skysight-inc/HackerNews huggingface dataset:
So Apple is suppose to break the law of China? Why don't you go there and start openly distributing illegal material and see what happens.
Github does have repo-specific permission grants. The app in question is probably not using it, but it is possible. Here's what that consent screen looks like - https://docs.github.com/assets/images/install_permissions.pn....

You do NOT have to give access to your entire account/organization to a well-built app.
The whole industry has a permission problem. There's this concept called the "principle of least authority," the idea that programs should only have access to the information they need to do their job, and no more. We are so far away from that it's not even funny.

Overbroad OAuth scopes are one example of this, yes. Here's another: consider all the dependencies you use in your applications as a developer. Any single one of those (perhaps hundreds of) dependencies can typically do anything you can do; it can rifle through your ~/.ssh directory looking for private keys, it can add stuff to your .bashrc, it can make arbitrary network connections, it can edit your browser settings. Likely most of them don't need to be able to do any of this. And yet that's what we accept in our computing environments, every single day.

Yes, it's incredibly dangerous.
> Megan mentioned that she had stopped taking her medication. She had been on the lowest therapeutic dose of Zoloft for mild anxiety since her early twenties.

Zoloft can really mess you up if you stop cold-turkey. How odd that they didn't bring up comorbid risk-factors until half-way through the article.
You could do this using a robots.txt file (assuming the scraper obeys it, of course).
It gets much worse. There are payment methods building upon this structure that fully analyze your bank account transaction history for income details to produce risk results and give back these raw results to merchants.

https://developers.paywithmybank.com/api/#get-user-income
But think about all the things that you can't do in FoxPro, like build an accessible and beautiful user-experience :)
China's total new births last year was ~10 million. Lowest on record but still multiples more than US + immigration will replenish. Chinese scale = enough new birth/talent without immigration to rival entire OECD block until 2050s.

IMO China doesn't need immigration to survive the demographic crisis, it needs excess labour to manage the transition, declining / smaller total population is the goal - simply too many people right now. Tons of labour can be arbitraged between poor and rich provinces or imported from poorer neighbors on remittance basis without the massive welfare commitments of immigration. Western countries with comprehensive social welfare systems sustained by massive immigration have greater risk of collapse - note all the protests happening in first world countries due to system already fraying. Versus China where the bottom 50% will incrementally improve because they're barely above poverty in the first place. The income gap is so massive that it takes relative less resource redistribution to maintain stability. When 600M / 40% of the population accounts for 7% national GDP, a few years of "slow" national growth @5% generates enough wealth to increase their welfare by 40%. Compared to west where all signs indicate each generation will struggle more than the previous, combined with massive immigration and you have recipe for political instability. Unsustainable social safety net and demographic change due to immigration is as much of a ticking time bomb as declining demographics.
Sigh I don't think you understand. The comment I was responding to said they dont want to use other payment processors. Walk into a store and demand that they use a payment processor you like especially ones with such onerous requirements.

As for your comment normal producers of goods can sell directly or choose what stores to stock their product. However, here a developer has no choice but apple and the same goes for a payment processor. Its all because the hardware is locked down infringing on the property rights of device owners. Apple does not even own the hardware after they sell it. Apple can run their store like they want however the only reason is its a problem is because they infringe on the device owners rights, and they cant run software unless apple allows that software to run on the device.
Epic is free to distribute a jailbreak. Apple is also free to update their phone to cover that security vulnerability.
>The notice outlined a path 20 nautical miles wide and 426 miles long at an altitude between Flight Level 450 and Flight Level 600, or 45,000 to 60,000 feet.

What usually flies between 45 and 60k feet? Anything cool?
2015 World Expo in milan was pretty sad despite having 145 countries.

The architecture was pretty good in a few instances, but the cultural elements were about as good as I'd expect from a board of tourism.
(GNU) tar xf is smarter than you might realize these days. Try leaving off the z or j or whatever and just watch.
We're talking about an algorithm being used as part of the court system to determine whether or not someone rots in jail, not about how you choose your babysitter.

