skysight-inc/HackerNews huggingface dataset:
> The big question I have is how they manage to deal with stuff like IME (input method editors) and how they manage to work with the keyboard on mobile (looks like they don't do mobile though).

A common technique used in other web-based editors for other content-types (like online video editing, online image editors, etc) work by creating a hidden <textarea> or <input type="text"/> and giving that element focus - and then updating the manually-rendered content in response to normal DOM events like 'input', 'change', 'keydown' (if necessary - the 'input' event should be preferred, ofc). Because a "real" DOM element with native IME and soft-keyboard support is being used to process user input there's little to no degredation of the user-experience.

...though the user does lose the ability to do things like drag text-selection handles. Alternative approaches include instead making the textarea very visible and instead positioning it directly on-top of the manually-rendered content and using as much of the browser's built-in support for styling input elements and input text to match the manually-rendered content as closely as possible - but also hiding the manually-rendered content to avoid confusing the user. They may have a toggle to allow the user to choose between "simple-edit with live preview" (i.e. hidden textarea) and "edit mode". This technique isn't confined to just the web: lots of desktop software (especially in the days before WPF, JavaFX, etc) that needed to allow the user to precisely edit text within a design-surface would just instantiate a native textbox widget directly on-top of the text's location in the design-surface. It wasn't just 2D art software that did this, but also at least a few WYSIWYG-ish HTML editors (prior to contentEditable) did this. I actually wish this technique would come back (despite its clunkiness) simply because Markdown+Preview is far, far better than a WYSIWYG contentEditable widget where an inadvertant mouse-click or drag would create a `float` disaster - or bugs where elements wouldn't be closed correctly and so ending-up breaking the entire website layout...
> I’m buying an iPhone because Apple curates the App Store

Ahah, Ahahah.... AhaHAHAHAHAHAH

Sure, the App Store is just full of Scam Applications that are "so hard to detect" that they top the App Store revenue chart,

https://www.breitbart.com/tech/2021/02/09/developer-uncovers...

but Hey,
THANKS APPLE, they CURATED the App Store !

(PS: if you got scammed and get your bank account siphoned off, or lost all your bitcoin, this is obviously Your Fault. Now that you have a problem, let's correct the previous statement : Actually, Apple Never promised anything, right ?)
The core claim above is that ultimately the foundation is a lip service activity to preserve wealth. If a hundred billionaire pays out 1 billion dollars in philanthropy via the foundation, but earns 10 billion tax free then they are doing quite well.

It's a trivial matter to write the terms of the foundation such that yourself/successors can draw permanent income via "board" positions, advisory roles, or other means.
Do you know of any proposals for browsers to directly use capabilities?

Servers can implement a strict capability model for server-side objects but the browser's granularity for a capability owner is almost useless.

To be fair, no popular operating system makes much of a distinction between the human operator, the operator's actions via I/O, the behavior of applications ostensibly started by the user, and various other automatically started software, so at least browsers provide the concept of a domain for separate ownership.
Because once that centralization occurs, the remaining trustlessness doesn't serve a purpose. All that's happened is switching from one centralized system to another, but with a much, much greater overhead.

Mind you, I don't mind centralized systems, but the entire marketing of cryptocurrencies for the past decade has been how it is decentralized and outside of the the reach of any entity. We knew this wasn't the case in 2014, when Mt Gox folded and all signs pointed to fraud. We knew this wasn't the case in 2016, when the Dao smart contract was reversed by general appeal. We know it now as mining pools continue to rise. The decentralization is the main selling point of cryptocurrencies, and yet at every turn it is proven false.
Can you be out drinking comfortably in Iran or Saudi Arabia? The legal situation and societal perception make a big difference. LSD doesn't exactly animate most to go out and seek large groups of people, but it's perfectly possible to be out and about and you likely wouldn't even know the person is tripping in most cases, unless you know them well or can tell by their pupils. It all depends on the cultural context. Drunks in public cause a ton of problems, hence why you mention yourself it's even illegal in some places to be drunk in public. Yet this is tolerated and hundreds of thousands of deaths caused by drunk people accidentally or even intentionally killing people are shrugged off by many in countries where drinking is accepted as a normal part of life.

