skysight-inc/HackerNews huggingface dataset:
Try nextdns.io. It blocks ads systemwide (except the YT app, and a few websites that use JS tricks to inject ads)

Bitwarden works very well for me in iOS FF and any other app.
https://haveibeenpwned.com/ is a good starting point?

Short version: Data that isn't online can't get breached.
You need an account to ask FB to delete your data.
Especially to get to the conclusion which is basically “I hope Java gets operator overloading” without much actual support for that position. The one interesting bit of support they gave was that it’s hard to identify the quadratic formula on BugIntegers without operator overloading and that this unfamiliarity might yield bugs, but I think the inverse is true. Math notation tends to be (IMO, obviously) horrible—it’s optimized for quickly scrawling on a blackboard and for elitist gatekeeping, not for understanding or maintenance. At least it violates many of the software industry’s rules about what constitutes readability, approachability, and maintainability.
This is a really good idea. I'm using SQLCipher right now but might swiitch over as I don't really use the encryption feature.
Show HN: Turn your phone into a privacy-first, AI smart security camera
This is probably naive (and feel free to tell me why it is), but why have corporate tax at all? Why not only tax individual income? It seems much easier for corporations to dodge taxes by moving their domicile and such things. Much harder (or at least a lot more inconvenient)for individuals to move jurisdictions to dodge taxes or to have other complex avoidance strategies (particularly if the tax code were simplified).
The basics of the client side are simple.

But the routing is not simple.

I'm pretty well versed in networking generally - even IPv6, but a quick glance over something like:
http://ipv6now.com.au/primers/IPv6RoutingSecurity.php

Makes it obvious why it still hasn't gotten anywhere, _no one_ wants to dig through all that unless they really really have to.

Security depends on securing the routing and address allocation. So it is hardly surprising very few were/are willing to step up a declare IPv6 installations safe for service.

Combine that with most users being happy and comfortable with 1 IP address and there was no mass market appeal for IPv6 hardware or software.

I'd go so far as saying the vast majority of people do not even realise their machines can be accessed from the outside world when they only have one public address behind their "firewalled super safe ISP router", and would be terrified to find out they can.
I haven't seen tearing in years either except in somewhat exotic cases [1], so I wouldn't be surprised that there are other people who haven't either. Nor am I really surprised that some people do get tearing.

My recent experiences have been exclusively with Intel integrated GPUs on a laptop, which seem to be a fairly reliable option in terms of desktop compatibility and integration nowadays. I don't know what the current state of e.g. proprietary NVidia drivers is, but I wouldn't be surprised if you ran into more problems in terms of compatibility with the rest of the desktop system (including stuff like tearing) with those than with some of the better open source drivers.

Workstation-class machines might thus actually be more prone to tearing if they require using proprietary drivers.

That doesn't make it any less of a problem if your coworkers' machines did exhibit problems, of course.

[1] I've seen tearing e.g. when playing a web video in the Steam client, but I find that more of a corner case than browsers or general desktop use.
How is she different from, say, Donald Trump, Paris Hilton, George Bush Jr. or the English Royal family?
Yes it's a very blatant hole that needs to / should be fixed. There's also no reason there should be a cut-off on FICA taxation as you scale up in income. The Democrats should target those easy taxation wins (if they can stop for a moment trying to get tax cut handouts for higher income persons in their coastal cities in the form of SALT deductions; pretty hilarious to watch the Dems argue in favor of raising taxes on nearly everything that moves while simultaneously arguing that people earning six figures desperately need a tax cut - solely because it's overwhelmingly for their voters in affluent blue cities).
Taxation is theft, coerced by the threat of violence.
I guarantee you that the majority of the population does not understand or care about your #1.

And I expect that the majority of the population has not experienced the horror of your #2.

If the majority (in this case, likely vast majority) doesn't care about something, there probably is not going to end up being any public policy protecting against it.
Apart from his reflections and the way the are presented, I also liked the audio accompanying the article.

For me, a non-native speaker, it makes the article more enjoyable. It's like restoring the appropriate colors of a previously desaturated picture. The only thing I missed was a floating media control widget, so I could pause the audio and give myself some time to think.
I found this helpful. Not because it has helped me to grok ergodicity yet, but because it's another foothold on my way to climb the mountain. At some point it will click, and your pinball-bowl mixer will help, I'm sure.

I'm also happy for the link to "a monad is like a burrito"!
New type of guy just got invented.

Audiophile but with ethernet cables.
Diane Rehm tackles ‘death with dignity’ again, this time in a new documentary
In which case it surely wouldn't match with credit report databases?
If you go by its creator it's Oberon-07 ("Revised Oberon").
I think Lithium is one of the last issues with current battery tech when you compare the additives and support mechanisms for getting the energy out of the battery and into useful work. Cobalt cathodes, Rare earth metals in the magnets of motors, elements like Scandium in light weight alloys, Tantalum capacitors etc. have all more eyebrow raising supply chains.

