skysight-inc/HackerNews huggingface dataset:
This article discusses how transcendental meditation has induced nihilism and reality disconnect upon some of its vulnerable practitioners.

In my ears, this lends cautionary support for Nietzsche's criticism of stoics and Buddhists. I'm not very knowledgeable here, but roughly his argument is that the avoidance of life's suffering is nothing but an escape from life itself. If one engages with the world, one must deal with pain and joy as a consequence.

On more practical terms, it's always good to measure how your inner model corresponds with reality.
My wife: “I didn’t know it did that. Oh well”

Bad cyber security is almost but not quite like sleeping around behind your partners back. If you get burned you both suffer.
I think that the bigger flaw in the analogy is that horse reproduction is mostly controlled by humans in ways which (to say the least) would not be considered acceptable for humans to do to other humans. Yes, it might be true that most individual horses had more comfortable jobs during that time period, but they also got to reproduce a lot less (it’s also probably uncomfortable for horses to not reproduce, but I’m even ignoring that for now).
> the money just flies right out.

And then flies right back in once you report the fraud. The system works not by making it hard to steal money, but by making it easy to get back.

This is like credit cards... yes, a shady store can steal money from you.... but then you get it back and they go to jail.
https://www.thelancet.com/journals/eclinm/article/PIIS2589-5... found "Rapid border closures, full lockdowns, and wide-spread testing were not associated with COVID-19 mortality per million people.". https://www.frontiersin.org/articles/10.3389/fpubh.2020.6043... found "Stringency of the measures settled to fight pandemia, including lockdown, did not appear to be linked with death rate." https://www.medrxiv.org/content/10.1101/2020.06.11.20128520v... found that social distancing mattered, but lockdowns had little effect.
Your credit card runs Java, that's a fun one
Ever really built an accessible Web-UI? I mean with all that ARIA stuff, that really works for the blind or other disabled people?

An accessible UI that honors the platform specific conventions and integrates into the OS environment?

Ever built an user-experience atop ideas like "form follows function" and "don't make me think", that has beautiful design at the same time?

I actually question that there are more than a handful Web-UIs been built in that way, ever, IF actually any!
FWIW, I found that losing that tended to remove low-productivity time - I do work at my desk and call it a day, whereas it was a little too easy to be hunched on the couch surfing HN. If I really want to do something, walking over to the desktop only takes a few seconds.

Granted, becoming a parent also meant that things like watching a movie are “haha, I’m going to sleep” now, too.
I strongly disagree. Where were these standards during the Covington Highschool kid case? Where were journalistic standards when Governor Cuomo was covering up care home deaths? Where was journalistic standards when the CEO of Sinohawk Holdings was implicating Joe Biden in corruption? CNN's coverage of Bernie Sanders has been plainly obviously biased against him [1].

CNN is not journalism. CNN is a TV show designed to enthrall and manipulate.

Glenn Greenwald has countless times illuminated the deception of the Intelligence Community and how they peddle influence through CNN.

I don't understand how you do not see this. I think you are choosing to see a particular world view because you are perhaps uncomfortable with how chaoticly complicated the world is.

The people that I look to for the truth in complicated times are: Glenn Greenwald, Matt Taibi, Chris Hedges and Sam Harris.

I recommend these people to everyone.

[1] https://www.cnn.com/2020/04/09/world/meanwhile-in-america-ap...

Specifically "Welfare" & "Socialism"
Programming Is Hard, Let's Go Scripting
I don’t disagree with fine grained permissions, but something about the alarm is not logical because Github is already a third party you are trusting vis-à-vis your code.
Click the Link, Fucker
I am guessing such a long feedback loop required proofreading your code very carefully before submission. Do you still have this skill now when the feedback loop is so much shorter?

