skysight-inc/HackerNews huggingface dataset:
> Authy is fricken awful. It requires SMS for "security" entirely defeating the purpose of 2FA

Explain. There is a separate password to defeat traditional SMS attacks.
It also allows a separate route through the federal court system, except one with the potential to be state funded.

To what ends? Idk- but I'd say interpretation of the "good-faith" aspect of section 230 is ripe for review.
Stupid question: Isn't this clear-cut grounds for a defamation lawsuit?

Also, is it possible to have a class-action defamation lawsuit?

The fundamental issue that the author gomox is not stating clearly in his article is that there are no consequences to Google for their actions. None. Literally zero.

I don't think the best plan is to wait and hope for a government to step in and take action. Hope is not a strategy.

Complaining on public forums has similarly done nothing to curb Google's careless wielding of the ban-hammer.

So sue them. Cost them money. Punish them in a material way that they can't ignore.

I can't imagine anything else working...
How about in warfare - weren’t weapons ‘improving’ through the centuries?
How will DoH help "huge corporations... take control of the population"?
This requires sites to opt in before it works, right? I think this would have been hard to introduce, because it requires so much coordination.
Ask HN: What are some common bottle-necks for early founders
What are some common factors that impede founders from building/scaling startups from their ideas. For an established startup, perhaps their challenge might be scaling the organization and customers, but for early founders it could be choosing the best infra, stack for the task at hand.
Earlier today https://news.ycombinator.com/item?id=25803010
These sound good, and I've used things like asan and ubsan which do a lot of the same thing. The issue is not everyone's running in a traditional environment where you have the conveniences of things like... an OS.
I already use an Nvidia Shield instead of my smart TV, even though both are Android TV. It is such a better experience. If any device started taking over it's DNS in a way I couldn't override, and I had reason to care, I would stop using it. PiHole is already a meh solution.

My two primary apps on my Shield are SmartTubeTV and Kodi. I won't pay for YouTube when they force bundle it with other services I don't want. The alternative of ads has gotten to ridiculous levels, and then the ads in the video from them on top. SponsorBlock is another game changer. Sadly it isn't in an AndroidTV app yet.

On my phone it is Vanced all the way for YouTube, and it does have SponsorBlock.
How about cloud paas providers like AWS? The user could generate a IAM access key with permissions to manage a specific bucket and configure Aegis with the key. Aegis would use the cloud Api to upload the backup.

If that is of interest, I could help implement that.
>Is the solution to just give up on blocking phishing sites?

IMHO yes. It's too much power for one company to wield. And especially a company with such questionable morals as Google. This cure is worse than the disease.
> NA’s geography does make it slightly less prone to cycling/walking based transportation

How so? You mean the snowy towns or the hilly towns or...?

> I think there is also some outcome bias towards cars because they’re a comfortable/ known quantity for most people.

There's a bias toward cars since it's incentivized to drive cars. Our laws mean everything is far apart so trips are far and our transportation infrastructure is almost all fast or long roads. These are choices that prop up cars: if you could go to the grocery store with a short trip without a high risk of being hit by a car, more people would walk or ride a bike there. If transit was convenient, people would take it. People just want to get where they're going: cars are the best way to do that in the US because we have decided to incentivize car use over other options.
Is it technically possible to have end to end encryption with Signal if it evolved to first attempt to use direct connections via RTC or some other method?

If they're incurring serious costs to run, that tells me Signal's days are numbered until it has to start commercializing.
Money to play with. In order to experiment fast you need some money to burn. Everything came at cost.
This was what Lotus Notes was to be. Maybe not open source, but a reach communications platform.
Well, you can still right click on an image preview in Google Image and then select "Show Image" to get the image in full resolution, like the good old "View Image" button.
Django and GraphQL: Learn How to Build a Django GraphQL API
The first blue pigment discovered in 200 years is now commercially available
Apple blocks users from sideloading iOS apps on M1 Macs
I'd say it started with the mobile web. Lots of space and simplistic interfaces make a lot of sense when you have a small screen and fat fingers. It is terrible on a desktop but since people want a unified experience, to keep things familiar to the user and to simplify development, you get the least common denominatior.

