skysight-inc/HackerNews huggingface dataset:
I'm not sure these trackers are the worst possible as they could be used for things like crash analytics.

However, unrelated to this specific case, I believe that mobile apps could be the one place that adblocking cannot be guaranteed to work. When things get byte-compiled, you can no longer programmatically inspect the interface and remove malicious ads like with the browser's runtime. Imagine a future where a critical feature you have to use like banking is only available through a mobile app, and this is enforced through something like a certificate check. Then they run ads over it.

DNS based blocking is not infallible either. Even today it does not work with the YouTube app, because their ads are served on the same domain as the content, so blocking one means blocking both. The only solution people have come up with is reverse engineering the official app's source code and releasing a modified version, a process that consumes far more time and effort than using something like uBlock. And this was only prioritized and accomplished because YouTube has become that important of a platform to enough people.

If there's a future where our lives depend on compiled apps, will enough people go through the same effort to sanitize all of them?
Who's actually audited all that?

I'm sure it's insufficient but you asked who audits all that (re: npm) well, apparently somebody.

https://docs.npmjs.com/cli/v7/commands/npm-audit

The audit command submits a description of the dependencies configured in your project to your default registry and asks for a report of known vulnerabilities. If any vulnerabilities are found, then the impact and appropriate remediation will be calculated. If the fix argument is provided, then remediations will be applied to the package tree.
https://nashvillescene.com is my go to. Has good reporting on things that interest me, as well as ads for upcoming events all in one place.
Git in 10 Commands to Do 99% of Gitting and Keeping Out of Trouble
I agree that the web is generally more bloated and slow than native apps. However, native apps don't magically become performant by being native.

As an example, my grandmother-in-law has been putting up with Microsoft Jigsaw's desktop app for years. Last time I watched her load it, we sat there for awhile and had to restart multiple times because it was getting stuck loading some advertisements. The startup time was absolutely brutal and the run-time performance while playing wasn't great either, even with a decent laptop.

So when I saw how slow, bloated and laggy this app was, I wanted to try to make her a better jigsaw app for the web and I think I succeeded [1]. It loads almost instantly, has no advertisements, and feels super smooth while playing... and it's mostly just js, svelte and a little bit of Rust WASM.

Anyway, I do prefer a good native app over a web app when available. But with native apps, it's also harder to block ads and other trackers compared to the web.

[1]: https://puzzlepanda.com
Bebop – Fastest cross-platform serialization format
Thank you. Feels like a new phone. Disabled all animations.
The only practical way is to have a centralized vetting organization that can give a trusted stamp of approval to signed packages. That would still slow things down, but at least wouldn't require duplication of work by everyone on a massive scale. You could outsource your vetting work to a distribution you trust.
In the above case it's actually a move away from security. In order to support MicroG, their OS needs to be patched to allow signature spoofing which can be used to install malicious applications that look like legitimate ones. LineageOS, which is what efoundation forked has opposed this: https://old.reddit.com/r/LineageOS/comments/8p4169/what_is_l...
The source they got this from reads OK: https://news.itsfoss.com/e-smartphone-us-shipping/
While this is certainly a welcome option, third party app stores like F-Droid work just fine. The main repository contains only free software compiled by the F-Droid team, but other user-addable repositories can contain anything.

Additionally it is already possible to download APKs as they are hosted on Google Play from sites like apkmirror.com and you can even install the Play Store if you have microG and are so inclined.

There's no lack of app distribution :-)
Hey, any ideas how to leverage your current testing framework to add coverage or if there's any pretty way to print coverage results that are somehow as standard as TAP?
Shrug. If two million people want to live in a city which has room only for a million, something has to give. Rent control doesn't increase housing. You must either increase housing somehow, or leave a million people unhappy.

