skysight-inc/HackerNews huggingface dataset:
It’s pretty amazing that after all these years there is so little malware on Linux and in foss. The community really has somehow remained almost completely trustworthy. I don’t know of many other examples of that. Nobody trusts free as in beer software, but if it’s open source, we have barely had to even think about whether it’s safe or not because it has almost always been so - even tiny one-maintainer projects
We can hope that initiatives like LetsEncrypt will continue to exist so there's an alternative to paying for certs. LetsEncrypt does rely on a private company for it's certs, but at least it exists.
>It would be hard to see how anyone was hurts by GME speculation or organized buying.

That's because the they still in the pump part of the pump and dump scheme.

People buy Tesla because they think its worth even more. Everyone who has thought about it for more than a second understands GME is not worth 22 Billion dollars.

So the people who are buying now are going to collectively lose a ton of money when it inevitably crashes back down to 8 bucks a share.

The people knowing engaging in the short squeeze are taking that risk, so that is on them. But I feel sorry for people who foolishly chase the gains or the wifes/husbands of fools who are buying in now.

The whole ideas is that the hedge funds are these "bag holders." And to a huge degree they were, which is hilarious. But a huge amount of the bag holding is going to be done by retail investors.
If you have access to a large moving water source, you could maybe do hydro. Is that 2kw continuous, so for 48kwh? If so, that's a pretty large amount. A diesel generator is probably your best bet.
Democracy is about allowing people's representatives to effectively pass bills for which they put them in place.

Building structures at actively make that difficult are not democratic. They are just bad.
If I may, that sounds horrifying. Please, for the sake of my sanity and the IDE, always do things at compile time rather than runtime if you can!
I'd argue the opposite - currently, the Senate is where legislation goes to die after being passed in the house (which arguably represents the will of the people, at least in theory). The government would be more involved in the day to day affairs of people if the Senate was weakened or eliminated.
Or as the late great Mark Twain put it: "There are three kinds of lies: lies, damned lies, and statistics."

A good example of FUD spreading using 'facts' is the current war on vaping. More contentiously, there is also the war against glycophosphate.
Fonts designed in this manner have been around for awhile, so it’s not really a new concept, except in its application to every glyph in a type family. The term I’ve used with type and other designers is actually “tabular,” which contrasts with “proportional.” Look up tabular vs proportional numerals for a topic that’s been around since printing presses ruled publishing.
The Starlink issue is only relevant to streaks on long exposure pictures. You can't see it with the naked eye. The ship has long sailed on general light pollution near urban centers. Nice if it can be reversed but going to unreasonable lengths to preserve everything how it was in the past is reminiscent of people who cover their furniture in plastic.
Even without the user exodus I’d think there’s cause for concern regardless.

They’ve said their financial position is stable, yet they’re stopping trades because of the volume moving through their clearance system (if I’ve understood what Vlad was saying to Bloomberg correctly, they no longer use an external clearing house).

If it walks like a duck, and it quacks like a duck, then it’s probably a duck. And it’s probably good that it’s walking as it doesn’t sound like there’s a whole lot of liquidity left to swim in.

I worry about this for other massive firms, even leaving the current circus aside. As unlikely as it might seem, what happens if a Schwab or a Fidelity or a Vanguard gets into trouble from some as-yet-unseen event?
1. You're arguing semantics in a disingenuous fashion which reinforces my point and make me like Nyxt even less. Nyxt, the end-user product, "is not entirely written in Common Lisp". Your rendering and browsing engine, the core of your application, Webkit, is not a Lisp library.

2. This doesn't solve the problem. Being able to use both webkit and web engine in no way makes you resilient to the issue I brought up. Google has plenty of reasons to disallow and prevent their engine to be used by Nyxt and they have said that they will do so. Your answer strengthens my point.

3. Again, the issue is systemic and there's nothing upstream providers of web engines can do. Using these libraries in isolation will always expose you to significantly more security issues than using them as part of the browsers they were meant to be used in.

