skysight-inc/HackerNews huggingface dataset:
> What we got is more surveillance (NSA dragnets), not more efficient use of the data they already have.

Or we could just not do that anymore and still not have centralized authentication.

> "Security through ad-hoc redundancy" is going to replace one possible-good auth systems with a gazillion shity ones that no one has the budget or interest to secure. It's a greater attack service.

You mean attack surface. But that's the trade off.

Because none of them are actually secure. Even when you have a full time security team, there are still vulnerabilities. Before the attacker had to find a vulnerability at the DMV, then start over at the bank, then start over at every company's file server. Now instead the attacker only has to find one in the central authentication system and they get everything at once. Even if there aren't as many vulnerabilities, if there is even one, you're screwed beyond comprehension across all systems everywhere.

On top of that, widespread use cuts the other way. Suppose the system was originally deployed using sha1. That starts looking pretty weak so you begin the decade-long process of transitioning literally everyone to a system using something else. Then suddenly sha1 gets completely broken beyond all hope, but you can't stop using it because 15% of people haven't migrated away yet and that's too much of the world to abruptly cut off.

Whereas in the decentralized system only 15% of things would be vulnerable because the other 85% had already migrated and disabled sha1, and the important stuff like banks who have their own security teams would be in the 85%.

More to the point, there are other ways to reduce vulnerabilities without centralization. Use simpler, more stable software from vendors who spend more time on security and less time on feature bloat. Restrict local services to local users so they're not exposed to the internet. Use defense in depth so that a single vulnerability is not enough but the expense of finding five stackable vulnerabilities is uneconomically large relative to the value of compromising an individual system.

Whereas the only way to avoid the ominously large scope of compromise of centralized authentication is to decentralize it.
Sure, here's some positive hearsay: OCaml tooling and libraries are good. Now you can use it without concern ;-)
Design Tips to Level Up Your Next Project
IMO seems like another attempt at using a platform not for ads for ads.

Replit has used the following platforms for ads that shouldn't be used for ads:

- change.org
- ProductHunt
- HackerNews

Why not use a mainstream form of ads?
That's not good. That kind of stuff must be derived from your business plan, not from the current situation. You should know that "if I'm successful at this level, I will need this kind of infrastructure" before the problems appear, and not be caught by surprise and react in a hush. (Granted that reacting in a hush will probably happen anyway, but it shouldn't be surprising.)

If your business requires enough infrastructure that this kind of tooling is a need at all, it may very well be an important variable on whether you can possibly be profitable or not.
I had these in Uzbekistan, they sell them everywhere, and people suck on them like it’s chewing gum. They were not to my taste, very bitter and very salty.
There's certainly value in engaging with the community through the open sourced code. In the end its all a balancing act and getting it right is the hard part. I'm not trying to claim to know how much effort should be going in each aspect. If I did, I'd be running a successful business right about now.
good argument, I accept it.
3rd and path finder are a lot simpler to the complex method AnD 2nd became
> Parochial seems like the opposite of what it is.

Parochial in the sense that he's advocating major societal changes based on his narrow interests as a software developer.

It's like if I went on a foreign vacation, and after some communication difficulties, saying the whole world should drop their local languages and standardize on English because I'm an English-speaker, and, by the way, a common language would make international commerce more efficient. The proposal is mainly a selfish one to slightly reduce my costs at massive cost to others, and my non-selfish (non-parochial) "reason" for it is prioritizing a minor use-cases over far more common ones.

If we abolished local time/time zones in favor of universal time, it'd just get re-invented again.
We created a Cloud Native cooperative, here is why I joined
This seems ripe for phishing, similar to @аррӏе.com (which isn't @apple.com -- go ahead and check) and someone actually did this once. [0] There are lots of emojis that are hard to tell apart from each other.

[0] https://www.xudongz.com/blog/2017/idn-phishing/
> Climeworks is planning to start operating a plant in Iceland later this year that will be capable of capturing 4,000 tons annually.

On average human activity puts about 40 billion tons of CO2 into the air each year.

How is this even remotely 'an option'? Stop fetishizing technosolutions.

Start planting trees today. We need a trillion of them.
I duunno exactly what Craigslist is running on today, but some slides from 2012[1] include items like running MongoDB over "3 shards across 3 node replica sets" with "duplicate config in 2nd data center"; a "sharded multi-node" redis cluster; multiple "vertically partitioned" MySQL clusters; the actual application stack on top of that being mod_perl on Apache, and it was all operated by a 'small but growing' dedicated team.

It might or might not be notable that the growth of that tech team included, one year later, hiring Larry Wall[2].

Given that, I'm not sure how to apply 'if Craigslist doesn't need it, I probably don't' as a general principle....