If you don't mind the other million, and only care about people already living in the city, you can make it honest by introducing a city-wide Tenant Permit issued only to current tenants. Rents stabilize due to fixed demand, people aren't tied to one apartment, and landlords are incentivized to offer better service. It has all the benefits of your plan and none of the drawbacks, right?
Is there any NFT that reserve the right of printing for an artwork?
He followed the collecting hacker News opinion at the time, which was highly negative. And beats himself everyday for not investing early on.
For anyone moving away from LastPass, it's very easy to export all LastPass data into a CSV file and import it to other password managers. The hard part was deleting everything from LastPass as it only allows to select one item at a time.
Interesting, I didn't know that! Guess I still have some of my youngster naivite :). But that's exactly how I felt - I remember the introductory programming courses being in Java, there was talk about switching to Python, but it only happened a few years after I was a student. Same with companies - Java was for "old corpos" and Python for "hip startups".
Sadly the simple act of choosing where to save a file, understanding where that is, and remembering that, is more than many people feel they should need to do. Signing in with an email address and guessing their own password (typically one of the three passwords they share across all of their online services) is the norm.
The good news is this means if we make browsers & JS rendering faster, everything gets faster.

The bad news is that doesn't seem likely to happen.
It's almost never 'assembly expertise' - it's architecture expertise - knowing a specific instruction you want to use in a specific way to get some kind of fusion or fill some functional unit using some knowledge that the compiler doesn't have.

The actual mechanics of how to write a program in assembly are trivial if you already know a language like C.
I definitely agree that it needs to be simplified, but I think there has to be balance and nuance. I would think a simple left vs right is the most simplistic view one can take and thus has swung entirely too far in the direction of simplifying a view.
Skaffold – How to Build and Deploy in Kubernetes
All cash is, also any investment below inflation - so most bonds.
ClickHouse as an alternative to Elasticsearch for log storage and analysis
> As long as I have 150sqft of housing, some food and an internet connection I will be fine. I like to think about that every time I'm afraid of losing my current level of privilege.

I tend to agree, but I also need a couple of things on top of that:

- the place needs to be relatively quiet (no asshole neighbors on the other side of the wall, or a busy street)

- I need to have an access to relatively peaceful area for walks, preferably green

- I need to live in an area that's not depressing because it's decrepit or filled with aggressive idiots

- I need friends in a distance that makes seeing them often not a nuisance

Take away any of the above and I'm not doing too well long-term. Also, I suspect most people in the world are missing at least one thing from my list.
It's inverse exponentially approaching the 21 million limit,
which it can never reach [1].

[1] https://medium.com/amberdata/why-the-bitcoin-supply-will-nev...
Everything on the planet uses energy. Why are people so obsessed with Bitcoin's energy usage in particular?
Ask HN: How Do You Deal with Lockdown Anxiety?
Before the lockdown, I used to shower in the morning, drive, get greeted by the coffee shop person, saying hello to my workmates, go to team lunches every one or two weeks and hike on weekends.

It's all been eroding slowly to a point that I can't recognize myself anymore. When Google sends me the notification to re-discover photos from early last year or the year before, I curl up in bed and sob for hours.

Yes, I asked for professional advice and it didn't help. The different medicines only made me sleepy and unable to focus, none made me un-depressed.

I even took two month vacation of road trip to another state.

I've lost many friends due to my mood change that made me turn rude or say strange things when talking to them over the phone, and many stopped talking altogether by themselves since the lockdown started. I haven't been out with friends for almost a year now. Everyone either goes out with their close friends and family or goes into "strong isolation" and don't meet anyone outside their household.

Software engineering we got hit the hardest. Now when I go outside it seems like almost all the rest of society is back to regular on-site work except us. In my case I am more or less in solitary confinement even if it has YouTube in it. I can no longer enjoy music or movies and while I always had 1-2 active books at a time, I haven't read a book in over 4 months now.