4. Flexibility and power (as I explained) is me using uBlock origin and coutless other extensions without reimplementing them from zero. Do you have uBlock origin for Nyxt? I rest my point.

5. Really? Then explain this: https://nyxt.atlas.engineer/applications

I'm very disappointed in your answers but I rest easy in knowing that my opinions and choice not to waste my time with your project are justified.
Claiming the CEO doesn't know how their own company works doesn't really help.
I can't tell if you're actually this naïve. GameStop stock is not a success story because it is up at the current moment. Also, vulnerable people are exactly who will be left holding GameStop stock when it inevitably goes down. The narrative that a Robinhood proletariat is making a bunch of money at the expense of evil hedgefund managers is a fairy tale.
Fixing 200 broken raspberry Pis to prevent e-waste and donating the money raised
Japan API (Free and Open Source Data)
API about Prefectures and Data of Japan using Python and Flask. Main Data is scrapped from the Wikipedia, other data is filled manually
Wobbly.app:  a workplace organising platform
The other part is that a degree means you can stick with some 'thing' for 4 years. A quality employers value. I tried to focus on learning with my time, grades be damned.
What about multi-generaltional requirements, like "one of your parents must have been born here"?

Also, it gets complex when discussing illegal immigration. What if an immigrant is laying low for an extended time? Is it different if the host country looks the other way and doesn't really enforce the laws, because some sectors benefit from the cheaper labor?
Ok, so only a problem in live streams?

(And I suppose also when seeking inside a stream)
> They don't tell you what is being sent in their shipping emails. But you can install their browser plugin and get all the info conveniently.

I think this was introduced in response to google scraping the data from your gmail. But I'll also add to the list of darkness:

Different prices on Alexa VS actually checking the site.

On Alexa, massively prioritising their own brands VS others. (check out Scott Galloway's tests)

They're also a case study on darkpatterns.org for how difficult it is to cancel.
Software copyright was an absolute mistake that fundamentally misunderstood the delicate balances between copyright owners, the market for creative works, and the public at large. I have no faith in Congress to fix it.
The only difference between a UBI and a negative income tax is framing.

Suppose you have a negative income tax in the amount of $12,000 which phases out at a rate of 25% up to $48,000 in income, and a 5% marginal tax rate on people who make less than $48,000 and a 30% marginal tax rate on people who make more.

Suppose you have a $12,000 UBI and a flat 30% tax rate.

These are really the same thing. The advantage of the UBI is that you see more clearly what you're doing, so that if somebody suggests to e.g. have a steeper phase out, what it really corresponds to is having a higher marginal tax rate on lower income people than higher income people. Which is maybe not what you want.
Resource Limited Chess
What Makes a Dark Pattern... Dark?
How about make marriage harder to get and divorce easy? That way people don’t get married without earnestly wanting it and don’t get trapped in agonizing mistakes.
Free accounts for 5 testers on IMG Force. Your partner for getting fast CDN
Your claim that RH restricted users by choice seems false. RH is required by NSCC/DTCC rules to post collateral for trades in the process of settlement. As a result of volatility, the collateral requirements for meme stocks shot up from something like single digits to something perhaps approaching 100%. Robinhood was apparently forced to draw down a $600MM line of credit just to cover the trades it had already allowed.
Using another C compiler, if none exists, create one in Assembly or other programming language in the target platform and go from there.
Given the fiasco that was the Senate hearing I would be very unsurprised.
> something minimum wage can’t do because of the labor shortage it creates

It's important to read economic literature beyond old dead economists because many modern economists disagree with this, or think it doesn't paint a full picture of the situation. Noah Smith comes to mind.
You can't see Starlink satellites with the naked eye, so I don't see how that's relevant.
The minute UBI gets instituted is the minute that politicians will arise who want to lower the quantity for one group of people and increase it for the group of people that supports them.

