skysight-inc/HackerNews huggingface dataset:
Hacker News Comment Saver is a Chrome web extension that enables you to save and manage your favorite Hacker News comments.

All data is stored locally, no tracking (not even Google Analytics), no sign up, no hassle! It just works!

Features available:

- Dark mode!
- Tagging
- Add notes
- Export all saved comments as .csv file
- Open in stand-alone tab for better viewing experience
- Search saved comments by tags, notes, author, title and content
MNK Group SA | Remote and/or Romania | Senior C# Developer

We are hiring! One of our premium clients in the Oil&Gas industry is looking for Senior C# Developers with WPF experience.
The team is growing rapidly, so if the position suits you or someone you know, don’t hesitate to apply!

Must have:
- 4+ years of C# development experience and knowledge of advanced programming practices, i.e. design patterns
- WPF
- In-depth understanding of OO principles
- Understanding of Agile practices, including test-driven development and refactoring, will be a distinct advantage
- Multi-threading
- SQL Server 2005+
- Highly organised and possess problem-solving skills
- Experience of Unit and Integration Testing
- Fluent in English (spoken and drafting skills)

Nice to have:
- Message Oriented Middleware Experience/exposure to Financial and/or commodities trading environment

Please apply directly at: https://www.linkedin.com/jobs/view/2414617520/?capColoOverri...
or send your CV to: lumi.sapira@mnkgroup.ch
On Security Research Devices
Chamath Abs Calculator
It is what it is.

I'm in favour of anti-trust action against Google and Microsoft for their outright anti-competitive anti-spam practices, but that's going to be a long and hard up-hill battle for anyone attempting it.

Meanwhile, the rest of us will have to accept things for what they are and deal with them as well as we can.
Sovereign Smartphone – To Enjoy Freedom We Have to Control Our Phones
I have seen every tool used to enforce ‘laws’ also abused to deplatform competition.

Most tech companies are run with as few employees as possible, that is why SV FAANG engineers make so much.

We can look to china to understand a bit more of the statistics and personnel required to effectively moderate a system. e.g. number of censors per number of users.

This means that companies like facebook have 2-3 orders of magnitude fewer employees needed to moderate their system. i.e. they are effectively unmoderated. (this is why it was no surprise that facebook was used to plan the capital riots, even though FAANG benefited by deplatforming parlar for political reasons).

We are in an interesting situation where there are probably similar levels of legitimate and illegitimate takedowns but nothing will change because the people with power and money have what they need.
Angular InputNumber
Historically, it seems to depend on how long ago they stole it.
It appears to only work for files which have already been opened.
apples and oranges, the name conflict was perfectly disambiguated by the use of the mandatory group identifier.

npm design was so bad that you could at the beginning upload over an existing version of your package name and break dependencies retroactively even to people that pinned versions.

if you want to try some good old whataboutism, at least try to be in the same ballpark.
I would have been happy if facebook's stuff weren't usable by iOS developers without at least something user visible.
I already gave up on the platform and switched to something sane though.
I'm pretty sure all package managers which produce packages which might bind to C do have "some form" of pre-, post- or build scripts.

The reason is simple because without it you can't properly bind to system libraries.

And even without, the supply chain attack still works against at least developers as packages are not just build but also run, often without any additional sandbox. (E.g. you run tests in the library you build which pulled in a corrupted package).

The main problem here are not build scripts (they still are a problem, just not the main) but that some of the build tools like npm haven't been build with security but convenience as priority and security was just an afterthought. For example npm did (still does?, idk) not validate if the packag freezing file and the project dependencies match so you could try to sneak in bad dependency sources.

Also for things which are classical system package managers (i.e. not build tools) like apt/rpm/pacman it build scripts really does not matter at all. The reason is that what you produce will be placed and run in your system without sand-boxing anyway, so it's a bit different then a build tool which is often used to build binaries (installers, etc.) at one place and then distribute them to many other places.

Edit: Another attack vector is to bring in a corrupted package which then "accesses" the code and data of another package, this could use speculative pointer accesses or similar but in languages like Java,Python, JavaScript you often can use reflections or overriding standard functions to archive this much more reliable.
Perhaps it was easier in the times before the internet. Now a consistent timeline should be far more convenient than not having to change your habits by a little bit.

Edit: If changing schedule is normalized, then it would be just as convenient as changing the clock. In countries without DST, if someone started using DST instead of changing their own schedule, it would be just as difficult.
Algorithms are not even close to substituting for human customer service, human moderation, and human judgment.

Algorithms are human judgement.