PSA: Do not use the depression/suicide line. What they do is, without telling you, once they sense a certain threshold in your words or of that who called them (e.g. girlfriend), send the police, get you arrested in front of your neighbors, handcuffed behind your back, searched in the public and put in the police cruiser until an ambulance takes you handcuffed too, and that's where round 2 of humiliation starts in the psych ward. If you are alone, you'll have no chance at all of easily getting out of there.

In the worst case you'll get shot like Vanessa Marquez or Walter Wallace.
Bitcoin has turned in a joke.
1) It depends on what your field is. For example, if you are a software engineer, moving to a company that doesn't compete is easy. If you work on software for Tesla, that doesn't mean that you can only work for car companies. So being barred from working for Ford for a year may not be a big deal. Keep that in mind. However, if you work as a mechanical engineer on electric motors, your skillset does limit you somewhat and the non-compete matters more.

2) It depends on the size of the company. At the start of my career, I worried about stuff like this a lot, to the point of trying to negotiate it. In retrospect, I'm a software engineer, so I don't really need to work for a competitor for my skillset to be useful, so I think I was wasting my time. I should have been negotiating for higher salaries instead (that's something that hiring managers can readily negotiate on and don't have to go to legal for).

3) For what it's worth, I've gone to an experienced employment lawyer several times and he's always advised me to just sign. He said that it's very unlikely to be enforced anyway and in his mind not something worth negotiating over. Keep in mind, for example, that Amazon and Google might be competitors, so going from AWS to Google Cloud might be a problem with that contract, but moving from AWS to Google Search wouldn't be since that's not a competing division.

So that's my story, but IANAL and everyone is different.
> a lot of ideology based on "well party X took position Y because party V had position W back in year Z and they needed to be opposite and it stuck around".

That's not ideology: that's literally not at all what "ideology" means. What you're describing is dogma, and the fact that the two are often conflated in public perception speaks to the OP's point.
Xiami is widespread brand in many countries because its products are really cheap and looks like this trend will continue for the next years. It's very frustrating to see this. Western world should impose standards to prevent it.
That is what you get when you let anybody write scripts without code review.

Bash people are the worst when they switch, since they keep the same mentality and continue parsing strings or use other bashizms.

See my answer above also.
A lot of the problems with web development have nothing to do with time to market. There's no technical reason you could not have a toolset which is just as easy to use, but far more performant.
New accounts can start shadowbaned (algorithms), this account is 1 day old.

Then people can vouch on dead comments.
Show HN: Just a 5-minute temporary URL shortener
Truth Initiative | Software Engineer | Remote Full Time and/or Washington DC whenever we get back to normal | Full Time
Hi all. I'm hiring for a software engineer to join our small, but experienced team at Truth Initiative. You know Truth, we do those anti-tobacco commercials. Turns out we also make software/websites to help people stop smoking/vaping. We mostly use Python, Django, Postgres, and Heroku. But we do have some legacy systems that use other stuff like AWS and MySQL.

Benefits here are amazing... seriously. Nearly unmatched, especially in the nonprofit space.

Our hiring process is a phone screen, offline code exercise, 3 person group interview, with a code review exercise at the end.

Apply if you're interested!

https://truthinitiative.applytojob.com/apply/xpRE7fAZSE/Soft...
I have been getting more and more of my core apps via F-droid anyway:

- AntennaPod for podcasts

- Phonograph for music

- Pedometer for counting steps

- Binary Eye for reading QR codes

- Barinsta for Instagram

- Newpipe for Youtube

- Habits for tracking daily activities

- Book Reader for ebooks (Moon Reader Pro is worth the one-time fee though)
The way it seems to work:

(I'm going to keep this simple by sticking to racist/bigoted posts, as those seem to be the ones this happens to the most)

X posts something bigoted. Whatever it is, it gets downvoted and flagged and ends up dead. These will turn into hidden posts that are tagged [dead]. If X repeats this behavior or is otherwise a bad actor (within the context of the HN guidelines) they may end up shadowbanned. Shadowbanned users' comments start off [dead] by default, even their valid ones. It's up to others (like me, with showdead on) to vouch for these better comments.