There will come a point where the economics of Lithium will require looking at, definitely in the scale-up phase. That is probably under 30 years. But there's a lot of lower hanging fruit before the industry collectively properly get onto looking into direct battery chemistry alternatives like Sodium-Air.
Making music with MilkyTracker (2020) [pdf]
There are some similar apps which can turn your phone into a security camera (e.g. Alfred, Presence). AiCam is different because it runs all machine learning algorithm offline on-device. It does not store or send video to a remote server (actually we do not have a server). Only if you (optionally) turn on iCloud sync you can save videos directly to your private iCloud account for remote accessing. Some of its features are:

- On-device ML to detect human, animal, vehicle and recognize unfamiliar face.

- Integration with Shortcuts app for home automation and sending webhook request on event detected.

- With privacy-first in mind, it does not collect any data, it has no ads, no tracking tool integrated. Video is processed offline on-device.

The premium version with all features unlocked can be bought for a one-time fee. There is also a free version (no ads) with limited features but can use forever (no time limit).

My teammate did post asking for beta users some time ago (https://news.ycombinator.com/item?id=26123763). We received a lot of value feedbacks. Now the iOS app is passed beta phase and is available on App Store. Android is still in beta though. We did also redesign our website completely to provide more helpful information.
Feedback is always welcome. Specially I love to know which features you would like this app to have?
This whole blog seems dedicated to the thoughts of Ivan Illitch, and some insight into his thinking and related ideology is probably presumed. That aside, this rather brusque dismissal seems typical of one who does not understand, and therefore vilifies. If a full understanding based on background reading is out of reach for you then just let it slide instead would be my advice.
After CSV files as virtual tables, I'd like to see folders of JSON files as virtual tables. I know there's a whole virtual filesystem kit based around SQLite but what I want is simpler.
Is there any reason for someone to fly between states with so much money ? It’s not just the tsa that could rob it
> You can't enforce a DMCA claim against an entity without ties to the US

a “DMCA claim" isn’t really the issue, the DMCA safe harbor (takedowns aren’t a basis for claims, but for safe harbor from claims against the provider) doesn’t apply outside of US law. To the extent another jurisdiction has provider liability, following US DMCA takedown rules won't protect you from it.
All except the easily written by humans part. Which is kind of a key part.
Also many (most? all?) serializers don't let you control which fields are serialized inline vs not. So if you have a program that generates configuration, you're going to end up with the original unreadable form anyway.
Collusion is kind of a strong statement. There is a fair bit of competition, its not only China and only Japan, and in these places its not one company. There are cathode companies in Korea as well. There are also multiple cell manufactures in multiple countries.

Tesla on battery day gave a pretty good exploitation of why the price is what it is, and they didn't say 'we need to solve this by trust busting'.

Elon Musk basically said 'if you attach a GPS tracker to a nickel atom its journey would be crazy'. Many, many steps are involved. Many processes, that then need to be reprocessed, and reprocessed again, and reprocessed again with a lot of shipping in between.

The problem is the industry was to small so far to really consolidate all these steps, localize production and mining. Rather many chemicals need are just bought in the form they were available from other industries, and then processed were built on top of that.

This video is a pretty nice visualization of the current process: https://www.youtube.com/watch?v=4i1T6s_NdAQ
> We're writing to let you know that the group you tried to contact (jobs) may not exist, or you may not have permission to post messages to the group.
If you're gonna Bash, definitely use shellcheck for everything. If you're writing Bash in vim, I'd highly recommend installing Syntastic and enabling the checker below:

```
let g:syntastic_sh_checkers = ["shellcheck", "-e", "SC1090"]
```
Could you please quote the death threats? I am not seeing them at a glance.

So are you backtracking on the letter bombs? They were merely rumors?
Revision demoparty banned on Twitch mid-stream
…and CCC helps them get back up: https://streaming.media.ccc.de/revision/revision
While I think our tax laws for corporations need adjustment I always take these headlines with a grain of salt.

Let's think about taxes in other areas that companies like nike generates:
1. Sales tax on goods sold
2. Income taxes on employees pay
3. Capital gain taxes on stock sold... At ever increasing prices because their earnings are higher.