I'd say that the "flat" trend was started by Microsoft with Windows Mobile and Windows 8. Apple and Google followed (for once Apple didn't start the trend). I liked it at the time, maybe for the novelty, but it quickly faded. Still I understand why people may like it.
Yes! But...

1) If I type that line myself, I want to know what `Box<dyn Error>` means.

2) For an audience of mixed levels of Rust expertise, the `Box<dyn Error>` idiom is on average clearer, because the more experienced Rustaceans will have seen it before while `Outcome` will be unfamiliar and in need of explanation.

I thought about publishing a crate with just that one line, but there's already a slew of other similar solutions out there (anyhow, any-error, etc...). There's not that much to gain.

I just think it's worth pointing out that it's weird to require newbies to understand `Box` and `dyn` in order to handle errors.
The problem is 2 fold.

1) a bahillion new signups, so they just needed to deploy a bajillion more instances of the server.

2) The clients basically DDoS'ing their servers.

If you look at the android client source, you can see all the commits they put in are about handling errors properly when the server(s) get overloaded.
FWIW, the first thing Don Knuth introduces himself as on his website is "Professor Emeritus of The Art of Computer Programming at Stanford University", not as a Jesus Lover.

The question, as the inquirer has clarified, is not about religious people, but about applicants that are ostentatiously and obtrusively religious.
And Dynalist (https://dynalist.io/) from the Obsidian authors!
What is that standardized way?

Encrypted zip files with the password listed on the website is the easiest one that comes to mind. I wonder if googlebot will some day decrypt those files because a lot of pirated software is distributed in encrypted zip files. Scanning those files for viruses would be pretty useful for the average user.

I guess captchas are the only bulletproof solution
The book Designing Data-Intensive Applications talks about “schema on write” vs “schema on read”. In order to interpret your data, you must apply a schema, so your choice is whether you do that explicitly when the data is written, or implicitly when it’s read.

Or as Yoda would say, Schema read or schema write, there is no “no schema”.
The brilliance wasn't in building the core software but rather leveraging the right technology for scalable low cost messaging. WhatsApp's core messaging infrastructure is built on top of a modified version of the open source project Ejabberd. The technology heavy lifting has largely been done by Erlang and Ejabberd. In my opinion WhatsApp was brilliant to leverage those existing systems - but it wasn't the computer science skills that made them successful.
Are you sure it’s literally Forth? If so, can you share some keywords?

The closest thing I know of is HP 48 - not Forth, but quite Forth-like, and it definitely tought me a thing or two.
In nineteenth century USA, railways proliferated early with easy access to capital. In the absence of market regulation and information disclosure standards, the commercial results were often failures and dysfunction, with unbalanced networks, local monopolies, and death spiral competition on oversupplied lines.

In his ascent to power, uber banker JP Morgan focused on railroads, America's largest business enterprises. He wrested control of the Albany and Susquehanna Railroad from Jay Gould and Jim Fisk in 1869; led the syndicate that broke the government-financing privileges of Jay Cooke; and developed and financed a railroad empire by reorganization and consolidation in all parts of the United States.

https://en.wikipedia.org/wiki/J._P._Morgan#Railroads
Not OP but in general but the answer is yes, and in the rare circumstances where it’s not it’s still way better. The only reason i haven’t bought one for the house is that i can’t commit to the $300 when i know what’s out there for $1000. 2021 is a new budget year for discretionary purchases though, sooo.
> 60 years hence we’ll have settled Mars

Not as long as there is the popular notion that only researchers should go to Mars and anyone going there for profit is bad. See National Geographic's "Mars" miniseries.

The only way people will settle the solar system is when:

1. there's money to be made

2. people get past the notion that terran life will "contaminate" the other worlds
Less density, maybe?
I guess I have a deeper point to make, which is.. if you're going to compare golang web libraries it's the details that are going to end up making your decision. Superficial comparisons will be misleading. Implement auth, CSRF, a "real ip" Middleware, request logging, graceful restarts, yes CORS, and then do a few REST endpoints with it to see how much boilerplate VS useful code you have to write.