Some users may take it too far. The comments aren't just bigoted, but outright espousing something most of us reject (a user I saw this happen to recently posted a comment basically calling for mass killing of an entire ethnic group). Users that take things too far like that, or who are otherwise abusing the HN system, end up [banned]. Their comments cannot be revived, though you can still see them if you turn on showdead.

Now, that's an extreme. I'm not sure all the reasons someone could end up [banned], but the primary one is repeatedly ignoring the HN guidelines and abusive behavior towards other posters. dang seems to be good, as well, of warning people if their behavior is outside the bounds.
>It's not a "fad". People who don't identify as male or female also have a long history.

The idea that people should "identify" as something else aside from male and female which were always about their biological sex, not their sexual affiliation, is the fad.

People were ok calling themselves male and gay, woman and lesbian, male and bisexual, and either male trans or trans woman, queer male/female, etc. One was about their natural sex, the other was about what kind of sex they were (biologically or culturally) into. The exception was the quite rare actual hermaphoditism.

>Haven't you ever been called "she" by accident? Isn't it annoying?

I could really not care less.

>And get used to it. It's not a "fad" because it's not going away.

I doubt it. In a decade or so the whole issue would seem as quaint and silly as flower power, hippies, millitary chic and militant "down with the man" antics and such were considered after the 80s (and yet, for a short time in 60s-70s almost everybody was into that). The whole facade has already started to crack.

>You will meet more and more of them.

I know tons. Nobody over 30 yo cares for those things, and most actively consider the whole thing silly millenialism. And those are people that had stood up for their rights as gay, trans, lesbians, etc. in really troubled times, not now when even Disney pretends it cares about them, but when they'd openly fire them if they found out an employee was not straight...
I keep getting 524 errors when trying to access files I uploaded. What am I doing wrong?
Food for thought: The Wars in the Congo are a counter example. 2nd Congo War is thought to have caused 5.4 million deaths and officially ended in 2003, just 18 years ago.

https://en.wikipedia.org/wiki/Second_Congo_War
Code Design – Domain Driven Hexagon (Repost)
This provides a list of well-known vulnerabilities, it doesn't actually audit the source code to find unknown vulnerabilities.
If Bitcoin is a Ponzi scheme, then gold must be as well.
Microsoft Power Fx: the low-code programming language for everyone
Well no not at the outset, but we know fb, to follow this example, pays a small army of moderators. I suspect that has some kind of measurable effect.
That was a good tip, thanks! :)
Will read the document so I can be a better contributor in the future.
In the winter I ride my bike down streets lined with cars idling because their owners don't want to ride in the cold for a few minutes.

In a way I appreciate bitcoin for its absurd and unambiguous wastefulness. It's sort of the perfect expression of consumerism, destroying the precious and irreplaceable earth for something immediately disposed of.
That may be an overreaction. If you read through the transcript, the problem clearly wasn't the Apple Card. It would have happened with any credit card. OP told support that his Apple Pay had been compromised, and was continuing to be compromised monthly. They correctly concluded that the fix was to stop the ongoing Apple Pay fraud by denying the attacker access to his Apple ID. He tried to blow them off but it was too late.

As an Apple Card user myself (and not without my own criticism of the service, to be honest), I'm not sure how I'd end up in a similar situation. The card sends me a push notification in real time when a charge happens. So I'd have seen every one of those months of WaPo subscription. I'd have deduced it was a subscription, and that the WaPo isn't selling retail goods and so it isn't likely a fraud issue. Apple Pay would have had it's own notifications as well. The easiest answer would be to tell WaPo to stop. The next best answer if that didn't immediately work would be to ask Apple how to stop a subscription I signed up for, not tell them I don't remember doing it and therefore it's unauthorized fraud.