All I'm saying is it's complicated. It's not a simple math. Lowering corporate taxes might stimulate growth and taxes in other areas.
Time will tell but I've got my fingers crossed that in 15 years time any backstreet garage will exchange your battery on a car of that age for a cost proportionate to the fact that you could reasonably expect another 10 years of trouble free motoring. With luck with a 50% increase on its original capacity.
Having a low barrier to entry is not sufficient for there to be real competition between those in the market. Why? Well, for one thing, subprime borrowers buying cars are probably limited in their ability to shop around. If you cannot do price comparison, then there really is no effect on prices of competition. Firms will compete in other ways, for example, by making themselves more accessible, or limiting access to competitors. Look, the likely thing that is happening is they get a ride to the nearest local dealership, and take whatever loan package they're offering. And if they are doing that, its probably some shady corner dealership anyway.
This feels more practical rather than ideological, which I intend as a compliment. Small team, get people focused, pay enough to not worry about personal financial stress, and let equity act as the primary reward system.
The value should be low enough as to make capture of the political system at the national level by small groups of wealthy individuals impractical.
No reason is necessary. It’s their property. Perhaps they don’t trust banks, or are buying something at auction or a vehicle that requires a cash payment (second hand septic pump truck, for example).

We don’t ask folks to declare other financial instruments (cashiers check, money orders) or jewelry on domestic flights. Cash is no different.
Wow, I just found this while searching for another thread that was inspired by the same Sebastian Lague video and I'm really glad I found this - it looks amazing and thanks for making it available on github.
i love your username
Why it's always us who have to do the work to avoid being harassed by google? If I don't want to have my site harvested for snippets I have to add a no-snippet tag. If I don't want my WiFi data harvested I have to append an ugly nomap to my SSID. What about being it opt-in, as you said? I'm tired of doing Google's dirty work...

By the way, quoting from the article:

> "Specifically, this approach helps protect against others opting out your access point without your permission."

Oh, thank you for your kindness, Google. Yes, the idea of another person denying me the joy of having my WiFi data harvested by you is terrifying. Thanks, Google. You really know how to be helpful...
Adobe PSD Format
Any tools around to search this database? I'm keen to find out if I've had data leaked.
> 50% of known CP is hosted in Netherlands.

Does that mean “CP is hosted disproportionately in the Netherlands” or “CP hosted in the Netherlands is disproportionately likely to be discovered”?
okay, after a review, i agree with y'all. it is only a _mild_ amount of shade.
Or there are market frictions that limit the ability of subprime borrowers from actually shopping around.
I think open source is an example of how any set of incentives cuts both ways, it is just prioritizing different things. Incentives are offsetting; things like wealth incentives are often valuable to encourage people to do important things they otherwise would have no incentivize to do in open source.

For example, a well-known issue with open source data infrastructure is that it often has much lower performance and efficiency than equivalent proprietary software. There are many dis-incentives in the open source ecosystem to producing software that is highly performant and efficient, not the least of which is development complexity and sophistication level required to contribute. Open source developers do not pay the operational cost of wasteful data infrastructure but they do pay the cost of their time, and prioritize accordingly. Proprietary data infrastructure is explicitly motivated by wealth incentives to be highly efficient, which is why companies invest in it even though open source equivalents exists.

The relative wastefulness of open source in terms of computing resources is increasingly perceived as bad for the environment, so it isn't just a money motivation. Incentives are a powerful thing and it is evident that open source lacks incentives to produce some important outcomes.
Because it offered all these things parent responded, but that made it too complex.
You either provide schema and get commodities of describing it or you don't.

I had a chance of using SOAP at one point. It was a F5 device and I used a python library. What I really liked is that when it connected to it it downloaded its schema, and then used that to generate an object. At that point you just communicated with device like you did with any object in Python.

We abandoned it for inferior technologies like REST and JSON, because they were harder to use from JS, as parent mentioned.
On the one hand, I remember people saying the same about nodes much larger than those we currently use.

On the other, yes: continue current trends and single atom transistors become standard in 10-32 years.
Writing easily understood and simple code, code easily maintained and extended by corporate employees, and fast code don't always line up.

Assembler code for old 2D game consoles is unclear, partly because it's not structured programming, partly from rushing out the door and/or generational cruft, and partly from talking to awkward hardware interfaces, and partly from optimizing performance. I've seen C code with #ifdefs to pick different code on x86 and RISC CPUs, which might've made sense as an optimization with CPUs and compilers from 15 years ago. Duff's Device is faster on older processors, but sometimes slower on new processors and compilers.

From what I've heard, microservices address organizational problems more than technical ones, and dependency injection may be more useful in large enterprise projects (not sure, in my minimal experience it creates complexity).

I think that all of performance, clarity, elegance, and replacability (possibly linked to modularity) are values, and software craftsmanship can encompass one or more to varying degrees.
I believe in order to be dependent, a value needs to be able to affect the type somehow. So something like:

fn make_array(n: usize) -> [u8; n]

would do the trick.

