skysight-inc/HackerNews huggingface dataset:
That should work but trusting a root cert from a third party makes be a bit wary depending on how it is done.

If the certificate is scoped to only that domain or to only domains used by that user then I suppose it's OK but there is currently no way to enforce this, that I am aware of, without the user understanding and inspecting the certificate.

Thinking out loud here: It would be neat if browsers supported some form of addresses which are public key hashes like is done in many distributed systems. Maybe, out of caution, it would only be supported on local networks. For ease of use this address could be discovered via QR code or a simpler local dns name.
Meanwhile the majority of software we're using was made possible by RMS. Let's not focus on that, let's instead focus on the fact that RMS isn't a saint and doesn't say what we believe to be the "right" things. Yes, RMS has made provocative statements on controversial topics - but I believe throwing out decades of his work and essentially throwing a human being away because you disagree with what he says on hot-topic issues to be much more repugnant than anything RMS has said or done.

And this coming from someone who disagrees with most of what RMS has said on these topics.
The Raspberry Pi can boot off NVMe SSDs now
I have. He’s less of an asshat than my father. At best my father got called a prick. We didn’t form a consortium of people to cancel him. That’s just batshit crazy.
Show HN: Aquarium Life – Home aquarium manager app
Well OpenAI holds the opinion that they could easily win. However I call bullshit.

When a self-driving car company can have its AI drive around in an Arizona suburb, nobody sane believes that it means they can also drive around in Kolkata, India. However that is basically what happened with the Dota 2 AI effort by OpenAI. They managed to succeed in an extremely limited scenario and then proceeded to put out press releases claiming they had beat Dota 2.
cool. how does a business broker value a company? i default to transparency, so would just hack it myself if possible.
I don't see how that overlaps with many of us, myself included.

My 19 years of programming have taught me that something that continuously craps the bed (like OpenSSL) needs to be rewritten because from one point and on it's clear that the cost of maintenance exceeds the cost of rewriting.

Furthermore, do consider that some of us were programming C and C++ and found them sub-optimal. But here we would likely venture into language wars because there are a lot of programmers like myself out there who will never subscribe under the notion of "C is fine, you are just doing it wrong".
Most allocators are not constant time, and are fairly slow anyway. (Actually GC tend to have faster allocators, but obviously unpredictable pauses.)

(Though there was an allocator I saw recently that promised O(1) allocations. Pretty neat idea.)
> Even though it was far from ready, SvelteKit was the only framework that matched our esoteric requirements. (Anyone who has worked in a newsroom and done battle with their CMS will know what I'm talking about.)

I would be interested to hear more about the esoteric requirements; whether they're performance-related, have to do with what's representable in the CMS, or something else. At any rate, those NYT covid tracker pages are great and I have (sadly) spent a lot of time with them over the past year.
So, basically, you're saying that if you make money from the software, you should be required to pay money to the copyright holders (aka, the developers).

At that point, what sets aside open source software from any other kind of software?
I keep hearing this argument but I don't understand it. What does not having security patches do?

I am using an HTC Desire 826 from 2016 running Android 6, while my father is using a Galaxy Note 3 Neo running Android 4.3.

I personally don't have much issues with regards to not having security patches.. the phone itself does most of what I want, although I am having issues with other things unrelated to security patches -- it's getting a bit sluggish, the 16GB storage does get annoying, and the battery barely lasts two hours of web browsing. Also, it no longer accepts SIM cards for whatever reason. But it's not a big deal to warrant spending money (I don't get called at all and I do have a dumb phone that I go out with for emergencies. Besides, I no longer get annoying messages and calls from my carrier)

Similarly, my father's is doing alright, and the issues he is facing are unrelated to security patches -- many apps don't support Android versions older than 6.. some of them are essential things like Google stuff. YouTube and Gmail for instance outright don't work, and Chrome occasionally brings up messages along the lines of "Please update your Chrome version". But nothing is caused by not having security patches.

What am I missing? This is a genuine question.
Who were, I believe, brought together by Penn Jillette.
I'm not sure if this is sarcastic, but there quite literally is not a "free market based mechanism" to do this. If there were, there would not be the market failure that we can observe today.

There are plenty of market-based methods for accounting for these externalities though, such as Pigovian taxes.
Nope, she is a public figure.
> there's no concept of IP address for web certificates, it's all based on domain names as far as I know

Regardless of whether you can or can't issue a certificate with a CN of an IP address, the browser doesn't receive the certificate in isolation, it receives it from an IP address, and can handle certificate validation differently depending on what it's connected to.

This may be a terrible idea for reasons I haven't considered (it probably is), but I can't think of any off head myself right now.