Eventually it will end up being means tested in one form or another just like the income tax system has been made so complex by politicians favoring one group over another.

I absolutely love the idea of UBI but I just don't see it surviving in a pure form with our populist and identity group focused political system.
FDIC is for banks. SIPC (of which RH is a member) is for brokerage houses.

https://www.sipc.org/about-sipc/
Using post WW2 times as a basis for any argument is wrong. Post WW2, there was no China as a superpower and no globalization. If businesses are forced to pay more for low-skill labor, they can do so easily by taking the jobs elsewhere, which was not the case (or at least as easily done) after WW2.
"250,000 on Robinhood, your account is FDIC insured" That is only for the cash on hand, the securities are covered by SIPC.
Thanks for the feedback. I've removed it.
A vast web of vengeance
I think the idea is that while both may "get the same amount", the NET amount is, in fact, smaller for the tech millionaire than the disabled veteran, because the tech millionaire pays a much higher tax rate.
There is obviously no political will to go after them.
I do use Linux (almost) exclusively, but I'm well aware of the security limitations.

Forget this keylogger. All you need is to somehow write a single line into .profile or .bashrc, which basically every executed program can do, and you own the user account. You can intercept every program with wrappers by changing PATH or adding desktop entries in .local/share/applications, extract all data from applications, use LD_PRELOAD like shown in the submission ... the possibilities are endless.

There isn't even a single decent dynamic firewall with those annoying popups.

Apart from SELinux, there is also firejail [1], which I use to sandbox browsers. Flatpak and Snap are also trying to solve both the packaging and the sandboxing aspect, with moderate success. They also increase the risk due to lack of centralized package ownership, so require a very solid sandbox.

The only reason why the Linux desktop is somewhat secure is the reliance on official package repos, the trustworthiness of the open source communities, and the and the relatively small target group.

I do believe that the path forward has to be Mac OS/Android/iOS style sandboxing - especially for everything not directly from an official repo, but there seems to be relatively little interest in the ecosystem.

Non Linux specific sidenote: ever notice how many VS Code extensions download random binaries from the net? Or just that they can execute arbitrary code? Compromising one of those could lead to some glorious returns for malicious actors, with potential access to lots of source code, credentials and internal networks.

Bottom line: if you touch any sensitive data or work with secure systems at all, you have to be extremely paranoid about your machine - no matter what OS you are on.

[1] https://firejail.wordpress.com/
I was not aware of this at the time of writing, but it solves a large problem we've been having. Thank you so much for pointing that out.

Edit: I've just tried using intra refresh, and it works pretty well, but the key frame interval is still required.
I am not a lawyer, and so I generally only know what law I find out from reading cases that interest me. And that means that while I do know several general legal principles, I am generally ignorant on how those legal principles actually get applied in boundary cases.

Answering this sort of question likely requires digging through cases at the district and circuit court level to find people who made this kind of argument, and seeing if the court bought it or not. I'm not paid to do that, and the people who are are paid big bucks to do so.

But my suspicion is that you have to draw a pretty strong link between the actions of the defendant and your losses, to the point that you really no had other option than to eat the losses. In the case of the pier collapse, you might be able to swing that if there were nowhere else you could fish from. But in the case of Robinhood, I'd be surprised if you could sustain that argument, especially because you've signed this pesky contract.
I totally agree! I recently wrote a blog post saying something like this:

http://blog.drgriffin.com.au/posts/2021-01-13-facts-will-not...
this seems completely miss the point of wayland security.

Of course if you run the programs under same account you can keylog them. You can also connect to Chrome and steal the cookies directly, wrap terminal to install pty loggers, backdoor ssh and so on.

The real point of wayland security is you can safely run multiple user accounts on the same desktop. And the LD_PRELOAD tricks (or PATH tricks etc..) do not work across accounts, unless you are doing something stupid.