It needs to be held to a higher standard and punish people based on their actions, not based on what their parents did.
I think J1772 has basically won in the U.S. for AC charging. It's hard to imagine something replacing it at this point. The competitors are Tesla's charge port and the other DC charging standards. DC chargers though require a lot of power and are expensive, so it's not realistic to expect them to be ubiquitous. J1772 is not much more than a 110 or 220 outlet with a fancy plug and electronic handshake protocol, and can be installed just about anywhere that a regular 110 or 220 outlet is, assuming adequate power is available at the site.

(A typical house might have dozens of outlets, but no one expects to be able to run a space heater off of every single plug all at once. Someone installing dozens of chargers, on the other hand, probably intends to use them simultaneously.)
The west (and the east too) has commercialized meditation and yogic practices and reduced them to some pseudo medical amalgam that will solve all your health and mental issues.

Per Hindu practices, Meditation is the first, foremost step towards self realization. For attaining liberation and knowing god. It is a tool to calm the mind and prepare it for deeper states of realization (samadhi, nirvikalpa samadhi, etc). It is just a tool, like a hammer or chainsaw, that serves a greater purpose.

Yogic practices, at-least the physical ones, are for strengthening the body to face the rigors of long term meditation and deeper conditions.

Hindu scriptures clearly say that such practices are to be done under the guidance of a qualified guru (A true guru is one who has attained realization him/her self.)

Nowadays, business ventures are being built around this fad with mostly falsehoods mixed with grains of truth.

There is an excellent book [0] that records the conversations of one of the greatest modern era yogis [1], whose whole life was spent in meditation. The book is a great read and records his conversations with many western visitors. Do read it to get a better understanding of the context of meditation and related topics.

[0] https://selfdefinition.org/ramana/Talks-with-Sri-Ramana-Maha...

[1] https://en.wikipedia.org/wiki/Ramana_Maharshi
I have been working on a universal Calendar app for Apple platforms, as iOS, iPadOS, watchOS and macOS specifically; named Clendar. [0][1]

My goal is to learn SwiftUI and explore new Apple technologies.

The app is now open source on GitHub as well, it's my way to give back to the community as I was learning it. [3]

Feedback welcome!

---

[1] Download link: https://apps.apple.com/us/app/clendar-a-calendar-app/id15481

[2] Landing page: https://vinhnx.github.io/clendar-site

[3] GitHub: https://github.com/vinhnx/Clendar
Yes. Web technology has advanced so much that now I can do with a Web-based GUI editor and some DB-to-JSON-Rest framework, what every child was able to do in VB6 25 years ago, just in 10x the time. We're finally almost there.
The point is that's not an option. Everyone should get the public tier. And if you tried to pull a lot of data, you'd get throttled.
Why didn't you read the article completely? It's not very long, and it's probably worth reading all the way through.
Investments to Fight Polarization
Umm... that's already required? Or at least required by NIH which funds a huge amount of research.

https://en.wikipedia.org/wiki/NIH_Public_Access_Policy
Thanks! Ideas are all around us.
probably they had shares/cash payouts that would vest over some schedule
Have you removed the sim?
So... UC researchers got scammed again. Now authors will have to pay both from their direct and indirect costs. The university just managed to save a large chunk of money (that is now the burden of researchers own funding) and Elsevier will make a shit ton of money with the deal.
> What I do not hear anyone talking about is that the biggest reason for the spike in power was ERCOT adding cost to the market prices in order to entice generators to get more power on the grid quickly. ERCOT has the authority to supplement energy prices with "adders" up to the max allowed cost of $9000/MWh. ERCOT did this for almost the entire duration, even when the market price for power was only at the astronomically high level of $250/MWh.