Maybe this is just my opinion as I started a significant golang app with just vanilla stdlib and then added each of these complexities in turn, before switching to libraries to solve most of the boilerplate better than my hand-crafted patterns
Natively visualize NetworkX graphs using D3.js and pywebview (without electron)
More users and more attention also means more donations. I sent them something yesterday as a show of support and have set monthly donations as well.
They shouldn't be able to threaten legal action for those who acquire public domain images elsewhere, just because they choose to fraudulently license them.
really hard to hear this. the 905's were light years ahead of ssd's & priced accessible to consumers, if you didn't need a ton of space. optane floating off into strictly-very-serious-business pricing tiers is a big loss.
Maker had to do a similar two-phase mitigation after a flash loan was used to borrow enough MKR token to change the result of a governance vote. [1]

[1] https://forum.makerdao.com/t/urgent-flash-loans-and-securing...
How about Nepal?
Anyone know if these commits are already in App Store and Google Play? I looked for a Signal update on iOS just now and did not see one.
This looks like an incredible trip.

Can I ask how did you safely organise a tour like that without getting scammed/putting yourself in danger? How did you get in contact with your driver?
How does statik compare to rice, which is what I had assumed everyone was using: https://github.com/GeertJohan/go.rice
Did you see the link in the article? Curl does now have some Rust in it. People have been doing that work.
Ah, I took the person to mean our physical geography. Our urban geography is of course the reason for our car use: we've put policy into place so that cars are incentivized and other forms of transportation are disincentivized, with density being a cornerstone of that.
> I've had this a few times, most recently with "how do I add this data file to my binary"

Ok fair enough, that one bit me too, but honestly I only felt cheated because Rust makes it so easy. `include_bytes!` was like cheating the first time I used it.
"indicator only shows up when you happen to hover over it. WTF."

My wife and I had this conversation the other day. There are things in iOS you only get or see if you long press. How the hell are you to discover these things?
Scientists figured out how to turn black holes into power sources
I love AndOTP. It's boring, it keeps the master key in my head and offers simple backups.
It's called Matrix and it already exists. The most popular client is element, you can host your own instance, it has e2e encryption on by default and it doesn't require identifying data like phone numbers.
God I would hate to have this type of behavior as coworkers. I can't imagine what a "certification for programming" would even look like. Programming is a completely different field than others - it's exactly that type of difference that has made programming far more welcoming than others.

No one is denying that you're not going to be the best developer in a few days. But I welcome everyone learning the way they want to and how they want to, and for others in the industry helping them learn.

And for your example, I'd much rather hire someone who has worked in their garage with wood for a decade than someone who just got a certification to call themselves a professional carpenter right out of trade school.

And yes, you are literally trying to gatekeep because you're realizing the thing you've spent thousands of hours learning is actually not that difficult and is getting easier and easier every day.
It comes down to a simple, enduring principle: people who don't use something shouldn't have sole authority over its design.

So many of the complaints about the dominance of seemingly-incompetent UX professionals really boil down to failure to consume one's own dog food. The UX pros are not incompetent at UX design, but they are unfamiliar with the tasks that the program will ultimately be used for, and that's even worse.

This phenomenon is more widespread than most people realize, even here. If you buy a new Porsche 911 today, you'll find that the garage-door opener button has been moved to a touchscreen menu. People who take a bus to work are now designing Porsches, in other words. It's only going to get worse from here.
You ignored the issue of libel, though. Do you have a reason it's not?
Offtopic, but same apply to internet usage. Limit your self and you will be more productive.
Some of the top hits have questionable human rights histories and in some case significant crime rates. This list seems to just be another “hey it’s cheap here and there’s decent population density ergo, services available”. Why not consider safety and political stability etc in the grading of remote location quality?
seems to be the way tech at large exists & is done today. business as usual, with only massive colossal megaflare disruption bothering to register for anyone. so so so many wonderful potentials for humanity that were doing great things for some, but which hadn't seen rapid drastic shirt term adoption. terrible way to doom a species, imo. feels like there's few sympathetic voices here on HN, few who recognize this particular loss, & the meaning of long term & harder struggles. very sad seeing such mentalities saturate the world.
The best example for the new '//go:embed' directive I've seen so far is this:

package main

import (
"embed"
"net/http"
)