EDIT: this is probably terrible because someone can just stick a MITM proxy on your lan, and poison your DNS to resolve google.com to a RFC1918 address and boom.
Of course, to perform any valid statistical reasoning, you need to consider the prior. The standard model has held up very well, and we do a lot of experiments-- any of which has a small chance of popping out a result that looks highly significant by chance. There's a reason why 6 sigma is the line to take things super seriously (in fundamental physics).
> Us folks on the liberal left end of the spectrum can't complain about the right for employing cancel culture tactics

Except in pointing out the hypocrisy of the right, no one on the left is accusing anyone using the right-wing ”cancel culture” buzzword (which differentiates it from the old-standard “political correctness” that it replaced, which was used in internecine disputes within the left before being adopted by the right, but even that was never generally deployed against the right even though they used the same tactics; pretending that the main flow is the other way around reads like false-flag concern trolling.
There isn't one right now.
What's really interesting to me is that all these advancements could have been made by a centralized service for stock trading as well if the debt based system and T+3 days margin calls wouldn't be a requirement.

DTCC owns most US stocks, so I don't see why they wouldn't be able to launch uniswap style contracts to allow better use of liquidity instead of just having simple limit order contracts.
It kinda does since there was no plan to move to L2 during Uniswap V2.
Conspiracy to hide a negative article? Could just be a cocked-up conspiracy.
> not just by being so stupid for making his odd ideas public

We're reaching the point in our society where thought-crime is a reality. You're not allowed to hold certain opinions, and if you do, you can't have a job or participate in the commons anymore. You must be imprisoned, stripped of your ability to provide for yourself, and ostracized from society.

Soon, these people will begin to claim political offices and they will have the police and military at their disposal to enact their will. Delete your post history, and lobotomize yourself before they come for the rest of us as well.
ZGC in its current form trades a bit of throughput performance for better latency. This presentation provides some more details and some performance numbers (a link to the slides is also available there). https://malloc.se/blog/zgc-oracle-developer-live-2020
I dunno - tools like this can take care of the 80% drudgery, freeing you to really focus on that 20% that provides the human touch :)

Unless you are also recording all your streams before you make your on the fly directors cut with OBS, if you make an "ooops" you're done. With his approach if you don't like the automatic edits, the underlying source files are still there and you can override the automation.

It would be easier if he did the automation within a traditional NLE workflow; overriding the automatic editing would be a lot easer. Since, ya know, editors were designed to make and keep track of changes (ha!)
That's not the point of Worse is Better. The point is that, in this context, Unix and Linux are better than Plan 9, but for non-intuitive reasons.
Thanks for your extensive write-up. PHP's definitely not my thing, but I appreciate your view of the process to iteratively dig (and dig, and dig...) into the details.

By the way, if you're looking for instant introspection, changes and carrying on, you should have a look at what you get with Common Lisp. You're able to redefine code on the fly, and continue from where things stopped. This blog post series goes into debugging, specifically with SBCL (one implementation), Emacs and an add-on called Slime.

https://malisper.me/category/debugging-common-lisp/
The author is a lay person, they're just trying to report what they've been told. In reality, single satellite detection with the described resolution is extremely simple and the tech has been flying since the 60s. There isn't a lot of magic new tech in RF, just advances in processing.
I believe you are underestimating the importance of Biden refusing to speak with the Crown Prince as he called world leaders as his term began. It might seem just symbolic but it's much more than that.
You can get excellent quality refurbished(aka renewed) phones for incredibly cheap that are only a year or two behind the current models. I don't think I've ever bought a brand new phone and paid full price. In fact, I only buy a new phone when the battery starts to die and it's not serviceable. I can't honestly say I understand why people believe they need to buy the latest phone every year or two.
Multiple decades of bad behavior, people are tired of it and don't want to work with him. You can't force people to work with someone who treats them like shit.
"Mysteriously" indeed. Who had the influence to make that happen, I wonder?
Is there benchmark anywhere ?
70% of scenarios? If I were to guess, it would be 70% of your time that your happy with https, and 30% you don't. But its 99.9% or higher in reality.

Also, did you know 80% of facts are made up? XD
I believe the water authority could offer to purchase the bond (and then write it off once they own it). It would be up to the current owner to decide if they are willing to sell.
i was surprised to learn how many counties in the US are still considered high risk.

also its a pretty cool indication of trust in Rich that they let him build his own metaframework and dogfood it in production at NYT scale. not sure what else i can draw about that (its probably not a good idea to let most devs do that) but its cool
Politely remind them, when you do get around to following up, that unless it's critically urgent (in which case they should call) you will only respond when you can. Which is not always immediately since you have other obligations (work or family) or may be involved in a task where you can't (commuting, when we did that sort of thing).
Conceptually, it seems similar to a royalty.

I give you money to be a part of something, and collect a royalty into perpetuity.

