). But without going into devtools there is no easy way to verify that the widget is actually a real Plaid widget, thus POSTing your password directly to their server and not the merchant's, and no way at all to verify that they have such a partnership with your bank sanctioning them to collect your password.
The selective enforcement - particularly when it's overt - really grinds my gears. When they are finally applied that doesn't make said application invalid or incorrect.

I think that some cases whereby $importantperson isn't banned because they're important are valid. It helps to have a public and verifiable record of a public office holder making provably false claims, particularly when a warning is then slathered over said bullshit. But the thought of a government body deciding when a company may and may not enforce its rules is chilling.
Yeah, banks could have done oauth2 years ago but it never happened.
This isn't entirely clear[0]. I'm not sure how much credence to put into this claim, but the idea that some representatives were intimidated (both before and after) isn't without merit.

[0]: https://www.nationalreview.com/news/gop-rep-claims-colleague...
Using Parler doesn’t mean the planning wasn’t done on Twitter and Facebook.
> It's either "you allow all speech or it's immoral"

Not really. There's not currently any huge controversy about banning spammers, DDoS attacks, or child pornography. A few fringe groups will argue it, but most sensible discussion concedes that censorship is useful and we need limits.