Wow, that's free market thinking gone mad. High prices can't conjure power stations out of thin air on short notice.
optical mice - anyone remember cleaning mouse balls?

led lighting
There is not. Right of first sale. Once it's sold it's done. That's why places are so eager to add microprocessors to everything. With the right cryptography, you can lock the user out of tampering with anything.
Pretty good summary. I would say the general rule at this stage is to move away from CSV as much as possible and use either Arrow/Feather or Parquet depending on the use case and the library support you need.
> It is my understanding Nvidia allowed cryptominers to pull up semis and load them up with GPUs in exchange for about a billion dollars.

Source?

Never heard such a thing. Partners (MSI, ASUS, etc): absolutely. NVIDIA, I've never heard any evidence they sold directly to miners.

> My guess is this was accidentally on purpose (see also the recent shareholder lawsuit; Nvidia did win that one btw).

I think it's incredibly likely that we see this re-introduced on 3080 Ti or 3080 Super or whatever they call it which is about to be released, as well as with future generations of cards, which strongly argues against this being an "accidentally-on-purpose" thing.

People love to make up conspiracies about NVIDIA but all it takes is someone building a beta driver from a feature branch based on an old build that didn't have the mining brake yet, it's quite probable that this is just an accident. But it's NVIDIA and they're the only company people love to hate more than Apple.

People hate NVIDIA for releasing drivers that broke the mining brake, and they'll hate NVIDIA for reinstating the mining brake in the future. People get mad no matter what NVIDIA does.
I've experienced some 10x jumps, mainly because I tend to wait until something comes along that's 10x before switching. Not that I'm smart, but stubborn.

- Turbo Pascal. My dad knew nothing about computers, but the Wall Street Journal ran an article about TP, and he knew I was interested in programming, so he got me a copy for my birthday. It allowed me to program almost as quickly as BASIC, but with half a chance of my programs working. (Yes, 50% chance was a 10x improvement). Not to mention, a motivation to learn more disciplined programming.

- HyperCard and then Visual Basic. I never had to learn the guts of a modern OS and its API just to write usable software.

- "Scientific" Python stack. The quality and breadth of the language, tools, and libraries is just stunning to me. I looked into Python because it was getting a lot of "buzz" when I first joined HN. Thanks, y'all.

- Arduino and the higher powered microcontrollers that it supports, for making it easy and quick to whip up applications. But even pre-Arduino, a number of 10x improvements came along for me on the hardware / electronics side, starting with microprocessor interfacing in BASIC, EEPROM based microcontrollers, decent C compilers for embedded.
This is what SELinux gets quite right under some configurations: that my home directory has distinct types of files and programs need to ask for very specific permissions to access some of them.

Though MAC schemes in the Linux world are incredibly fragmented these days and containers have just made that worse.
Raw strings don't apply to regexen. You still have to escape the metacharacaters.
About 17 years ago I tried out some vamachara tantra exercises I found on the web. Heady stuff. It gave me a three week episode of full-blown mania. I only needed four hours sleep a night. I had this wild urge to run and jump everywhere I went.

After three weeks, it culminated in an auditory hallucination that was indistinguishable from telepathy. Then the mania suddenly drained and never came back however often I repeated the exercises.

Years later, I was diagnosed with bipolar disorder, but it's usually fairly mild, with hypomania and mixed states which get worse when under stress. Nothing was ever again as intense as the meditation-induced mania of 2004.
You don't normally sell things with limited ownership rights. Selling something generally involves the transfer of all rights in real/tangible property. Here apple is reserving some rights even after sale. Last I checked apple was not leasing devices or something similar.
Zoom in on any satellite shot of a city, or a road... count the cars vs the solar panels you see. Yes cars are out in the sun... lots of them, all the time. The fact the satellite can see it means there is solar energy in that spot, right when that photo was taken. Multiply that by "All the cars outside in the world" and it's a lot of energy. (Even if they are all still plugging in at their destinations as well).
GitHub permissions are horrible.