I am guessing this isn't actually the feature though, and that it's not allowing dependence in this way, but rather promoting some const values and const functions to the type level (which is really useful, but not exactly dependent types)
Indeed. Python does not win over bash in either category, and it is slower.

I wish there was a super-fast shell-like scripting language everywhere that could serve as a general programming language. Like Perl, but simpler rules and readable syntax. But there is nothing. Who would have thought, I may have to learn Perl eventually.
when flying back from china, the duty free shop asked me what my next airport was (Seattle) and whether it was a connecting flight or not (it was). at that point, they told me that they wouldn't sell me anything, as I would have it confiscated.

they were correct, the international arrivals required another bag check to enter the domestic part of the airport, that had the stringent TSA rules (after you went through customs and collected your luggage, before you could drop your luggage off again for your next flight).

so, it appears to be airport by airport when traveling to the US.
Hum, no those people are probably writing the same kind of script you do. Their Python versions are indeed longer and more verbose.

I always recommend Python anyway if you care about edge cases (what is not always). That longer script handles them on the obvious way, while the short and more readable shell script does something absolutely crazy every time a detail is different from planed. And if you try to correctly handle the edge cases in Bash (you'll fail), you'll get something much more complicated than the Python version anyway.
But we have file timestamps, permissions and other attributes. There could easily be a "file type" field too, that seems more natural than shoving this metadata into the title.
A file can be accessed locally, on a private network, or over the internet. The fact that /net/ exists is redundant to http file download... so there's an argument there, but to access a local network file through http requires a webserver which may not be desired. So, having file /net/ solves that problem but of course could work the same way on an internet network so... we're kind of screwed really.
Reverse Aging: Study Finds Hyperbaric Oxygen Chamber Slows Aging
I didn’t understand your reply at first. If you use ids for easy targeting parts of html, then it doesn’t matter, stylelint doesn’t check the html.

Applying styles can be done via classes so the css selectors in your stylesheets do not need to mention any #ids.

Applying styles with #ids however, is an issue.
Some settings can be left behind, but AppCleaner[1] will find them.

[1] https://freemacsoft.net/appcleaner/
Having worked repo for a summer, I believe this. We'd drive hundreds of miles in a day, only to find the vehicles not where we thought they'd be.
But any class can inherit that Number, there is nothing enforcing that the subclass is particularly number-like. You can do just stuff like

class MyString extends Number

and you get access to operator overloads. Only thing that makes this annoying is Javas lack of multiple inheritance, but that is pretty minor thing.
To protect "sensitive, low-entropy data", the main things I've seen people do are encryption, tokenizing, or anchored hashing. I'm certain there's a bunch of academic work out there I'm not across so I'm writing from the limited perspective of "things I've seen people do in industry".

The best thing to do tends to depend on how you need to use the data, exactly.

With hashing alone there's just no reasonable cost function that will provide (say) 1 year of security in the event of database exfil, but also not DoS your service computing it :/ The problem is being offline-attackable.

Encryption is one possible answer and I think most HNers understand the tradeoffs. Generally the less transparent it is, the more effective it is. Volume encryption or transparent database encryption are good to turn on, but don't protect you much. Keys available at application level only (let's say some fields are KMS'd) are better and will be of use under common failure scenarios (SQLi / DB exfil). You still have to get key management and application security right though and it turns out those are hard to do at scale. Your encrypted fields will also not be efficiently searchable unless you are using deterministic encryption.

The tokenize pattern replaces sensitive data with a random value which is mastered in a centralised, controlled service. This really only makes sense if you can set things up so that almost all operations can be performed using the token.If you allow too many things to do token -> value lookups then it's pointless. Also all your eggs are now in basket so you have to watch that basket. Operations look like:

- Exchange sensitive value for token

- Compare tokens for equality (optional, but usually handy)

- "Domain operations on token". For credit card, "bill the user", for phone numbers your domain operations might be "send SMS" or "robocall".

- Exchange token for value (controls go here; limit access to customer service staff only, auditing, rate limits etc. The value should ideally only come out if a human has to look at it, and you should be able to definitely say who looked at what).

This is a general technique, mostly used for credit cards. There's a whole industry around it. https://en.wikipedia.org/wiki/Tokenization_(data_security)

Anchored hashing uses a secret value in your "hash" operation. Keeping this value actually secret is hard, so an "industrial strength" implementation will use an HSM or other hardware to do the operation. This means any brute-forcing has to happen inside your network where you can see it. You ideally want a bit more entropy than with tokenization to make this work, but with appropriate rate-limits against attack from inside your infrastructure, it has legs. It's hashing, so works well for "have I seen this sensitive data before". The main advantage of this pattern is that it doesn't have to keep state.

A decent write up of "anchoring" is here: https://diogomonica.com/2017/10/08/crypto-anchors-exfiltrati...