I think Apple has earned plenty of criticism, but let's keep it real, at least.
They didn't at any point say the scientific method. And I'm pretty sure that's intentional because there is nothing inherently wrong with the scientific method. The problem is with the processes we have built around modern academia which leads to a system that does not give an ideal or intended outcome.
Two farmers in Kansas are going to go to the county office and say they found this baby, and simply leave off the "alien escape pod" bit. We, as readers, know that Clark Kent is an alien superhero, but nobody else does or needs to.
Security != Privacy
> You may have written the greatest opus magnum of your programming career. But if the junior or medior can't make sense of it, they will not be able to maintain it when you're gone. So effectively you have failed.

Overall I agree with you, yeah. But also no. Of course the code should be as simple to understand as possible, but if the junior or medior doesn't understand matrices, nothing I do will make them understand them.

So I mean, yes, but also no. Sometimes it's OK to expect people to have some domain knowledge. Doesn't mean your code should be spaghetti of course.
What does this have to do with anything any why do you expect op knows about it? Also why is it important that its (RUST!!!!)?
In agreement, several aspects of this website immediately made me brush off the project and whoever created it.

- GitHub star count in huge text at the top, seeking validation?

- Doesn't explain what the heck the project does, but "React Cosmos 5 in 21 tweets" ... I have to read a thread of tweets to understand what this is for?

- "Don't settle for localhost:3000" okay, demean the way that tons of us develop web based applications currently
A lot of the maintenance of these packages is performed by volunteers. Putting, however well-intentioned, barriers up will often result not in a more secure maintenance process but no maintenance at all. I'm generally happy to donate my patch that fixes an issue in a package I use, but that's not going to last long in the face of demands that I jump through hoops prove my identity (my interest in the following the bureaucratic procedures of an organization is closely related to the amount of money they are paying me). Particularly since my experience has been that organizations that are anal about that sort of confirmation tend to be more interested in passing any legal liability on to me rather than maintaining a secure maintenance process.
Yep, as you say, you get to chat with anyone in the Matrix ecosystem (or even further afield if you use bridges).

> You can only have 5 people with addresses at your server

Actually, it's better than this. You can technically have as many people / accounts as you like registered on your server, but you're limited to 5 active users by default. Users are considered "active" if they've been logged in to and using your server for more than two days in a given 30 day period.
Today's Conjunctions
https://platform.leolabs.space/visualizations/conjunctions/t...
It seems like there is a rhetorical escalation ladder from insult to hurt to harm. I’m not saying that can never be the case but I do think the contemporary blurring of the lines is unfortunate.
Neat idea, but the website is very overwhelming with all the weird transitions and fades. Just show the content.
Volvo to sell only all-electric vehicles by 2030
Synthetic data. Very easy.

This example is a little clunky, bc was ~2 years ago, but for
a GWAS study we did on Early-Onset Preeclampsia where we had clinical and genomic data for 109 pregnant woman in Hawai'i, we put everything on GitHub.

[1] We created a grammar for the schema, which not only allowed us to double check the type safety of our data but then also synthesize a CSV [2] with one click and stick that in the repo so that reviewers/researchers could `git clone` the repo and reproduce everything without any permissions bottlenecks (obviously the results are gibberish with the synth data, and you have to contact us to get the real data, but this way you can get the code working and then it's just a simple file move to reproduce the full results). This is the way.

[1] https://github.com/breckuh/eopegwas/blob/master/eopClinicalS...

[2] https://github.com/breckuh/eopegwas/blob/master/mockData/cli...
It's just natural, that people are salty about proof-of-work that leads to computation devices scarcity. No one asked for this and it's really scary - society can economically decide, that distributed ledger protection is more important, than gaming and science. Just like we economically can decide that global warming is not important.
i thought i was the only one ;-)
That's definitely how a compiler does it, especially at the IR stage. It's much easier to track values within a localized region; this applies to both people and computers.