I noticed that some very senior programmers check their code for much longer than rookies like me, who just keep banging "Run" until there are no more warnings ;)
Maybe, but what to make of the towels? The story implies he doesn't know humidifiers exist.
Permission problems extend to other popular developer platforms as well and I wish more granular permissions were the norm. One example I encountered was with GCP, where I wanted to create a key that could only update a single existing DNS record but I discovered it wasn't possible to apply such strict restrictions. My reasoning for desiring such a restricted key was that if it was somehow leaked or stolen the amount of damage that someone would be able to accomplish would be far more limited than if the key had greater capabilities. Despite the Principle of least privilege [0] being a well-known concept, putting it into practice in real world systems often ends up being an uphill battle. With modern complex systems it can be very difficult to feel confident about the security of each component, and if your attack surface is sufficiently large then it's merely a matter of time before some part fails. We need to make it easier and simpler for regular developers to do the right thing without requiring that they setup even more complex systems which require extensive administrative knowledge in order to successfully accomplish anything with a modicum of security.

[0] https://en.wikipedia.org/wiki/Principle_of_least_privilege
Python doesn't have true encapsulation unless you drop down to the C level to enforce it separately from the actual runtime. Unofficially, there are conventions on how to mark functions as part of a public interface, but practically speaking, if someone can import your library, they can do whatever they want with it, including adding and changing behavior at runtime. Classes, modules, and even class and function definitions are just hash tables under the hood, and you can change what a given symbol refers to in whatever arbitrary way you want to.

Granted, you shouldn't do very much of that except in some extremely specialized and careful circumstances, but in a language that makes it really easy, you have to be extremely disciplined and often delivery velocity takes precedence over careful planning of what really constitutes a public API.

Practically speaking, putting separate services in literally separate process spaces where the only way they can communicate is via message passing is the only way to really enforce encapsulation.
It's a compiler level thing, not runtime.

ie. Scala has tail call optimization but Java doesn't, but they both run on the same JVM.
$44 million + the many more millions he makes annually hires a good agent. Also I’m sure it’s not unlikely that Google is using their PR contacts to pick the writer that does the profile can yield some favorable coverage.
> Some get kick out of games, some out shitcoins.

> I just find gaming industry as useless burning carbon and trying to milk money from the naive.

Can Video Games be divorced from the Gaming industry? Are you saying that gaming is as invalid a form of entertainment as crypto mining and speculation is? So other forms of entertainment are more valid, or is entertainment not a valid use of time?

If we assume that video gaming is not an invalid form of entertainment, how many gamers are measured compared to miners and speculators? I suspect that entertainment person-hours per joule is substantially better for video games than it is for bitcoin. In which case, if video games were a valid form of entertainment, then what we want are video games that use less energy.

If video gaming is a lesser form of entertainment, why? People said 100 years ago or thereabouts that books were a bad influence on society.

I don't quite understand what the naive part of video gaming is though. Is that in reference to gatcha?
Youtube made it trivial to embed videos into other websites. While Google Video didn't prioritize that at all for too long. So there was a time when youtube videos were embedded in pages all over the place. I remember that being why friends of mine put content on Youtube instead of Google video, while they were otherwise devoted to all things Google.
It makes sense to me. As I understand the FreeBSD mailing list posts, it was commissioned commercially, to add a feature to NetGate products.

Must have: in-kernel WireGuard for NetGate products.

Nice-to-have: a general-purpose FreeBSD kernel WireGuard.

The scope crept, and a piece of code that might have been fit for some purpose (whatever limitations NetGate has for its network stack, like "no jumbo frames", etc) was recast as fit for all purposes.

I guess Colin would have some insight about the process by which a ports-grade kernel module gets put on track for release in the kernel itself.

