skysight-inc/HackerNews huggingface dataset:
The OP means that in using https (and being forced to used https) you are also being forced into paying a 'third party' an annual fee just to get a valid certificate.

That 'third party' is one of the recognized 'certificate authorities'.

But the OPs point is by going https, you don't have a choice, you have to pay the certificate tax.
They won't flip parties and no incumbent is ever at serious risk of a primary challenge. You can call it transparent I guess but it's also a foregone conclusion.
Shopify is hiring 2,021 engineering roles in 2021 (2x'ing)
To put it bluntly, calling a transgender woman a "trans-identified male" and a "young and deeply troubled boy" is very poor taste.
But women generally don't want to be part of harems. If they want something besides sex, they pretty much need to stop sharing a small group of attractive guys and start settling down with the less attractive guys.

Perhaps tinder is not the place to find a guy for settling down.
GP is referencing a comment on Instagram [0] that states that it cut off another ship enter the channel /before/ it grounded:

> @tjcsalisbury Yepp! And I believe they cut us off this morning entering the canal and then this happened and right after they ran aground the ship behind us lost power and almost hit us so it’s been a fun day lol but now we are just anchored here hopefully it won’t be to long but from the looks of it that ship is super stuck they had a bunch of tugs trying to pull and push it earlier but it was going nowhere there is a little excavator trying to dig out the bow

0: https://www.instagram.com/p/CMxEKHanW62/
I don't think this will impact. There is already a lot of possibility of delays, for example ships taking detours due to bad weather systems, etc. Nobody plans success of their production based on the ship arriving on exact day.
Presumably the parent commenter is talking about providers (or potential providers) of public goods being gobbled up, leading to the classic economic problem that public goods tend to be under-produced.
Oh yes, I also forgot to mention I was using macports :)
> One may ask: if executable space protection is so easily circumvented, is it worth having?
> Somebody must have thought so, because it is so prevalent now. Perhaps it’s time to ask: is executable space protection worth removing? Is executable space protection better than nothing?

> We just saw how trivial it is to stitch together shreds of existing code to do our dirty work. We barely scratched the surface: with just a few gadgets, any computation is possible. Furthermore, there are tools that mine libraries for gadgets, and compilers that convert an input language into a series of addresses, ready for use on an unsuspecting non-executable stack. A well-armed attacker may as well forget executable space protection even exists.

> Therefore, I argue executable space protection is worse than nothing. Aside from being high-cost and low-benefit, it segregates code from data. As Rob Pike puts it:

> This flies in the face of the theories of Turing and von Neumann, which define the basic principles of the stored-program computer. Code and data are the same, or at least they can be.

> Executable space protection interferes with self-modifying code, which is invaluable for just-in-time compiling, and for miraculously breathing new life into ancient calling conventions set in stone.

This is an absolutely unnecessary and totally specious line of reasoning. I worked for 6.5 years on V8 and can say with strong confidence that 99.9% of remote execution vulnerabilities that we saw in the field were because of RW executable memory. We did a lot of work to make write-execute exclusion fly in V8 for JavaScript code, without a major performance penalty, and that massively reduced this attack surface. That only works because we could totally quiesce JavaScript code while the JIT modified executable memory and flipped permissions from RW to RX. Yet other attack surfaces remain. In particular, V8 still needs RWX JIT code for Wasm, because tiering and parallel compilation. Guess where attackers learned to get the one remaining source of RWX memory? Yeah, just make an empty Wasm module. And for the record, that doesn't mean they were exploiting bugs in the Wasm engine, just using it to get some memory that is RWX that they can overwrite through some other bug.

This article, though great on specific technical details about ROP, is terrible security advice. It is not theater to reduce attack surfaces. Take away an attack surface and yeah, attackers will find a new one. But it acts like a filter; if you make it 10x harder, you get 10x fewer exploits. It raises the bar.