I wish people would stop saying silly things like "But for any possible way to break it, I could add countermeasures as well. Applications could use 'getenv' ....". That's not how you break keyloggers! You break them with privilege separation. The least-code version would be:

1. Create a separate user for web browsing, with its homedir and all

2. Create "/etc/sudoers.d" entry to launch browser which does not require password, but also does not allow any arguments, enforces HOME and only passes through a small subset of env vars

3. Launch your browser with "sudo -H -u browser-user firefox". Make it a desktop shortcut or something so you are not tempted to enter your password if someone messes with the shortcut.

that's it -- this will stop this attack, and many others, cold. And will not require any SELinux.
I don't understand the "deposit needed" aspect. I can't buy 2 shares of AMC at 12 dollars each but can buy 200 shares of TSLA at 800 each? How does that work?
I’m not parent but I’m gonna chime in here and take this threat do yet another direction:

You have to ask your self, who are these people that have gotten extremely wealthy from Amazon? How did they contribute to generating that wealth? From where does the wealth come from that they are profiting from?

Now some of that wealth goes to hedge funds and workers see some of it in their 401(K) and what not. But if the alternative is that non of these people that invested in Amazon got extremely wealthy from it... They just got their investment’s worth and a little extra (like a proper loan would). And the wealth generated by Amazon would stay within the company, let’s be a little ideological here and imagine that this wealth would actually be used to pay workers what they deserve. Don’t you think the workers would get more from that deal, perhaps they could use that extra money to open up a saving account, perhaps they could pay it in social security.

Anyways I really don’t see in what possible world the existence of the stock market can benefit workers. It just does not seem to work out mathematically.

To use the Occam’s razor here... If you have to invent epicycles to explain your case, perhaps the simpler explanation is true. This stock market + 401(K) + hedgefuns + etc. seems to me just to be a bunch of epicycles, and money is actually simply being siphoned away from the value generated by the workers into rich folks that use the stock market for that endeavor.

I see two possibilities here:

a) The stock market is a predatory lending scheme

b) The stock market is a pyramid scheme

Either way the stock market should crash and burn
Screenkey – Screencast Your Keys
As long as Robinhood offers excellent UX, people will return. Look how many claims over Facebook's digital privacy, including companies boycotting Facebook, and yet people still use it now. Good UX is hard to beat.
I am not claiming this is fake. I've said upfront that I'm a total layman here. I don't know where to search/where to look for, to avoid my personal biases. It would be the same BS as a total antivaxer googling "how vaccines hurt children".
That is why I was asking upfront.
Author here: anyone else have interesting IBM artifacts to discuss?
Show HN: Fuselink – Combine Multiple Links
Nothing is stopping you from starting your own CA and distributing your own web browser that trusts the certificates. What underlying transport protocol is used doesn't change the complexity of removing corporate influence from the Internet. There is one root DNS namespace. Certificates prove that the stream your user agent receives from example.com is the example.com that is pointed to by the DNS system. That's it. No part of the Internet requires DNS or trusted-by-default CAs. It's just a convenience.

Before widespread TLS adoption, your ISP could (and did!) inject ads into arbitrary websites. Now they can't. That's a good thing. It is actually amazing how little power your ISP has to tamper with your network traffic -- all they can do it shut it off completely.
"The ship has long sailed on general CO2 emissions from industrial societies. Nice if it can be reversed but going to unreasonable lengths to preserve everything how it was in the past is reminiscent of people who cover their furniture with plastic."

I wonder if you have this opinion also?
> Everything is securities fraud, as long as there is political will to prosecute

FTFY
> “ I'm sorry are you trying to make an argument that GME right now is based on evaluating the fundamentals?!?”

I’m saying the author of the article (the reddit post) approached valuing it based on fundamentals. That is the whole point of a short equity squeeze - a stock’s valuation is predicted by many (wrong folks) to fall, institutional money takes a large short position, but a few smart speculators see a valuation-based reason why the price will actually (truly, not artificially) go up, thus squeezing the short sellers. The strategy kicks in only at that point, when buying and holding (based on speculating more intelligently about the true valuation) leads to further gains because of the short sellers’ situation. The reddit author even says explicitly - this is not a pump and dump, the stock will stay high.