//go:embed assets/*
var assets embed.FS

func main() {
fs := http.FileServer(http.FS(assets))
http.ListenAndServe(":8080", fs)
}

For the next month, the list of options here [0] will have to suffice.

0: https://go.googlesource.com/proposal/+/master/design/draft-e...
I actually don't think this is that hard to fix though.

I'm a fan of google doing their best to protect people from scammers. The real issue here is no way to submit an escalated help request when they accidentally mess up. eg they could build a service where -- and I doubt scammers would play -- $100 (or even $1k) would escalate a help request with a 15 minute SLA. I run a business; we would have no problem paying an escalation fee.
Thanks god some else hates this as much as I do.

As someone who probably is intellectualizing some latent mental illness, I find a lot more value in just adopting a pessimistic view on life. I get that I'm extreme in this regard, but honestly I'd rather have a cultural shift towards a slightly gloomier view than this sugar-coating.

A somewhat relevant TED talk that hits many of the reasons why I think it's better to be hopeless and/or pessimistic than be positive: https://www.youtube.com/watch?v=3LlWufvZLxI&fbclid=IwAR0QeEq...
KeeperDAO [1] is one project that's aiming to tackle this. Their whitepaper is here [2].

[1] https://keeperdao.com/

[2] https://github.com/keeperdao/whitepaper/blob/main/whitepaper...
Motivations for Sampling in Statistical Inference
True. But after spending a long time looking for the “JavaScript Rails”, I realized that I didn’t actually need an ORM. Learning SQL is just as difficult as learning a new ORM’s API.
Slonik + Postgres + Graphile is now my go-to.
Well this escalated so quick, why would Snowden use it when he was running away from the US in these past years. Also Appelbaum used to be a serious hacktivist who was against NSA surveillance but pro-Signal, something is missing for me : why would early adopters like cryptographers, cypherpunks and security engineers advocate for a technology funded by FBI. Signal seems to be a spinoff of Whatsapp(Brian Acton) more than Radio Free Asia, simply because of their medium. To what extent can we use products that are Government Op, for instance the internet was a military government project, as long as we are able to have secure encryption that is transparent, I think that's way better than the Facebook monopoly. The best scenario here is not to use any of them of course.
This is amazing. Thanks for taking us through it.
Fujitsu also did it with IBM mainframes, providing “clones” that outperformed their IBM counterparts.
Thousands of Covid-19 vaccines are discarded due to fed, state guidelines
It would be ad hominem if I said that they are nutcases with bad English, and therefore their arguments were invalid. It would be an appeal to authority if I said that the Drosten has received Germany's Federal Cross of Merit (twice), is co-discoverer of SARS-CoV (the previous one), has researched MERS-CoV, and has been called "one of the world’s foremost experts on coronaviruses" by Science magazine, and therefore the Drosten PCR is good.

However, I am saying that these guys are nutcases with bad English, and Drosten is an eminent expert on coronaviruses, and also the Drosten PCR has proven to be fine, and also the "report" the nutcases wrote has been largely refuted, by people that know much more about this than I do.

This article outlining the "Ad hominem fallacy fallacy" might be instructive.

https://laurencetennant.com/bonds/adhominem.html

> Put briefly, ad hominem is "You are an ignorant person, therefore your arguments are wrong", and not "Your arguments are wrong, therefore you are an ignorant person." The latter statement may be fallacious, but it's not an ad hominem fallacy.
What I struggle to understand is why the capital can be used with no fee (dydx - 2 wei). Why would someone contribute to such a pool that pays no interest as opposed to staking or lending somewhere else?
> Cite the past but look for future changes in behaviour.