In a strict code sense an algorithm is a way of encoding a set of assumptions that you decide on when you're developing the code to run it. Even in unsupervised machine learning an algorithm is the result of human judgement because someone decided to delegate the decision making process to a machine.

Every time a computer makes a judgement call there is a human who is responsible, and should be accountable, for that process existing.
And not just him, but also every other royal hanger on including his 18 year old brat that gets 100K per month.
I can’t thank you enough for doing this. I somehow got intimidated and was afraid to look at the source. It only increases my wonder at this astounding piece of art.
I'm living in france too, I pay 40€/mo (~$48) for ~8Gbps fiber.
I use Windows, and haven't used Linux for years. It's probably just a matter of time before I go back, and when I do I know I'll love the compose key.

However, the workaround I use on Windows is Alt key combinations: I memorized the dozen or so patterns [1] I use the most. For example, `Alt + 0160` for non-breaking space, `Alt + 0150` for en dash, `Alt + 26` (and a few more) for arrows and `Alt + 0133` for ellipsis. It must seem crazy when you're used to the compose key.

I haven't heard of dead keys as a workaround. How does it compare? (Wow, this is getting very far from the original topic…)

[1] An important key to memorizing them is to see them as patterns on the numpad, rather than a sequence of digits.
In my view, the US citizens are too polarized in almost any category to work their issues with one another. Most have very limited capacity for compromise and it's not always limited by internal rationalization. You are either left or right, cop or a citizen, black or caucasian, etc. God forbid you say the word "social" if you are a republican or you'll be labelled as a traitor to your party, that kind of polarization. There is no middle ground with where you stand. There was an interview on Ben Shapiro's channel on youtube where people on the street which identify as liberal where asked if they would consider compromising in order to get along with the right. They said, "Yes, we must be united." However when they were asked to choose on some policies to compromise, they disagreed to do so on every single one of them. Obviously this was targeted interview and I don't agree with half of the things that Shapiro is saying. However for citizens to live in peace with the rest there must be some kind of process of discussions and resolutions through compromise. And in your case those usually start with a discussion and end up with "f* you", "no f* you". My theory is that you have not had enough experience with negotiations and that is attributed to the limited foreign encounters that you had in your history. In Europe we had so many conflicts and wars that we had to negotiate all the time to keep the status quo which meant sometimes compromising with the opposition. The US way to handle things is usually to go straight to the active and aggressive approach. I've seen this in my business meetings and IT meetings with US clients. In itself this way of handling things is neither correct nor wrong, however it must be applied only when it is suitable to do so. And in my opinion this is usually all that you have in your deck of cards. I have some other theories as well on why your social approach is usually more aggressive.
Am I the only one who thinks you can't separate science and politics when it comes to deciding policy?

I agree 100% we should not be fudging the science. If the LD50 of a chemical is 10mg, we shouldn't be playing with the number to make it 20mg to say it's safe.

But translating an LD50 of 10mg to government policy is of course fraught with political bias and interference. Scientists might say "that pesticide is toxic we should ban it", but they know one side of the equation. What's the economic impact? What's the impact on jobs? What if there is one industry that has to shutdown if it's banned? What if it's need in the defense industry?

Anyone who says "just follow the science" is inferring that science will give you one answer, and only one answer, and every other answer is undeniably wrong. That's rarely the case. It's usually probabilities, other theories are likely wrong, but maybe not. The world isn't black and white. Even in science.
Same - I've been drinking delicious decaf for a few years now. Never would have thought that we're increasing our risk of heart failure though!
Some of the libraries seem stale. libovr is "Last Updated almost 5 years ago" so I guess it's abandoned?

Maybe the last updated status could be brought to the arewegameyet page?
> Look at the resent story about Linux stable kernels that have had more than 255 minor releases and think how much of a shit show it would have been if they added features too like most developers do.

At least some distribution kernels do new feature backports - mostly to support new hardware on LTS versions (like e.g. Ubuntu did for the Raspberry Pi, see https://github.com/raspberrypi/linux/issues/3464).
I just checked the bottom of my coffee cup and it says 22 oz. So clearly not standardized.
> I'm amazed how Intel has lost their crown.

It happens. One process mistake cascaded and derailed their whole lineup.

AMD doesn't have to bet their future on process and can, if needed, move to a different supplier. If, however, they make an architecture mistake and end up in a dead-end, Intel will be able to catch up in one or two generations.