[1] https://www.slideshare.net/jzawodn/living-with-sql-and-nosql...
[2] http://blog.craigslist.org/2013/10/15/artist-formerly-known/
I had a bit of experience my freshmen year of college by working on a personal project that I abandoned.

When I got hired as a SQL Developer with little experience. I got a rundown on my employers database and tables and then tried my best. Google and Stack was the best teacher and with each work assignment I learned something new or a better way to do what I did before. Often the SQL queries I wrote would require updates and I would put in better solutions.

There’s still a ton of stuff I don’t know and I made a lot of mistakes along the way , but I still feel like this was the best learning experience for me.
Art sales have been criticized too. It's just they generally are dismissed as some high falutin nonsense whereas crypto is more accessible by folks in other domains.
Not the parent poster, but: think of speed bumps. They force you to slow down and pay more attention to the road.

Some writers, particularly post-modern ones, aim at the same thing. By forcing you to read their works carefully, you'll (in theory) be forced to think about them more.
I wonder if you still need to go through expensive UL and other testing before being able to market such product? The RPi has an integrator programme, but still there are potentially large fees to pay which makes whole thing not so attractive unless you are going to wing it and hope nobody will check.
Progress on Automated Reasoning for Catlab with Metatheory.jl Egraphs
Very well written.

Bill burr on his podcast was talking about, when he first discovered reddit. He couldn't understand what it was... He then realized later.. "it's a site for people that really like to type.. that's what it is.."
FYI 'Saag' is just a generic name to refer to gravy dishes, that are eaten with chapatis. There are hundreds of varieties of saag.
I meant mongo support for sharing might be marketing fluff. As in they promise it works but it might be unreliable.

I have come to trust Mongo with CRUD on a document. Rest of the features might not work as well. Looks at the recent Jespen test for mongo ( https://jepsen.io/analyses/mongodb-4.2.6 )
Students would copy something, change a few words, check the turnitin score and change a few more. It was a good way of plagiarising and getting away with it.

I didn’t plagiarise but submitted my assignments as locked PDFs which they couldn’t pass through turnitin. This met the school requirements for digital submission but I had to argue this point. The following year the rule was changed and .doc was specified.
> Now imagine human spaceflight missions where the command stream can be hijacked by anyone with an SDR. Yeah, not happening.

I am no expert on spacecraft command channels but I would highly doubt that a lot of non military US spacecraft use encrypted command signals until extremely recently.

He is right. Space engineers are extremely adverse to trying new technology and technique. They are even more adverse to adding code to things that work without adding more code.

In order to talk to one of these things you have to have one of the satellites in the NASA DTN. Technically the DTN protocol supports authentication and encryption but remember that everything about DTN must maintain perfect backwards compatibility with space assets that are made with decades old technology. Security is not it's primary goal like with terrestrial communications. Connectivity is far more important.
How long do you think it would take for various schools IT departments (usually incredibly understaffed) to reach out to every single website where they found content that doesn't fit the school board's policies and request a take down?

How many websites would, at the request of Random School X, would remove posts just to comply? Simply so a few hundred students can use the school network rather than a phone, home computer, etc.?

This seems like a ridiculous request. From the school IT point of view, block it and move on is much more realistic.
Starfinder have done this on Alexa just say "Alexa Play Starfinder"
I have five kids, and have had this kind of thing crop up multiple times. The most recent was when I was showing my youngest how to make web pages on his school issued Chromebook. They school had locked down everything, including the browser's developer tools. So, I called the administration, and they told me that they didn't want kids having access to programming tools because the kids could use them to cheat, access "secure" data and otherwise cause mischief.

I asked, so, what if my son wants to learn to code? The IT guy said, "use your own computer". This isn't incompetence. It's outright foolishness. He also went out of his way to remind me that unauthorized access was a criminal offense and the school would go after any student who "tried".

I pulled my son out of the school.
Post has $76M worth of art
Thanks for the feedback! Totally agree. That's why we're trying to branch out of the calendar space as fast as possible. First as a unified notification inbox for SaaS platforms.
> However sometimes you don't really have a choice, and this super cool crate you want to use is async or sync (obviously always the version you don't need right now), and you have to make it work.

Doesn't the whole crate get colored, though, because now it requires an async runtime? Or is it possible to synchronously run an async function without a runtime? Genuinely asking; I haven't used this stuff yet firsthand
Looks great. Just installed it. Already provides lots of value. Question, your github grid seems low energy recently. Working on anything cool in secret?
> I don't follow your point? Private companies can take a loan just as easily as public. If they were unable to attain the financing they wanted, they'd still have plenty of their own content, just not as much.