And for the record, though I didn't look at every single one, I never did, in fact, see a ROP exploit against Chrome except as part of some hackathon or pwn-to-own. Attackers were just walking in the front door when you have RWX!
render.com is a better Heroku. Absurdly easy, inexpensive and killer UX.

They also have in beta a way to spin up whole environments for every PR your dev team has. Imagine every PR has it's own database, backend and frontend, spun up/killed on the fly.

It's a very compelling feature.
For the more than 42M borrowers with federal student loans, the Co (cont)
The site in that article was set up to allow random malware to be uploaded and effectively hosted. So not a good example.
I was just responding in the abstract to the parent's assertion that there'd be no point in keeping such a thing secret. I can see lots of reasons governments would want to keep it secret. Could they? Probably not for very long. They'd eventually be dragged into divulging by someone else divulging or a huge data leak.
Not that prick but he’s not far off it. Was a large trade association.
The absolute worst train to fall asleep on in Tokyo or maybe it’s the best?
The slippery slope of bloat is back. "We're currently at a score of 87 so surely a few more ad dollars are worth losing a few points." (one year passes) "Adding just one more chumbox will only drop us from 70 to 66 so we really can't turn it down."
I block a bunch of 3rd party javascript trackers and the like. AMP degrades in a horrible way if you do this - it seems to give me multiple seconds of a completely white page, presumably for no reason other than to punish me. I closed so many amp pages assuming they were broken before realising that they do appear if you leave them long enough.
And interestingly, people still upvote this thread, it’s at 563 now.
Starts to show why China is so keen on the Belt and Road initiative, given that it's essentially ring-fenced in by US allies.
Footage of the backlog: https://www.youtube.com/watch?v=AhSzxe0FuIE

Presumably in the Gulf of Suez.
X to the e

Like the Xzibit song "X to the Z", which might have been good branding as it comes with a theme song
Approaches to User Account Migration
You can simply send a ICMP Rejected Message, which should direct your browser to immediately try any fallbacks or other hosts.

Timeouts occur when you incorrectly configure your firewall to drop packets instead of rejecting.
Correct, but maybe you're missing the point if that's your first thought. It now becomes "The NFT that Jeff Bezos made of Elon's first tweet", not the "Elon Musk NFT of Elon Musk", both obviously much more "interesting" (for human reasons? I don't know, don't care) than the "John Smith NFT of Elon Musk"
Or maybe they could pivot and work on foundry equipment that small businesses could setup in their garage?
I think it should be a good time to start democratising the chip production and so far there is probably no company who can provide tools in this segment affordable for small and medium businesses.
> It's worrying how they are improving the case for "70%" scenarios, while crippling it for the other 30%, without recourse. It's not even funny any more.

70% of the scenarios impact 99.99% of users as well as the project's intended scenario.

> being limited to the same host.

Yes, that's the point, of course.
That graph seems like an accurate reflection of how much effort people of each gender put into their appearance.
Americans need to embrace a vision of suburbia that includes growth and change
Ok show me examples.
Wow, thanks for that guide! Super useful, I've been needing some guidance like this
While I've been aware of this for some time, it just occurred to me that unwanted children would actually cause more poverty, and any effort to prevent mitigation of that actually distributes more suffering.
Hey but google put a rainbow on its webpage and a BLM banner so that is the only important thing
Is that 23 minutes per side?
> Do you have a theory for why they're being pushed off?

Troids
The original statement isn't about women in general but the dynamics on dating apps for people under 30. I think we can agree that Tinder and others are more focused on physical attributes than the ability to finance and support the raising of children
It is only unintuitive if your mental representation of time flows to the right.

We all create a mental model of time at some point in our life, and then stick to it - often without ever talking about it to anyone.

But the representations vary substantially between people. Many people might have a timeline where the past is on the left and the future is on the right - maybe along the reading direction. But for some, future expands to the left. For others, future expands in front of them while the past is behind them (quite inconvenient).

It can make for a great party conversation to explore each others‘ timelines.