Sharing a smart analysis and offering others the chance to execute the same strategy is not manipulation. It’s just a smart strategy. This guy and others who saw the opportunity early, realized GME was both fundamentally undervalued and also had super high short interest, just out-smarted professional traders and they are mad, so resorting to backchannel politics to drum up claims of “manipulation.”
Okay this is wild. I went looking to see if I could find the file, and came up empty. I don’t know what I did with it. Then I started wondering if I really did do this or if I had done it in autohotkey instead.

So then I searched to see if somebody else had created one, and found this[1]

I wrote that!

So there’s my file. I don’t know if I made any improvements to it since posting that, since I can’t find it anymore. Let me know if you encounter any bugs.

[1] https://www.reddit.com/r/olkb/comments/8mxpdp/qmk_code_to_en...
I don't know anything about these "wars". What's happening?
I started tutoring halfway through grad school to supplement my income. It was such easy money that it prompted me to do a similar calculation, based on my own observed income and the public salaries of professors at the university. This was at UCLA, a highly ranked school for math PhD’s, but for which very few profs were making anywhere close to 300k.

This epiphany acted as a catalyst for me to leave academia.
To submitter/author high_byte,

You're analyzing "10x" with math because you're being too literal. I've commented before that it's just a rhetorical label that rolls off the tongue easily: https://news.ycombinator.com/item?id=13753178

And if you still can't make peace with "10x", it still doesn't change the fact that people want to label/categorize the amazing programmers like Linus Torvalds, Fabrice Bellard, etc. -- that set themselves apart from average: https://news.ycombinator.com/item?id=24753594
The idea of certificates is built in to QUIC, but certificate authorities are the client software's responsibility. Client software can ignore certificate authorities entirely, just like with HTTPS.

How exactly does widespread adoption of QUIC destroy decentralization?

Is it any different from widespread adoption of HTTPS, e.g. with browsers becoming increasingly discouraging towards unencrypted HTTP?
Not only the coup against Hitler was a real possibility if Britain defended Czechoslovakia, but also the british knew about it first hand. Kleist, a german emissary of the anti-Hitler faction in the Wehrmacht, was secretly visiting Britain just before the Munich agreement talking about the coup plans with MI6: https://en.wikipedia.org/wiki/Wilhelm_Canaris#Munich_Agreeme...
The benefits of reduced labour costs are the middle class.

Similarly the middle class benefits from the lower working class wages that come from exploitation of illegal immigrants.
The solvency issue is the root cause leading me to leave Robinhood personally. The limitation on market orders was the symptom; the cause was a rotten core. This is the true reason why everyone should leave Robinhood. I do not want to deal with realizing FDIC/SIPC insurance preferably ever in my lifetime.
Fat chance. Have you seen the way politics is going these days? It's far more likely that they'll pass legislation to do the opposite - bar anyone from making, using, or distributing a communication system that can't be monitored and censored by Trusted Authorities.
> The whole ideas is that the hedge funds are these "bag holders." And to a huge degree they were. But a huge amount of the bag holding is going to be done by retail investors.

Yup, people are buying into a misconception here that because of high short interest there must be more to squeeze and the shorts will be the bag holders, while completely ignoring that the further this goes from the actual value of GME the more attractive it is to short, so who is short may change, but short interest won't go down much. The mob for some reason sees the short interest not going down as "they'll have to buy it at a higher price!" Once the smart longs start taking their profits the whole idea will fall apart, some shorts are going to make much more than people who bought early in the run and held thinking it would keep running up.
Perhaps you are the kind of person who would rather see their family suffer instead of breaking immigration laws for a chance at a vastly improved life and future for your children. The undocumented workers you speak of are not those kind of people.