Private companies face a higher cost of capital than equivalent public companies and are unable to borrow as much money as public companies are able to. This is basic finance 101 stuff. Without debt financing, they would not have been able to begin their pivot when they needed to. Netflix is able to borrow at much lower rates than a company with the same financials solely because they are a large public company. Google "equity cushion" if you're unfamiliar with the term.

> I'd suggest you do the same. Their cash balance increased from $5 billion to $8 billion last year. They took out "debt" to finance their movies because money is cheap right now. Nothing they've done required them being a public company, and nothing you've shown makes me believe they couldn't be in exactly the same position they currently are as a private company.

Yes, Netflix is doing much better financially over the past few years and especially in the past year given the pandemic. I don't see how their cash balance is relevant in the face of content spend 2-3x that much. The initial contention was over content spend and a misleading gross profit number.

>They didn't even start borrowing money of significance until 2012, I still don't believe for a second they'd be "bankrupt" as a a private company.

They started borrowing when they needed to pivot to their own content, had to do so at pretty high rates, and luckily succeeded in their pivot.

Throughout this, I don't see any acknowledgement of where streaming was back then and how competitive the space has become since then. Netflix needs to spend on content or it will get left behind. A smaller Netflix offers no competitive edge right now and a smaller Netflix years ago would have been held hostage by content owners while being unable to have any real control over sub pricing; see poorly handled rate increases years ago.
Any benefits over Chameleon?
My friend has a blog and will love this. Could you let the user control the blur ? I tried it and for some images I found that the blur was not strong enough.
I just tried to visit these pages (from Europe) and they are 404. "Not found error: This is not the page you're looking for. If you think this is a mistake please contact us_".

Is someone trying to hide something?

To the Replit folks: I don't know you, I have never in my life heard of Replit before (until this HN post), but I feel I won't like you. Did you actually take down these pages with evidence of bypassing school security controls just so "you got no valid reason - apart from the ones we just hid"?

Edit: "just" is 16mins after the parent posted the 3 URIs (as per HN clock).
>> I can watch Amazon Prime on Linux.

Everything and anything it possible on linux. The question is whether I want to bother. I could probably disable my browser's security features and get it working, install some proprietary whatever, but it isn't worth than hassle imho. I've got better stuff to watch than netflix/amazon junk. Whenever I have a hour to kill my first choice tends to be the BBC.
I agree, I just phrased it as a black and white thing as a way of trying to make the point I was making more clear. There's nuance in all things.
I think "binary tree" is a decent example. It's not only a visual depiction of how the data structure is laid out, but the metaphor of "leaves" does also transfer over. It is possible to take it too far, trying to fit "bark" into the concept, which is of course, silly. Calling it a "dubranchion" or some such would be a disaster, IMHO.
The SMR community does have a lot of hype, but the general idea seems fairly sound. Instead of building huge reactors on site, as basically big one off projects. Instead, mass produce a bunch of smaller modular reactors at a factory. That doesn't seem much different than a modular home vs a custom home to me, with the modular home being way cheaper. But we will see if it actually works.

But for me the biggest issue is, if fighting climate change is so important, why wouldn't we try everything possible? Why do so many people insist on only renewables?
What. Lembas was nowhere neat pemmican. It was explicitly a form of bread, and most likely based on hardtack, that Tolkien would have been exposed to on the seas and while in service.

Pemmican as a specific "thing" came from the Americas, but the concept of mixing dried meats/preserved dairy and fats is something that is common in history
> As a dev, I almost always miss my GitHub notifications

Maybe I'm being dense here, but can't you use email?
You should definitely be able to convince her this is a road trip to take! On the way you will pass the lovely Virgin coast archipelago as well as be able to visit the UNESCO world heritage sites Decorated Farmhouses of Hälsingland and the High Coast. Go for the road trip!
What I'm gathering from the introduction of the article is all properties are emergent behaviors that are particular to the observer. In the case of the stone, the atoms in the stone, observe and interact with each other, the atoms themselves come it being because of on the interaction of their subatomic particles.
To add on to this, this results in an odd job market where demand for COBOL programmers is pretty low most of the time since there isn't a ton of work, but when a company does need to hire COBOL programmers its much more difficult to find them and hire them. Which leads to these common stories about COBOL programmers being in demand, when the reality is that most have a hard time finding new COBOL jobs, especially without needing to move.