If there are parties, that is.
Other than the usual reasons why everyone hates it, the most frustrating for me is that sharing articles with others used to be super simple (copy address from browser, paste into messaging app), but now I have to hunt for the actual non-AMP URL which is impossible to find.
[I know this is tangentially related to your point] Do you have a source on "leather cows"? My understanding is that cow leather is nearly entirely a by-product of beef and dairy cows.
Cloud providers want dependable suppliers with low costs, openness with design, integration with other suppliers and long term roadmaps and support. Outside dependability, Apple is not good on any of the other aspects. Apple run a high margin business, and their processes reflect that.

Apple are a high margin business. I highly doubt they want to harm their gross margin, but its possible. Apple however have not been that successful co-designing.... well, anything. They are highly opinionated that they are correct and this has typically lead to them blazing new trails, but has also lead to mis-steps. For bespoke systems, that would rely on building what the customer asks for. Apple's generally isn't great with working with outside suppliers, generally trying to bring the work inside. Finally this would require apple to tie their hands (in the same way microsoft has) with compatibility to provide the long term support that the vendors require.

Apple would never become the suppliers the cloud providers want. The only way they would be chosen is if the product is significantly better then what otherwise exists. I can easily see Apple leapfrogging incumbent server vendors for performance or such for a short term, but I expect the others will catch up very quickly. Cloud hardware is already well integrated by companies motivated to eek out every little bit of performance (see facebook and the OCP). Despite being significantly more different from an engineering perspective, I actually think manufacturing cars is more similar from a business perspective for Apple.
Those are pretty nice: https://www.tomshardware.com/news/amd-ryzen-4000-powered-asu...
Etiam "How scythed chariots and elephants may be resisted in battle"
> Can you provide a citation for the EMA doing parallel processing

"Rolling review" is the term I've seen typically used for the process that you described, and Wikipedia has references for various rolling reviews by EMA starting with the following: "In October 2020, the Committee for Medicinal Products for Human Use (CHMP) of the European Medicines Agency (EMA) started 'rolling reviews' of the vaccines known as COVID-19 Vaccine AstraZeneca (ChAdOx1-SARS-CoV-2) and Pfizer-BioNTech COVID-19 Vaccine (BNT162b2)." https://en.wikipedia.org/wiki/History_of_COVID-19_vaccine_de...
If Unix is "everything is a file", then Plan 9 is "everything is a network filesystem".

If you have a laptop and a desktop, and your desktop has a printer attached, can your laptop just print to it? In Linux, you have to set up CUPS, open network ports, download drivers, and generally set up both machines to be able to "talk printers". In Plan 9, your laptop just opens the desktop's printer file over the network, and prints.
At the time it was not yet know that the virus is lethal, that’s all that was reported.

Everything was also under control in China, as was later confirmed. Unfortunately by the time the virus was detected in China, it was already spread throughout Europe, since at least November 2019.

I really didn’t expect this sort of rejection of science and facts on HN.
Seeing how it is positioned, the worst case is that they will not be able to move it and they will have to remove some of the load. This might take a day or three depending on how difficult it is going to get a crane and a ship positioned to take the load off.
I am not "confusing percentages". You (now) agree with me on what the data says, you just don't like how it fits in with your theory.

> Now what is happening, is in a covid world, due to masks and distancing, the number of people infected on a daily basis drops from 100,000 to 10,000. Rhinoviruses are sill 20% of that, but they are now down to 2,000....Influenza drops down to only 2% so only 200 cases daily. Masks and distancing have an even more drastic effect in influenza.

Yes, I understand your hypothesis: masks make influenza go down to almost 0, but somehow rhinovirus ends up at exactly the same percentage as it was before. In other words: masks work exceptionally well for flu, don't work at all for rhinovirus.

This is a theory. It is...implausible...but if you want to believe it explains the patterns in the data, you're certainly welcome to do so.
No there are not. Those are second doses. In EU they 'reserved' second doses. UK for example went on to vaccinate as much as possible. That's why there will be a delay now of a month or two.
Sure, pattern matching like that is a shortcut that inevitably yields some false positives. I think the amount of credence it lends is basically an inverse of how much time you want to spend on the issue. If you want to engage deeply, you do your own research; otherwise, you end up taking the word of people whom you already trust.