My take on this is that absolutely no part of the development process that led up to this is Jason's problem. It is not Jason's job to understand or assist or comply with NetGate's product development process; his concern seems to have been, justifiably, exclusively the proposed FreeBSD OS feature. I get the sense that a lot of the friction here comes from pfSense-types thinking that any part of pfSense is everyone's problem.
https://www.thelancet.com/journals/eclinm/article/PIIS2589-5... found "Rapid border closures, full lockdowns, and wide-spread testing were not associated with COVID-19 mortality per million people.". https://www.frontiersin.org/articles/10.3389/fpubh.2020.6043... found "Stringency of the measures settled to fight pandemia, including lockdown, did not appear to be linked with death rate."

The lockdowns didn't help your grandparents at all, all they did was destroy the lives of many young people and business owners, and plunge over a hundred million people worldwide into extreme poverty: https://apnews.com/article/lifestyle-health-ap-top-news-addi....

> Personally I would rather you all stayed home for 2 weeks rather than sacrifice my grandparents for the economy.

If you think the life of your grandparents is worth more than a hundred million people in poor countries being able to put food on their table, you're incredibly selfish.
All of the mining card SKUs except one were confirmed to be using older Turing-based architecture on a completely different fab and node (and one that's not currently bottlenecked to the same extent as TSMC 7nm/Samsung 8nm are).

So they are not harvested silicon, but they also don't compete for fab time either.
> But if you allow them blanket access to your github (or gitlab), YOU SHOULD ARGUABLY BE DISQUALIFIED FROM BEING A SOFTWARE DEVELOPER!!!

The author would probably have himself professionally disbarred if he knew what Disqus was doing with his blog. Which is why I think we should be more forgiving of mistakes than what his tone proposes. GitHub obviously has room to improve, but ultimately the system runs on trust, and sometimes the best we can do when it's violated is react to solve the problem and then write a postmortem.
SLO is the nightmare nobody touches.

In practice, logout in a federated environment seems to be

* A user logs into apps A, B, C (...)

* While using app C, the user clicks logout. App C trashes their cookies

* With luck(!) the IdP provides a low friction logout endpoint – think "GET /logout?redir=http://foo.bar/logged-out".

The app redirs to that endpoint, the IdP trashes cookies and directs back to the apps "you have been logged out" page.

Apps A and B? Go with god, and good luck. Keep your sessions short.
Google undercuts Apple with new 15% revenue share for Play apps
Many Korean tripartite (세벌식) keyboard layouts have a virtual numpad accessible with shift. In a particular layout I'm using [1] it is HJKL:YUIOP for 0 through 9, so you can type 3.141592 with shift plus L.J:JYPK. Note that most symbols from the numpad can also be typed with shift, and full stop and comma can be specifically typed with or without shift. To me it is much better than the ordinary numpad (even at the middle) because it only takes two rows instead of three rows.

[1] https://en.wikipedia.org/wiki/File:KB_Sebeolsik_Flnal.svg
Opening that documentation page gave me flashbacks.

I made the switch out of IT to another field. Configuring a Shibboleth IdP was probably the hardest thing I ever had to do in my IT career, it really pushed my capabilities. SLO wasn't the only hard thing, the whole thing was immensely challenging and every time I'd restart Jetty I'd be holding my breath hoping it would come up again.
> The system works not by making it hard to steal money, but by making it easy to get back.

In other countries the system works by making it hard to steal money: I'm in New Zealand, and you can't do really anything with my account number, except pay me. Direct debit does exist, but it's a lot harder to setup (I have to send the bank original signed documents if I want to setup a direct debit from my account) to the point that I think many people don't even use it.
"The idea of a neural network dated back to the 1950s, but the early pioneers had never gotten it working as well as they’d hoped. By the new millennium, most researchers had given up on the idea, convinced it was a technological dead end and bewildered by the 50- year- old conceit that these mathematical systems somehow mimicked the human brain."

This is not only false, but in the context actually intentional misrepresentation. Most of the issues with the model was solved by introduction of hidden layers and backpropagation learning, which is at least in my opinion required knowledge in CS since at least early 90's and probably earlier (it is not clear when the idea was formulated in usable form, put the most cited publications are from late 80's, eg. Rumelhart, D., Hinton, G. & Williams, R. Learning representations by back-propagating errors. Nature 323, 533–536 (1986). https://doi.org/10.1038/323533a0).