I need to create repo specific tokens. If I integrate with some 3rd party CI tool, why must I grant access to all repos? Or can’t I grant read only instead of write and full control.

I have access to lots of repos and orgs, I don’t want to worry about everything getting hosed if a single token is compromised.

I also don’t like that for an org, I have to approve apps for anyone to use for anything. I’d like more fine grained controls to approve what they want to do, for the fewest repos necessary.
Build the CLI tool or bot. I think you can utilise Telegram or Slack bot as the user interface.
It is the case, but usually only mandated after a year and only if you used federal funding. but now that there are preprints, we can see the research much faster so papers in expensive journals matter less (except for promotion where bean counters dtill ebjoy tjeir excel sheets to sum and multiply impact facotrs).
> Also 'apps for meditation' are extra stupid

The irony of these apps coming out a few years ago. And the popularity of them. I guess it becomes more of a routine and escape from reality, rather than mindfulness and meditation.
There's also two sides to this: services can ask for permissions, but I want to be able to only pretend to give them some - i.e. asking for all repos access should let me lie and say "no only things such match this regex or this security tag".
I think his logic holds.

The point is that we found new jobs for horses because there were areas where machines were inferior to them. Once machines could do everything that a horse could do (probably some mixture of load carrying and agility / endurance) we had no more work for them.

To bring the same logic to humans, in history machines freed up humans to do better work than before. Let's say what humans excel at is dexterity and thinking. Once machines are more dexterous and can think better than people, there's no more new jobs - because whatever jobs they would be, machines will be better qualified for.
The US is probably one of the countries that declassify the most though. Try to get a European country or China to do that.
I think the Nokia N95 was the best phone of 2007
Lucid dreaming just ruins everything. Just when you get to the good part, you realize.
Check on Godbolt. Show us your code.
How to Sign a Release of OSS
> Java programs normally sit on a server, or many servers of the same arch.

That's true right now, but it wasn't true in the recent past (SPARC) and it might not be true in the near future (ARM).

Early in my career I was on a team that migrated our Java application from elderly Sun boxes to newer x86 hardware, and it was relatively painless. There's a good chance we'll eventually to the same from x86 to ARM. Most developers will also continue develop on x86 for the foreseeable future.
It’s >~6000 words (12-13 pages). I would argue that’s far longer than most articles, but to your point, it is worth reading in its entirety.
Thanks for the suggestion! I'm adding this to the shortlist.
This story sounds highly suspect.
They're not private, they're "secret". The descriptive text when choosing between "secret" and "public" says, "Secret gists are hidden by search engines but visible to anyone you give the URL to", though to be fair this isn't as prominent as it could be.

Given that private repositories used to be a paid-only feature and that gists as a feature haven't been substantially updated in the last 8 years, I'm not all that surprised that there isn't a "private" gist type.

https://docs.github.com/en/github/writing-on-github/creating...

> Secret gists don't show up in Discover and are not searchable. Secret gists aren't private. If you send the URL of a secret gist to a friend , they'll be able to see it. However, if someone you don't know discovers the URL, they'll also be able to see your gist. If you need to keep your code away from prying eyes, you may want to create a private repository instead.
One of my favorite is creating an API token for something that needs to read PRs and milestones. "Full control of private repositories" is the only option that works :D

SaaS CI/CD permissions are a bit of a mess too; not sure what the ratio of blame on that is though TBH.
for a while i got confused and thought you were talking about usage of cobalt element in manufacturing of automobiles.
I really do wonder why this issue is not given more light.

You can potentially BGP hijack a domain (via DNS) and e-mail (via SMTP) as a private individual so easily. Image a nation-state. These protocols only have bandaids like DNSSEC and RPKI stopping you from doing it, which both have painfully small adoption and don't realistically stop a determined attacker.

This could happen at anytime by an individual with the motivation, and it only needs to be successful for a few minutes to gain access to a huge amount of private data.