Off-topic but do you work for Eversource? An ex-coworker of mine found a bug that he immediately recognized as a COBOL bug while working with Eversource CT's EDI
How do I know that that particular wallet belongs to the artist? I see some ENS entries on the address, but not sure if/how that helps tie it uniquely to a person.
If a pupil somehow manages to access pornographic, violent, racist, whatnot content the school is going to be in trouble. The safest and simplest is to block liberally. No-one is going to be in trouble for blocking Pinterest.
I have been wondering lately if it is possible that humans may have a quantum signature that they leave behind on everything they touch and that it may be possible to detect that signature. I was imagining a technology that could isolate the signatures and identify the person who hand sewed my shoes, for example.
You could contribute on GitHub!
I think this article ends up giving excellent examples for why you shouldn't just "write simply". There is basically no argumentation happening here and most statements are just thrown out as truths. Yes, it might be quick and easy to read through, but it's not very good writing.

Examples:

> Plus it's more considerate to write simply. When you write in a fancy way to impress people, you're making them do extra work just so you can seem cool. It's like trailing a long train behind you that readers have to carry.

Notice how he's arguing against "write in a fancy way to impress people" and not "write in a fancy way". Most authors write in a "fancy" way to invoke a feeling in the reader. They don't add random words to "seem cool". Is spending a few more words to get the reader into a happy/sad mood "inconsiderate"? That's an interesting discussion, but in his quest to "write simply" he's just skipped right by it.

> It's too much to hope that writing could ever be pure ideas. You might not even want it to be. But for most writers, most of the time, that's the goal to aim for. The gap between most writing and pure ideas is not filled with poetry.

What is evening happening in this paragraph? First he's questioning whether it's possible for "writing to ever be pure ideas" without explaining what that's even supposed to mean. Then he says that most people aim for that. And somehow the solution is "not filled with poetry". I don't understand a thing of this. He's implying so much without explaining anything.
When it comes to tax evasion ("avoision") there is no limit of creativity.
LT-Spice is absolute trash and basically why I decided to leave EE for CS in college... among many other reasons! Essentially, because after learning all kinds of math my linear systems prof basically said "yeah, at some point you just have to simulate everything because the math you learned only applies maybe 60% of the time". Granted, I do not think I was exactly destined to be a great electrical engineer.

Electronics simulation is fascinating, especially given the AI models used to do this. Layout gets especially complex when rf-traces / layers have to be considered or when you want to have an arrangement of traces to high bandwidth components all be the same length. Interaction between multi-layer vias is also insane (the guy who built the UberTooth1 bluetooth hacking dongle has a great defcon talk on the subject).

The best analog I can come up with is the debate / discrepancies between the US and European weather simulation models. Fascinating space, I got to work a few feet away from the Julia team at the Harvard Launch Lab way back in the day at a college internship. Of the few interactions I had with their team they are great people and unbelievably brilliant. If any of you are reading this, my hat's off to your engineering abilities - I'm still impressed by the fact you guys identified an error in intel's x86 instruction sets and yeeted the issue in less than 24hrs.
Thanks, I will take a look at it. It looks really expensive though!
In the early days I used "/" in local parts, which is syntactically valid. That turned out to be a bad idea, as some mail software was mapping local-parts to file names...
It needs DKIM so other people cannot send e-mail pretending to be you.
Journalists Start Demanding Substack Censor Its Writers
I'm actually curious if the physical device looks any more innocent in Netflix's future policies than straight-up credential sharing. It's still coming from a new IP.
Some US hardware also operates on frequencies that do not penetrate the atmosphere, an old failsafe against ground-based interference/spying. So, even if totally unencrypted, the attackers SDR would have to be in orbit. That's a high barrier for the average hacker.
Pinterest themselves go a long way towards breaking Google. Their crappy spam prevents you getting to the actual source of an image. I can’t believe Google tolerate it.
In England many Latin terms were replaced with English terms in 1998 with the adoption of the new Civil Procedure Rules in an effort to make justice "more accessible" (alongside other reforms). These arguably actually added confusion - for example it's much more obvious that a "writ" is a specialist term versus "claim" which replaced it.
Nice sized print paper backs have a much better resolution then kindle and the like. That's why I prefer it. I used my kindle for trips because of the size to amount of content ratio. When I'm at home I prefer a well printed book it has much higher resolution of text and is easier on my eyes if I'm going to be reading for a while.
The override is missing the droneship or blowing itself up.

Why the hell does there "got" to be an override. Humans are generally not good at doing hypersonic/supersonic aerodynamic modeling in their heads, especially remotely
ah wow neat
New Zealand has one too: https://www.otagocentralrailtrail.co.nz/ride/an-interplaneta...

It's hundred million to one, so the scale speed of light is a little under 3 m/s (10.8 kmh). So at a very comfortable cycling speed you're moving at twice the speed of light. Exactly as AnIdiotOnTheNet says you get through the inner planets in no time flat but it takes forever to get through the outer ones.
Just curious, what's your current works involves?