On the other hand obviously more complex modern approaches to the "throw bunch of poorly understood linear algebra at he problem" problem have value and there is definitive generational shift in the current "AI-anti-winter" (for lack of better word), but still...
Very interesting. I wonder if meditation acted as a "trigger" experience, much like how heavy use of psychedelics is known (or at least widely believed) to trigger latent schizophrenia in people who are predisposed towards it.
Not the original version. The current version is a hybrid of code compiled from Java (J2CL, previously GWT) mostly business logic shared with Android, iOS, and the server backends, and a UI that is built with Closure Library. It's monolithically compiled and globally optimized via Closure Compiler.
Most web sites aren't accessible. A capability is irrelevant if it's never used.

Meanwhile, beauty is in the eye of the beholder. The modern webtech trends are offensive to my eyes - in addition to being ridiculously compute- and visual-space-inefficient.
>Since I'm questioning the EMA here I'll add that "Vaccines are Good" and that we should await expert opinion before making idle speculation.

What is this, some kind of cult in which nobody dare question?
Not to pile on (as the idea isn't necessarily, immediately crazy):

1) The filesystem is a surprisingly decent datastore,

and,

2) Unless your write-volume is unreasonably high for a GH repo, your main problem is making sure your locking (and unlocking) is rock-fucking-solid; Git has built-in locking, but I bet Github has either replaced it or has some serious state-machine stuff going on to manage it outside of Git itself,

also and,

3) Reads on files are ultra-cacheable, obviously, and reads on HTML pages are too, and serving a second-or-two-stale read isn't a problem ~100% of the time in GH's use case, so read volume isn't really a problem.

[EDIT] source: have designed and developed a git-backed, client-accessible product at a much smaller scale than GH, but enough to see where the problems & strengths could/would be, at greater scale.

[EDIT EDIT] oh and with a bunch of clients using a bunch of different repos that effectively never interact except through normal git-push/PR behavior, obviously horizontal scaling is a breeze and a half. All you need is a little routing to figure out which repo is where. Git itself, plus your locking solution (whatever that may be), give you the tools you need to migrate from one server to another if you need to move a repo, probably with an unnoticeable amount of downtime (=locked repo) if you're clever about it.
Am I from a different planet or is this an absolute load of incomprehensible nonsense detached from reality that solves no "real" problem in any effective way or acknowledges the complexities of reality?

I could be from a different planet, and maybe I'm the crazy one, but I've been keeping up with technology for 25 years and this just rings alarm bells.
For those interested: financial reports of arxiv https://arxiv.org/about/reports-financials
In this context it would likely be someone who provides intellectual leadership through writing, but is not employed by a large media company like The New York Times.
For an example of what I mean, check out the https://pypi.org/project/aioify/ library. This intercepts all of the function and method definitions in a module as they are being imported and rewrites them on the fly to turn all normal functions into async functions.

The language designers definitely took the path of we're just going to assume you know what you're doing and give you absolutely every last foot of rope you could possibly want to hang yourself with.

It does make things fast and easy. See all of the complaints here lately about having to rewrite significant parts of an application to become async as soon as any part of it becomes async? Not a problem in Python. There's a library to just automatically rewrite all code as it is being imported, at the cost that the code you're actually running is not the code you see in your repos.
I'm assuming they're implying that this "theft" was something else: https://arstechnica.com/gadgets/2020/12/340000-of-nvidia-rtx...
It was last updated in 2017 per the date at the top, but yes, it's an older article.

This post indicates that 3p cookie issues only affect SSO providers without a hostname that lives within the primary websites domains: https://blogs.akamai.com/2020/01/cookies-single-sign-on-and-... (so SaaS offerings without domain masking). Is that your understanding?