This has to be a huge national security risk, right? Why do we not take it seriously?
Not my read. The university caved and decided to use the researchers money to pay half of the contract with Elsevier.
I recently needed to add a personal Chase account to a business Chase account to send a transfer.

I kid you not, their own account linking flow used Plaid to collect my Chase(!) personal credentials and verify my Chase(!!!) personal account, within their own web UI while actively signed into my account.

Granted, there is capability in that UI to link any external account, so you can sign into other banks. But I mean come on...at least implement something secure for your own damn accounts!
Ah, the dates of the comments at the bottom helped explain the lack of modern day issues we now hit - 3p cookie depreciation and the Chrome Samesite change. Both of these break logout, but certainly weren't a concern in 2008.
Those apps must be used predominantly by Extended Warranty salespeople, right?
UC is also really collaborative so they share a ton of papers with others
Please provide evidence.
> They may not have done all they could to keep the place stocked, but they can't magically make trucks with food appear.

ERCOT sets prices. The dispute is that they set them dramatically higher than necessary to "incentivize" maximum supply. Because the supply was structurally constrained on a very short-term basis and distribution and consumption was already completely unhinged from market forces, it was predictable that such extreme pricing would have done diddly squat to change the supply or demand curves. What it did was unnecessarily shift money from the pockets of consumers to the pockets of those holding supply contracts.

And it's also beyond dispute that the people enjoying this windfall are simply going to walk away w/ their money. Nobody is under the delusion that they're going to invest that windfall into upgrading the infrastructure; least of all Arthur D’Andrea, who literally said on the call that paying (directly or indirectly through surcharges) for infrastructure improvements was an entirely separate, future concern, mostly on the part of the legislature. That's because it's not the suppliers enjoying the windfall, but those holding the contracts.

Most of the time ERCOT's price control powers are merely nominal; they seem to act as a market clearing house, resolving bids and asks into a single, set official price. But in this case the market wasn't functioning at all, so ERCOT's nominal powers devolved into the discretion to set an effectively arbitrary price, and they stupidly choose to set the maximum possible and for a longer time than was prudent if they had any concern for consumers' (i.e. Texans') welfare.

This is what you get when people adopt "free market" principles as a religion, rather than understanding them as a set of dynamic, natural forces. In this case, our devout believers set some absurdly high price (the maximum allowable under the law) ostensibly according to their understanding of the kindergarten model of supply & demand, where every increment of price increase should marginally lessen demand and marginally increase supply. But, again, it was obvious that principle was irrelevant in context and they should have exercised their judgment as administrators holding public trust rather than as priests performing scriptural commands.

D’Andrea's interest in reassuring investors--who are otherwise important for a well functioning, highly liquid market--would be understandable but for the context of it all, including the fact the price was at ERCOT's discretion both at the time and (presumably to a more limited extent) afterward. Part of the whole point of a regulator building that trust is to be able to leverage it during emergencies; to reassure investors that they (along with everybody else) will come out the better so long as they cooperate during the emergency rather than run for the doors. But if you show that you'll simply give away the store at the drop of a hat, you haven't earned any trust or respect, you've invited greater volatility in the future.
> Java programs normally sit on a server

Or an Android smartphone or media streamer (Android TV).

However, those programs won't run anywhere; they need Android.

Java has turned into C. Java programs need a platform-specific set of libraries just like C needs POSIX, or Win32, or VXWorks or ThreadX or whatever.

This is pretty much inescapable.
I mean this was just price discovery. Google could have reneged too. Really showed the value of incorporating
Facebook AI Proposes Novel Scaling Analysis Framework and Strategy
Interesting, I had never heard of it. I got the Oura ring for tracking recovery and sleep. However, for active health stats and better integration, I thought a smart watch would be a good idea. I'll definitely look into Polar Vantage. Thanks for the suggestion!