Or, it's even more like buying land under a building.

I sell the land under my building to get some quick cash. And in turn agree to lease the land back from the new owner permanently.

Depending on how badly I need the money, it may be my best and only choice...
Facebook Waited Too Long to Stop Repeat Misinformation Spreaders
They deplatformed a president and a company overnight... don't tell me the banning of a bunch of users of some site is something that is going to surprise you? Enjoy distributed censorship.
I have yet to see one who doesn't. ExpressVPN and VyprVPN which are big give you OpenVPN configs.
> That hasn't been my experience at all (living in the DC suburbs).

In my experience what "first we make car transport less and less appealing" translates to is "we should allocate some of this land dedicated to free parking for other uses."

Unfortunately you just can't have a walkable urban neighborhood and also a glut of free parking. But suburbanites insist that city-dwellers should shoulder the opportunity cost of making their wasteful transportation choices more convenient for them.
I posted this and I disagree, a drama subreddit is the least place this should be discussed, this is about silencing Redditors and abuse from admins who are paid Reddit staff.

As per title change, please see my comment at the time of posting.
Money has to enter and exit the system somewhere.
This is cool, I get tripped up every day by accidentally navigating to HTTP sites just because I typed them into the browser, and there's literally no downside—if the site doesn't support HTTPS, the redirect is transparent to the user.
The LHC is in Switzerland (not the UK) and in fact I'm still here. I was a data scientist for while. These days I'm back in research, but in a different field.

There is a huge demand for CS skills of all kinds. CERN has one of the largest SCADA installations in the world, runs its own internet exchange point, operates a network of computing centers with a million cpu and hundreds of PB of data, and maintains many many millions of lines of code of specialized software, just to give you an idea.

It is a fantastic place to work, the level of expertise and dedication among the people there (scientists and engineers alike) is very very high.
I tried it last week actually with OpenJDK15+Windows. With JDK16, IntelliJ didn't boot.

-XX:+UseZGC: Memory usage for my project dropped to a constant 600 megs. Using the IDE felt just as fast as the normal experience.

-XX:+UseShenandoahGC, -Xmx4g. Shenandoah GC used a constant 4 gigs of ram. It was a slower user experience for me.

In the end, I went back to the default settings, because the custom JDK changes the look and feel and I don't like it.
All fair points, - i also appreciate the quality discussion!

Luckily a myriad of vaccines are on their way with differing technologies. As far as i know many of them "better" in various ways, so i hope we at some point are going to get something very robust, even for variations - but that also makes it so important to be extremely cautious in the meantime - as with the current AZ vaccine in the northern regions.
That's a Svelte issue rather than a SvelteKit issue. It's on our _radar_, though I don't know if I'd say it's on our _roadmap_ just yet
pbronez had some great replies below. I wanted to add that more data = more questions. The more we understand, the more we'll have to find out and contextualize. There's more to exploration than mapping
You know, it really isn’t.

I’m “Gender Critical”, because like many people born in the 1960s I see women as being a group of individuals primarily discriminated against by virtue of their sex - particularly in regards to contraception and the economic and social consequences of reproduction.

Sex is biological and objectively real. Gender is a social construct relating to imposed standards of masculinity or femininity.

How have we ended up reinventing the idea that sexed identity is the performance of innate gender roles or preferences? Just because we’ve allowed people to opt out by changing gender doesn’t make the idea of linking gender to sex any more acceptable. This is an entirely regressive state of affairs, and pointing that out is in no way hateful.
And all phones have a modem, a closed source chip that likely provides numerous ways to get into your phone.

Ira Hunt (CIA chief technology officer) said in 2014 something like "we like the fitbit because it doesn't have a ... it doesn't ... well I can't say but we like the fitbit."
Those numbers come directly from the CDC…
Ah yes, the 'ol "black and white" argument. It's obvious that Apple/iOS is more committed to privacy than Google/Android. To deny it it just fooling yourself.
My local police department would be really interested in this tech. They've been using automated license plate readers, facial recognition tech, drones, predictive policing, and have a Ring doorbell partnership.
Ok I see, that helps, thank you. That seems to be mostly similar to evdev on Linux after all, except it requires you to use coroutines instead of having an option for a poll/select type interface.

To me the problem with saying "no special cases" seems to make it quite limited on the kernel side and prevent optimization opportunities. For example if you look at the file node vtables on Linux [0] and FreeBSD [1] there are quite a lot of other functions there that don't fit in 9p. So you lose out on all that stuff if you try to fit everything into a 9p server or a FUSE filesystem or something else of that nature.

[0]: https://elixir.bootlin.com/linux/v5.11.8/source/include/linu...