I've heard this referred to as "feedforward" before (as opposed to feedback). Instead of saying "last time you did X, you made a mistake and should instead do Y" you phrase it "next time you do X, make sure to do Y". It's subtle, with the goal of avoiding defensiveness.
I understood your definition (all in all I had calculus 101) but to me it only describes why that is, it doesn't explain it.

Most Big-O explainers don't assume a mathematical background because to non-mathematicians parsing your definition feels like being told you're in a hot air balloon. They see the what, but they don't understand the why.
> Why is there an implicit agreement that okay Google is the gatekeeper.

Because they run a popular browser and don't want their users getting scammed?

For each tech savvy person mad about this, there's 10 non-tech-savvy people completely oblivious that could get scammed by phishing sites we'd consider obvious.

Sure, they should do a better job, but that blacklist is probably millions of websites big at this point. It's the kind of thing where a perfect job is essentially impossible, and the scale means that even doing a decent job is going to be extremely difficult.
This is gold

“Worst paper of 2020?” https://scienceintegritydigest.com/2020/07/23/worst-paper-of...
Why would I want to play this instead of the bfg edition? I know the bfg edition has a few minor differences but, other than that, it’s generally better than the old version.
True, but at least it would have those things incorporated in it. So you don't have different versions with and without.

I would imagine it would gather uptake pretty quickly. Just like other protocols which have advanced. Like SSH v2, nobody uses v1 anymore.
The things you describe are pretty strongly understood as antipatterns in Go.
The actor model is brilliant, but I fear it will never get the adoption it deserves because it's too much of a break from convention. I guess it's maybe a bit too much of a leap? It replaces both Kubernetes and messaging queues, so once you've made software with it it's kinda hard to back out to a vanilla programming model.

There's of course the legit downside of needing to use one language and one framework for all actors, which is a problem Kubernetes and a message queues don't have.
I can already see the headlines on HN:

"How Google Runs a Pay-to-Play Protection Racket"
Please stop calling it “magic” (2017)
The Obama admin used it only to attack enemies.

Renata Hesse was part of that effort, and has since worked for Google and Amazon, and is now expected to be in charge of anti-trust at Biden's DOJ.
Nice writeup. I was part of a mod team that got by Valve long time ago, and indeed it was a giddy fun time. We had no idea what we were doing, but we just created a game that we wanted to play - and it seemed to have worked.
Sure, but you don't need a framework or DSL for this in Go.
Before 1.16, there's a whole list [0], though I've personally used go-bindata the most. I've yet to try statik, though I doubt I'll ever have a reason to now!

0: https://go.googlesource.com/proposal/+/master/design/draft-e...
As I see it, Intel and AMD see the super computer market as "niche" and while it gives good publicity, there are perhaps 1 or 2 such machines sold each year. As a result they spend their time and "innovation beans" on things that make desktop and laptop computers more desirable. IBM's Power architecture is another computer ecosystem that is really innovative and cool but you hardly hear about it. Different target markets.

The second part of the issue is "head start." For literally decades the "cost" of a computer architecture was perhaps 3% chips and 97% software support for those chips. The "Windows" lock (by having the #1 OS run only on x86 architecture machines) meant that Intel really didn't have to do anything for years but shrink their transistor size and they could "win."

Linux took away the Windows "moat", networking took away the "enterprise server" moat, and gcc took away the "compiler/tools" moat. Between the three of them it gave everyone a chance to play if they wanted to stake out a niche.

ARM took "low power" and captured phones for which battery power is key. By licensing the architecture widely and inexpensively they enabled parallel investment that well exceeded anything a single manufacturer could apply to a particular architecture. By some estimates you have over $50 billion dollars / year being spent on R&D that accelerates ARM compared to Intel's $15 billion R&D budget for 2020? Not so much "blowing their head start" as is it getting mowed down by not being able to invest as much as the other guys.