I don't mean to imply that it lends credence beyond that. I just think it's unfair to characterize this as if only one side were doing the painting, when multiple groups of people seem to have reached similar conclusions.
I recently discovered alpine.js it's really nice for quick front stuff without getting too dirty with touching js...
If you can use redis, redlock can be a nice implementation.

Example: https://github.com/fendy3002/NodeLearn/blob/master/Redlock/s...
I assume he'd tell them what he's doing since they are standing right next to him and can see he's not just adding his contact info.
A person upthread mentions that sometimes these bonds are also long term – Disney and Coca Cola have issued 100 year bonds.
Pedophilia is not a kink, sick freak.
It would be really interesting to see how 2020 and 2021 affected the number of people for every age group who reported no sex in the past year. I'm in my 30s and due to the pandemic I'm currently in the longest voluntary period of abstinence that I've ever had.
> Physicians in China are a particular target market because they typically need to publish research articles to gain promotions, but are so busy at hospitals that they might not have time to do the science, says Chen. Last August, the Beijing municipal health authority published a policy stipulating that an attending physician wanting to be promoted to deputy chief physician must have at least two first-author papers published in professional journals; three first-author papers are required to become a chief physician. These titles affect a physician’s salary and authority, as well as the surgeries they are allowed to perform, says Changqing Li, a former senior physician and gastroenterology researcher at a Chinese hospital who now lives in the United States.

"When a measure becomes a target, it ceases to be a good measure." - https://en.wikipedia.org/wiki/Goodhart%27s_law
Don't be discouraged by that graph; Okcupid also described how looks matter much more to men than women when it comes to actually sending messages.
4k block random read on a regular A1 rated uSD card is 8MiB/s. I benchmark 11MiB/s on some of my Sandisks Ultras, depending on manufacturing date. Writes usually don't matter much, unless you use an inappropriate filesystem for a SD card or sync a lot.

Longevity is longer for SSDs but it's not that bad for uSD cards either. If you setup your system so that there are no pointless writes all the time, they last 3-5 years, no problem, and probably more.

The biggest benefit is that uSD cards are much lower power. And unless the use case is very storage heavy, like a constantly accessed database, or backups, SSD is just a waste of resources.
Agree. Lots of Synology/QNAP devices out there that are designed to be a NAS in form factor but also support things like VMs, containers, and the like. Some of them even do support NVM.
>There is no solution that can satisfy everyone, other than increased toleration of differing views.

... except for anyone critical of Stallman, his behavior or his views, because they're nothing but a frothing mob of Marxist SJWs who wanted to ruin some poor autistic man's life for kicks, or pawns of the proprietary software establishment out to destroy Free Software.

Come on - we've probably had a dozen threads about RMS and this controversy by now, and multiple thousands of comments by his many supporters on this forum, and I could probably count the ones that expressed anything but pure contempt for any view besides "Stallman did nothing wrong" on one hand.
What's with this idea, that all women are constantly having sex with somebody? And that they all want to share their partner so easily...
This book is mostly minimal examples in whatever Python library the author decided to use. There are some major gaps.

For example, the section on Python libraries doesn't even mention the most commonly used Python crypto library (cryptography):
https://github.com/nakov/Practical-Cryptography-for-Develope...

Similarly, the Java section essentially mentions a single, obscure library besides the JCE and Bouncy Castle:
https://github.com/nakov/Practical-Cryptography-for-Develope...

There's also no mention of libsodium besides a bullet list item.
We don’t know this. I think a lot of people expect that there’s an O(n^(2+eps)) algorithm for any epsilon > 0, but that’s conjecture; we might already be at the optimum.
Compared to your desktop / laptop? Sure. But this is the embedded world. I've got a minimalist image on a Beaglebone that takes just over 6 seconds to get to a shell from power on. But most of that is loading the kernel and U-Boot from the eMMC. From kernel to shell is 2.2 seconds. And the BeagleBone is long in the tooth, compared to the Pi4.