Intel still has a significant lead in several important segments and these deep supply chains take a long time (and a lot of money) to shift. AMD has been showing a clear leadership in cost/performance for some time now and it's still not easy to fill a rack with AMD boxes.
That would be Pro-Consumer. Google is Anti-Consumer so that would be against their core principle
Algorithm Intfact Part 2
Murder mystery. Dressing up and bad accents optional.

https://www.red-herring-games.com/product/murder-on-the-diso...
Don't get me started. There is a town in this province called Grou, which was called Grouw (extra 'w') in Dutch until the Frisian (which was always 'Grou') and Dutch names were made the same thirty years ago. It's only a small town (a village really), so the further you get away from the province, the less known it is.

This is fine.

In the province of Fryslân many people speak Dutch as the first (or only) language, and many people Frisian. The town is called 'Grou' in nearly all Dutch language publications. That includes tourist sites in Dutch, newspapers in Dutch, municipal records in Dutch, the local train station, the bus stops, and most importantly, what the inhabitants of the village call themselves, in Frisian, as well as is in Dutch.

This is fine.

So on the Dutch language Wikipedia, the village is stubbornly called 'Grouw', because that is its Dutch name (it isn't). And the Wikipedians whose hobby it is to defend such choices go to extreme lengths to defend this choice. It doesn't matter that the ground-truth is that the old Dutch name is no longer used (in Dutch!), but only that there are no sources that are not government sources (because these are biased to the formal name, which might not be what people use), and is not a local source, because, hey, the locals are all Frisians (who often speak Dutch as their first language), and this is the Dutch Wikipedia. There is however, an academic source from the official Dutch language institute that lists the old name as the Dutch name of that village, and until that list is changed, Wikipedia will bravely defend the use of a name no one uses.

I think the relevant Wikipedia policy that makes this possible will change some time soon, which in local Wikipedia time means a few more years of this nonsense.

The village itself mostly doesn't care, and just goes on calling itself whatever it bloody well pleases them (which is, barring some odd exceptions, Grou).

I live in the same municipality and find this Wikipedia situation amusing/annoying/disturbing, because Wikipedia is the first thing anyone writing about the village grabs for the bare facts. That the name there is simply and plainly wrong is noted by many, but not by all, which is, incidentally, also why Facebook and Instragram automatically tag posts and addresses from Grou as 'Grouw', thus further perpetuating an untruth.

Sorry for the rant. :)
Never heard about windex. Now I know.
Nothing you can't cure with some newspapers under your clothing.
How the U.S. Lost to Hackers
Back in the day (mid-90's), many that I knew using nano were former users of Q-Edit.
I know that I dearly miss the French IGN.
It’s close to impossible to find decent paper map for hiking in the US.
College Student’s Simple Invention Helps Nurses Work and Patients Rest
Usually I'm adding linuxserver/smokeping docker container to boxes I want to check internet speed history.
Surprisingly, a bunch of software doesn't like it when you setup TAI, if you manage it to begin with.
I suppose it's not just the idfa, it's any personal information you share with third parties.
I agree that with the number you gave (200MB for a primary work tool) it's not that big of an issue, but in general, I strongly disagree with this argument:

> but let's not pretend you're going to be using all of that memory doing something else (and if you are, you're the edge case)

Of course I'm going to be using all that memory. For work, besides the IDE, I also have to run a mail client, an IM client and a browser, and likely a host of other developer tools. Every now and then, I may need to run a build, at which point the resource usage of the computer spikes. If, together, this exceeds available resources, something will have to give. Most likely, everything will slow down, and the SSD wear will increase.

For non-programmer specialists, the same applies, just with different software.

For regular users, the same applies, just with different software and much less resources.

It's the peak usage that matters, not the average. Wasteful software limits the amount of things that can be done on a computer simultaneously. So it's not "we shouldn't care about our software's resource use because users don't do multiple things at a time". It's "users don't do multiple things at a time because they can't, because we don't care about resource utilization".
Using a FQDN is less likely to be unknowingly hijacked when it's a domain they control and use daily.

URL references also contain the version number, typically an immutable Git tag reference. They also benefit from just needing to download the source code that's referenced and not the entire package. With Deno you can also optionally host versioned 3rd Party packages on their deno.land/x CDN.

URL references are also cached locally on first use and can be used offline thereafter.
Is Love a Biological Reality?
I use coca tea, which is legal where I live (Bogota). It's much gentler and whole-body than coffee, which at least for me is very head-and-cardio focused. It doesn't provide a buzz, it just keeps me from feeling irresistibly sleepy. (I'm still almost always sleepy, at least at this 2800-meter altitude, but it's tolerable.)
Accountability and Free Speech
I wish GitHub would create a proper auth design. I won’t grant blanket permissions to tokens because there’s too much risk of something going wrong.