Don't want to go all Joe Rogan on you but have you ever taken LSD? Apart from the fear of being on LSD in public, there's nothing stopping you from going out and having a good time while on it.
This makes so much sense since every identity exists in the context of some authority, some common referential. You're never completely alone as the pgp-classic web of trust implies, instead you're trusting some centrally managed keys like your distros packet signers wich you always blindly accept.. The problem is we rarely sign keys as introducers (and rightfully so) since being a CA is a big responsability. CAs are not real persons. We should probably trust a handful of public CAs with well-defined scopes (some private network, some org), a couple smaller private groups and the exceptional direct trust for the closest friends we interact with daily..

Looking forward to using this.. Although in my case the source of thruth wouldn't be openpgp keys but perhaps wireguard keys to our vpn or maybe omemo or ssh keys.
They're generally found together in the produce section.
If it has anything like a TPM on it, the questions about trust in the microsystem which controls and gates access to the TPM won't go away, by installing a different OS on top of it.

Not that it can't be a really good design, Just that the politics of risk around this device are no different.

TBH, They're no different for a Mac, or a Lenovo, or any of a number of devices. It's just that the specific manufacturer at hand has been held up as a problem, for two reasons: governance of the board, and risk of state control of the device. Governance of the board doesn't play here. State actor risk to the device does.

I doubt five-eyes will want people to adopt this unit for use inside secured communications.
“One has to wonder if whoever at Apple hired Garcia Martinez hadn't read the book”

They make it sound like it’s negligent not to read the books written by people you hire. That’s a very weird innuendo.
A contribution to the mathematical theory of big game hunting (1938) [pdf]
I stand corrected; thank you for the clarification.
Is it unusual that 88% of the US federal revenue is from individual income taxes?

IIRC US corporate income tax rates are fairly high compared to the rest of the world (although maybe there's more deductions and other shenanigans)
Losing Facebook as a contributor and community member is the larger loss, regardless of how much their internal vcs resembles or integrates with mercurial.
Nowadays games assets are just crazily huge. AAA games tends to ship at 50G. Now think about the raw assets size and saving all the intermediate revisions.

It's quite easy to burn 1000G of storage on GitHub/GitLab (again, don't forget all the revisions). That puts just the storage cost at $6000/year. At this price point, it's really worth hosting on your own.

As Danieru mentioned they are forcing ppl to manually do cleanups, that probably indicates the storage costs are even higher which worth manual interventions.
The problem is that it's per ten gi-- actually, looking it up, I found a page saying there is a 10GB cap!
I’ve spent the last couple weeks ripping out JWTs from a site and just using cookies for auth, being that the site and the REST APIs are all on the same domain & servers anyway, and doing all the OIDC/OAuth and refresh token handling on the (ASP.Net Core) backend.

I have to say, considering how “simple” some of this stuff is conceptually, it’s been surprisingly complex with a lot of nuance in areas. I can see why they say “never role your own security”. It is dangerously complex even to implement common patterns well. I hope future standards and frameworks can make this space simpler and safer.
Agree. Unfortunately today a Foundation is mainly a optimisation structure. Most of the countries have usually other structures (in their fiscal code) to encourage people to help.
> The other side will tell about terrible oppressors who rain rockets on peaceful cities, engage in acts of terror, and proclaim the need to eradicate the other side. They'd also be right.

No, they really wouldn't. An occupied people cannot be considered "oppressors"--they are the ones being oppressed. Palestinian casualties over the last few decades are roughly 10x Israeli casualties. Israel is a nuclear-armed state backed by the US government. The Palestinians don't even have a formal military.

Trying to put equal blame on the Palestinians is just providing cover for the Israeli's on-going genocide of Palestinians.
Compare it to industrial accidents. If a lathe hurts a black person, that's not racism on the part of the machine (obviously) or on the part of the engineers who designed the lathe (obviously). However, if the machine shop company pays less attention, though through no conscious choice, to safety in their branch on MLK street, that's systemic racism on the part of the company.
No medical literature says I or anyone else is incapable of dancing or orthography. A statistical average of autistics showing this or that impairment over a large sample says nothing about individuals. You should read the diagnostic criteria for autism spectrum disorders, which includes what is called Asperger’s. Here it is in case you don’t have the DSM-5 handy: https://www.cdc.gov/ncbddd/autism/hcp-dsm.html

A person who can’t dance or isn’t comfortable talking to strangers isn’t necessarily “on the spectrum,” and a person diagnosed with ASD isn’t “literally incapable” of doing those things.
> 1) Purchases with Bitcoin are a capital gains tax event. Or they might be? I can't be arsed figuring that out. It's hard to blame Bitcoin for this one.