NVMe absolutely screams for data transfer rates. And according to these tests, using NVMe adds 30 ms to the boot process.

Something is wrong.
Electric field can easily create plasma at tips. Effect known as St. Elmo's fire. If material have impurity in the form of a tip in a cavity, then an electric field can create plasma in this cavity.
I agree. Overpaying for NFTs is like performance art; the value isn't in owning the NFT itself.
Apparently it has other features, but I prefer fewer, with short man pages, and "small pieces, loosely joined":

exa --tree --level=2

tree -L2
what about smaller dating pool due to obesity
All they needed to do, in my opinion was to let it be known that sites that were optimised for mobile accessibility and fast loading would prioritised in mobile search result placement, above slow, inaccessible sites.
Isn't the behavior in question simply loading the like button image from Facebook's (or Twitter's, or Pinterest's, or ...) servers, where it is logged and matched to your profile by IP address?
I feel the same (from time to time). It's becoming harder and harder to be just "a software engineer" in this industry. All of a sudden, the "perfect" software engineer must:

- be "product oriented: "Think big", "Think customers-first", "Get shit done"

- make his/her colleagues better (by mentoring, by leading by example, by giving talks)

- stand up and make himself heard (e.g., working on projects that touch on multiple teams... because staying in your corner is so 90s)

- focus more on "delivering features" instead of making the products more stable (otherwise, no salary increase. Bugfixes don't bring money)

- be on call, because "you build it, you run it, you own it"

- ... all of these, of course, while keeping your tech skills up-to-date (which is in itself quite taxing)
To be honest, you sound like a flat earther. Reality isn't a belief system.

Would your hypothetical knitting club allow all patterns? That's a political position. If not, would it allow a pattern with the word "VEGAN" baked into it? Yes or no, that's a political position too.

There's no flow through that paragraph that doesn't end in making a political choice. You can't avoid politics, you can only pretend to.
Looks like this perception that has recently come about is accurate then:

> Has Y Combinator lost its way when the latest company is a Mac only widget? (March 11, 2021) [0]

> Y Combinator has lost its soul: A YC founder's perspective (8 months ago) [1]

Seems like by scaling YC, the brand itself becomes diluted. I am not sure whether companies like Airbnb, Dropbox etc will still be able to come out of YC except by mere chance that is not greater than the probability of coming out of other VC funds. And then at that point, why choose YC anymore?

[0] https://news.ycombinator.com/item?id=26435094

[1] https://news.ycombinator.com/item?id=23916314
I just got a "1 Liter Form Factor" HP DeskPro 405 G6 Mini that measures about 175x175x35mm (7x7x1.4 inches). AMD Ryzen 7 4750GE PRO (Zen 2) that has a base 3.1GHz clock for eight cores (4.3GHz all boost) which is an APU with eight Radeon GPU cores, in which I DIY added in 64GB of memory, and a 1TB Samsung 980 Pro.

With the Intel AX200 WiFi 6 and BT 5.0 disabled, it idles at barely 12W. Running a bunch of virtualized loads (nothing crazy) in XCP-NG, it's consistently under 20W despite no matter what's running on it. If I had it going flat out (with a 5GbE NIC plugged in via USB Type-C) under something like heavy video rendering (CPU+GPU+storage) loads it peaks at about 48-50W.

We're entering an era of pretty fantastic power consumption, especially if you shy further away from Intel SKUs at the moment. The Intel SKUs are pretty frugal, but the AMD ones genuinely sip power and are only getting better.
I’m curious why you assume it’s accident or inaction. If I wanted to surveil Internet traffic with all five of my eyes, what better way would there be then rehosting all the content so people had to connect directly to me?
The mailing lists are public. I'm not subscribed to any 9front ones, but the people on the cat -v mailing list are happy about being able to complete the manual collection now.