It seems dumb that they don’t have per repo tokens. I think the issue is with their licensing as if they made proper tokens users could abuse it by giving tokens to their friends. But this should be detectable in a friendly (please don’t do that) way.

I want to be able to give read-only access to private repos.

I want to be able to give fine grained function level and repo level access.

If I’m an admin on multiple repos, I want to be able to issue a token for just a single repo so I can give that to a CI job without worrying if every single repo I admin is at risk.

They allow ssh keys with some similar functionality, but ssh keys can’t be used as much as tokens.

I’ve been waiting for a story about how some third party app granted access to my whole org gets taken over and wreaks havoc. Eventually this will probably be the attack that alters real packages instead of these name overloading packages.
Study: Covid-19 and the Political Economy of Mass Hysteria
Let's not forget that more than 90% of packages in Ubuntu are taken from Debian without any significant modification.
For better or for worse, many projects auto-update their dependencies these days.

They do this to address the shortfalls of modern conventions like small packages, continuous release cycles and dependencies nested several layers deep.

So if you were using the internal package FooLib.Bar v 1.2.3 and an attacker posts FooLib.Bar v 1.2.4 to a global repository, anyone using auto-updating will update to it.
True, although it's not like there are dozens of other suppliers with top-tier processes. There are just TSMC and Samsung (currently somewhat behind.)
Machine learning in e-commerce: Providing instant catalog feedback to sellers
We can agree to disagree here. You have no recourse when one of the Sendgrid shared IPs you are using gets put on Spamcop. Sendgrid might get around to working with them to remove it in a couple weeks. You also have no way to eliminate that IP from your pool of IPs. So in my case about 40% of reports I was sending out were getting blocked at the email server of the receiver.
Buying a private IP is your only recourse. Unless your emails don't matter, in which case it might be fine to lose 40% of them.
Part marketing ploy, part genuine attempt to improve time systems, especially in a global context, Swatch actually once tried to do so: https://en.m.wikipedia.org/wiki/Swatch_Internet_Time

Unfortunately, .beat time didn’t catch on.
Open source, on the other hand, has been embraced by those automated Kafkaesque monopolistic bureaucracies.
No it does not, a platform with ISO compliant C compiler is not required to support POSIX in any form.

By the way, since C11, there is no need for POSIX threads any longer.

C11 threads might be implemented on top of POSIX threads, or anything else that the compiler vendor thinks of.
To be pedantic EST and EDT are offsets. America/New_York is the timezone which consists of multiple offsets that depends on the time of year and date mostly determined by the local civil authority. For example in 2005, the US extended daylight saving time by four weeks. This difference between 2004 and 2006 is a part of the timezone.
Show HN: Tietooon – A Customizable Collaboration Tool
I wonder what is the size of the market for copycats vs size of the market for original products.
Global platforms don't scale.
It's not that they "won't"; they can't; it's just too complex and fragile for normals to want to understand and use safely. Heck, even most of us don't use Shamir's Secret Sharing to secure our private keys (or any other really robust method for securing/sharing). We all know what its like to help normals manage their password (!) for their 5 accounts...

Beyond that, there is a fixation on A) Global consensus systems, and B) Deflationary assets -- neither of these can or should form the foundation of what we call "money"; too fragile and dangerous. See https://perry.kundert.ca/range/finance/holochain-consistency...

However, next-generation offerings are promising to solve most of these shortcoming, including one that I'm helping implement presently. These could be useful to normal people, and quite easily wrap existing assets (Crypto and others) in value-stable and robustly exchangeable tokens.

Many people will try to play with crypto, and will blow off their fingers while these systems get ready for release.
> There’s a famous saying “if you're not paying for the product, you are the product"

Yeah, and users are still not paying for your product it seems. Rather, this time, the user is even getting paid! The user is clearly still the product, so why would you even bring this up?

Also, between the lines about blockchain and decentralisation, I'm just reading that this is one of the many companies that pay people a little bit for filling out online surveys. How is that new?
Where do you see Apple bashing in the article? It was an article targeted at app developers, offering them advice on how to adapt to the new rules.
That in itself is weird though. Why throw a syntax error there but not here?:

def f(x):
return 1
y = x + 1
return y
> I can understand it in a development environment

I can't. It's incredibly wasteful time and resource-wise, and ties your development process to third-party providers (and your ISP), which fall over often enough in practice.

It's a good practice to have a local cache of all the third-party dependencies you use, available to both developers and CI infrastructure.
When I use the "full" timezone name like "America/New_York", how does libc resolve the ambiguity during the extra hour of the transition from daylight saving time to standard time?