Yep. There’s no way I would ever use crypto currency as a day to day currency.
I think it's interesting, and I appreciate, that fonts can communicate so much all by themselves, raise all kinds of opinions, a cult following or a shared 'in-culture'.

At uni, a friend and I spent ridiculous time 'perfecting' a few Latex documents for minor assignments, so that when handed over to the senior and cool infosec crowd supervising us would give it a quick glance, followed up by a “Is that latex? Looks good.”. Ironic detached praise and humbleness commenced. “It's alright I guess, sure”.

I don't think anyone was ever fooled into believing it was anything more than a play on a shared hacker appreciation. Of making the effort for no reason but it being harder than all the sane alternative ways of producing a document (I'm not a mathmaticians).

Computer Modern gives me the same feeling. The font not being a modern font is a useful feature if it supports what you want to say. It has enough character that the idea of people using it by accident feels unlikely. People who doesnt's care seem to prefer sans-serifs.

I don't find it strange that CM being so intertwined with the tools used by people who requires typesetting, not word processing, would find that there is a level of shared convention. Based on pragmatism or even aesthetics. As someone wrote in this thread,

> “When I see Computer Modern I see an author who didn't get distracted choosing a better font.”

If we're looking back, there are loads of fonts that literally couldn't have been designed with screens in mind, as screens weren't a thing. I don't that as a reason to dismiss their continued use by whoever see their purpose.

Disclaimer: IBM 3270 everything. Computer Modern when celebrating.
There are entire communities on Reddit (or there were) filled with people actively interested in death or gore or violence.

Should recruit from those types of communities. There are certainly people out there who this does not bother.
The most promising things I know of are Google Fuchsia (which is a mobile OS), and Goblins, which is a Scheme library for doing distributed programming. There is something called Realms which is being worked on for JS, but I haven't dug into it too deeply yet. It might provide a good foundation for building ocaps into the browser, though.

https://github.com/tc39/proposal-realms

https://en.wikipedia.org/wiki/Google_Fuchsia

https://docs.racket-lang.org/goblins/index.html
To buy a Tesla in Bitcoin you have to (probably) pay capital gains tax, plus whatever network fees are required for the transaction. Therefore it never made sense to me why anyone would want to buy a Tesla in Bitcoin.
I didn't see any mention of it in the article, but I wonder if this has some code-sharing with Flutter. IIRC, Flutter uses canvas when rendering in the browser.
The $500m smiley face business
> They make it sound like it’s negligent not to read the books written by people you hire.

Given the way employers have taken to trolling through social media profiles of low level hires, overlooking published, mass market books of management hires (at least, given his resume, I assume Martinez was hired into a leadership position; the specifics in all coverage have been somewhat lacking) whose attitudes, both real and perceived, are substantial employee relations issues, does seem quite negligent.
No -- the issue is when you have a durable good, there is more return to encourage obsolescence than there is to make it repairable.
Sorry Dan.
> US Federal Tax Revenues (2019)

> US Capital Gains (2018)

Is that a typo or are you comparing revenues from two different years?
General strikes occur are strange occurences. The few examples such as France in 1968, or the Soviet Union in 1991, or the Praque Spring in 1968 occurred for reasons more akin to "mass social unrest/dissatisfaction" than organized labor activity.
I had to read the headline 3x
Google Docs, from a user's point of view, is an incredible bit of software engineering. It has revolutionized my work flow and collaboration with partners. So whatever you engineers did to make it happen: KUDOS!

The only thing that worries me is Google's finickiness. I have a lot of data on Google drive and many important Docs. When I hear of Google just cancelling someone's account or abandoning some software I get a bit nervous. I keep backups of course, but it is unnecessary stress.
Fairly high? I don't think so. Compare the tax rates to european countries.
>Anyone with any money should setup a trust

Anyone in the US with any money should setup a trust
I met a guy at a party who hires for this role at microsoft. Said they hire all kinds since they don’t have a good profile for who will survive. Said the biggest problem after high turnover is making sure to quickly get rid of the people who actually want to look at this stuff since they tend to cause their own problems.