Here's an interesting post on the samesite implications: https://www.troyhunt.com/promiscuous-cookies-and-their-impen...
>... humans being taken care of is an accidental side effect

No, in any non-totalitarian society, humans being taken care of is the main effect. In a market of buyers and sellers, it is only by making the buyer better off that the seller survives. As Smith said over 200 years ago, "It is not from the benevolence of the butcher, the brewer, or the baker that we expect our dinner, but from their regard to their own self-interest."
This article makes me think that people don’t consider the dosage of meditation enough. Most treatments/practices have some range from ineffective->helpful->harmful. 10 hours of vipassana is maybe a hundred times more intense than 10 minutes of guided meditation. It would be surprising if they both fell into the “helpful” range.
On the other hand, I love that GitHub forces app developers to ask for so many permissions. Here is why…

When my teammates asked me to provide internationalization support for all our projects via Crowdin, I gave them a detailed list of all the permissions Crowdin’s app requires to sync data back and forth via the GitHub integration. The answer from the product manager, —No way! Build that yourself. We are not giving full access to all our public and private repositories to a third-party company to have translation capabilities.— As a result, I spend a couple of weeks writing a custom Gettext parser to allow my teammates to provide translations via PO files.

Similarly, when my teammates wanted to use a popular CI/CD service called Travis CI, I also gave them a list of all the permissions required to offer most, if not all, their features. Again, a product manager told me to stop and use something that we could self-host, so I went with GitLab CI.

I could continue telling stories, but the point is, thanks to GitHub’s extreme and ambiguous API permissions, I can continue working at a bit company and earn a lot of money. Other people probably spend five minutes integrating third-party services they blindly trust and then move on to more exciting work. But as my father used to say, work to live, not the contrary, so if I can get FAANG money by writing simple programs to replicate what a SaaS has to offer, I feel accomplished and can move on with my life.

Thank you, GitHub, for creating an app integration experience so bad that I can keep my job.
It would be a great step.

Next step would be adding more keys under thumbs: backspace and arrows would be good candidates.
For QA Wolf we created a separate GitHub OAuth app just to avoid this UX bug
As someone who is bipolar and has had multiple psychotic breaks, this does not surprise me I’m the least.

Put the right stress on any mind, and it will break. I spent four months believing I was a fictional character from my own writing. The experience permanently changed my personality. (See my blog if you’re curious about some of my life experiences.)

My brain is more susceptible to this kind of thing, but it can happen to neurotypical people, usually from traumatic events.
The number of jobs that horses can do is a rounding error compared to the number of jobs that humans can do. If we're living in an imaginary future where machines can be trained to 90% of jobs, sure. But google a list of "most common jobs" and see how many a computer could do fully.

Even if you think a miracle ai revolution is on the horizon, humans and horses are not comparable in terms of diversity of labor
Doesn't it depend on who controls apps A and B? If they are COTS or created by different parties, then all best are off. But if all three apps are created by the same org, which can specify standards, doesn't one have some hope?
Really curious. Can you give more details?

Vamachara stuff is forbidden and can lead to extremely dangerous reverse effects.
You are free to try and jail break your device if you want. Also, your statement is false: buying most things don't involves the transfer of all rights. You aren't free to make copies and resell. The app store is a service that comes with the phone.
I don't think anybody wants to make confidential info open here. We are talking about things that end up in publishers hands not trade secrets, defense or what else. DARPA funds a ton of open research too. I find your comment a bit misleading here.
After some consideration, I am going to buy a System76 computer. I want them to succeed.
> It's not hard to imagine that rushed trials, rushed production and pressured approvals might not lead to the best process.

Fun fact: thalidomide, the drug that caused birth defects, would have passed the trials that the Moderna vaccine's been though, because pregnant women weren't included in the study participants.
All the mRNA you speak of .... is wrapped in fat that is really, really small.

Would you not be more worried about all that lipid nanoparticle in your body?