[1]: https://github.com/freebsd/freebsd-src/blob/master/sys/kern/...
As a reference point, I switched from linux to a Pixelbook Go for your critical reasons. I'd have a hard time justifying a higher price. The slightly lower specs have not hindered development, tho sometimes laggy when video call + screen share + heavy website like Jira
I believe that's why some platforms have started using "Direct Message" (i.e. "DM me") instead of the older Private Message terminology.
At this point? Look at the UN decisions concerning Palestine. Those are as old as the UN and they were never respected by anybody.
It has been attempted, albeit with a relatively small group of subjects and mostly focused on aversive vs. positive reinforcement methods: https://journals.plos.org/plosone/article?id=10.1371/journal...
_Used to_. KKK cleaning up a stretch of road in a rural area 30 years ago doesn't mean there's an inherently a racist police force, voted in by the county constituents, currently. That's tenuous at best. The existence of racists in a subset of an area does not mean that the entire area is racist.
Regardless of what they're doing with it, noone should have access to a child's grades. This is outrageous.
Ask HN: Is Apple hiring developers who work remotely?
Hi,

I started looking at software engineering jobs at Apple. It looks like most of them are regarding positions in the US.

Do you know if Apple is currently hiring developers who work remotely? I'm located in Europe and to be honest relocation to the US right now might be a bit tough due to COVID.
There's no such thing as "secure, but not trusted". The security depends on the trust. That isn't just how TLS works; it's how all secure key exchanges work.
i would also like this. i recall Rich musing on some of the "hydrating unnecessary content" problems in this post https://dev.to/richharris/in-defense-of-the-modern-web-2nia so i imagine its on his mind. Elder.js solved it in a way, i'd love to see Rich's spin on it.
> You don't need a bunch of silly yml configs

The "silly yml configs" are the things I care about the most. I don't want to have to remember how to reproduce my environment in order to stamp out a new one or recover an existing one. I'm all for removing the seldom-needed complexity, but "reproducibility" is the concern around which I build my whole tech stack--I largely avoid VM-based stacks precisely because the reproducibility story is so much flakier than the reproducibility story for containers. I imagine you can use something like Terraform for Heroku, but pretending that you can ignore reproducibility altogether is... really something. Maybe the parent means that "yaml is silly" and Heroku has a better reproducibility story in some other format (maybe graphical?)?
Show HN: Custom programming language in C targetting x64
Compiler written in C for a custom programming language that targets x64 assembly (NASM).
Several examples included in the repository.
There was/is a subset of radical feminism
that saw heterosexuality as something that perpetuated patriarchal oppression [1].

[1] https://en.wikipedia.org/wiki/Radical_feminism#Radical_lesbi...
The possibility of bio-identical lab-produced dairy is particularly exciting to me. Existing substitutes only resemble the originals in the most superficial ways and fall flat outside of a very narrow band of expectations. Given that the end products are of reasonably high quality I would happily be among early adopters, even if it comes at a bit of a premium.
You are also assuming that A) Microsoft cannot learn from past mistakes, and B) the blame for Skype falls squarely on Microsoft's shoulders.

Discord is currently at the top of its game (more like PowerPoint was), whereas Skype was suffering from mismanagement under eBay. Microsoft was supposedly hands off on Skype in the first few years post-acquisition and most of the mistakes that killed Skype were some combination of projects already started under eBay management or still all planned "inside the house" at Skype. (Microsoft in 1987 was said to be hands off with PowerPoint for the first few years following acquisition so as not to interfere with the creative efforts already in progress. Microsoft in 2021 is supposedly still remaining pretty hands off in GitHub management, other than replacing the outgoing CEO.) Microsoft's MO seems to be to give acquisitions enough rope to either succeed or hang themselves, and Skype sounds like they took that second option.
> Do you think Plan 9 /proc would have remained as "clean" over time if it were as popular as Linux?

If people are allowed to submit "functionality" patches ad-hoc with little to no scrutiny or thought, then yes, any project will become a mess.

The general approach taken by plan 9 maintainers is to question functionality/feature patches and ask "Who does this benefit?" If the answer is only the submitter or rare edge cases then the patch is rejected. If the patch benefits a large audience, then it is accepted.

But to be fair, Linux is hammered on by large corps who's only goal is to make money by vomiting webshit from Linux servers. They don't care about simplicity, technical details, correctness, or anything like that, so long as it increases their bottom line. From my point of view the Linux I came to love is long dead.
Europe in general doesn't really punish intelligence actions of allies.

https://en.wikipedia.org/wiki/Lillehammer_affair
Then go work at SFFSF (Stallman-Free Free Software Foundation), name not final.

You aren't being force to interact with the FSF.
Or that God was maybe a writing device instead of literally referring to God.
NFT Drilldown
A very detailed explanation of NFTs. Shows just how crazy people are behaving.