Was an interesting conversation. Also brought up how much the team cared about free speech, and the big discussions they have around these topics and some of the edge cases that they have to pass judgement on.
R&D tax credits exist in some places, but as far as I can tell one company I worked at claimed it just for writing software they used in-house which seems against the spirit of the idea.
I don’t think it’s clear but mercurial has two solutions for large file support. The original “largefiles” which had all the same designs and issues as Git LFS they bring up in the blog post, and “lfs” which is newer.

I’ve used largefiles and ran into these issues and ended up having to turn it off after a few years because it’s so problematic with the tooling since it modifies the underlying mercurial commit structure like git lfs.

However it sounds like mercurial lfs is different in that it only modifies the transport layer, though I’m not totally clear on the details and have been meaning to look into it further.
honestly had no idea what git LFS was before seeing this, but okay then
One of the primary reasons experts are predicting that herd immunity won't happen because too many people are reluctant to get the vaccine. https://www.nytimes.com/2021/05/03/health/covid-herd-immunit...
Well almost everyone that gets their post hidden will object to it. Which will cause most of the posts to be reviewed by staff anyways. If you post something you want it seen by others.
Edit: To be clear, I'm not saying this to rag on CodeMirror. It's a marvel that they got it working as well as it does, and it's been around for a long time- possibly longer than the canvas API has been widely available. It's just that doing things this way requires a pile of hacks and I can see a strong argument for just cutting out the middle-man and doing 100% custom rendering.
Distribution. It is so, so, so much harder to get most users to install an app, especially for casual purposes ("please add your notes to this doc") which is often how people first come to Docs.
My M1 does not have performance issues like that with docs 3x the size. Breeze right through even with 20+ other tabs open.
The EU seems to see RISC-V as a solution to its domestic manufacturing, supply chain and security issues. Many German defense conpanies invested in the ecosystem (e.g. Hensoldt sponsored the recently frontpaged RISC-V port and verification of the seL4 kernel). I guess Switzerland is an attractive location for that too.
It's selling data with extra steps, still selling data.
‘Misogynistic’ Apple hire is out hours after employees call for investigation
Could there be one Dutch Shell Company Company and individuals could enter into a contract with it to pass their wealth through to avoid taxes?
Again, let’s assume 50%ile, not “competent enough to complete the task.” Though realistically, I would bet Hacker News commenters skew higher than 50%.
In some aspects it is controlling how your TAXES are spent by cutting out the middle man.
The amount of JWT tutorials available right now is absolutely overwhelming. I found myself worried actually that session tokens were insecure just because I could not find recent documentation/tutorials on them.

I asked for suggestions on r/node for alternatives to JWT and the first comment was "Just use JWT".
Hot take: Stop thinking of lobbying as a corporate only tool and understand the system was devised as a way for specialized interested (technocratic) to influence congress in an efficient and informed way. The lobbyist system is open to all by purpose. The real problem: the general public doesn't actually give a shit about wiping its own ass when it comes to dealing with their own government. Whose fault is it when you don't play the game with the rules provided? Stubbing your toe and blaming an -ism doesn't produce results. Many non-corporate, non-corrupt groups in US history used the system to make true good changes.
I think FUSE would be enough.
My SO happens to be a DDS. We get new toothbrushes all the time and currently brush with a DiamondClean. You don't need any app interaction to use it. If that were the case it would have been donated before it was ever used.
Sure. But the M1 doesn't drop backwards compatibility with existing (userspace) code, which nine_k arguably suggested it did.
So all of reddit, every page, needs to reverify its auth token every request? Like, what is the worst that is gonna happen in a five minute window between logout and the token expiring? Sure make the account management pages reverify on every request... maybe even revalidate when you perform a sensitive write action (which is probably far less than 1% of the authenticated traffic). But every read request for a normal user? You are telling me that those all need to re-verify every request?

In the case of reddit, by not validating the auth token on every (non-sensitive) read request they could probably shave off 99% of the traffic going to their auth server. Better still it improves page latency as each request doesn't need to block on waiting for a response from the auth server. Faster page loads! And, since you were smart about it... all the stuff where it actually does matter that the token gets verified right away... you can do that too! It's win, win!

A lot of people mis-understand JWT or see it implemented incorrectly. JWT is pretty rad, honestly.
It's all about quantity over quality, lowest-common-denominator crap. Quality and craftsmanship has gone down the drain with "modern" software.
The economist has a nice chart on this. The US has a lower share of taxes paid by corporations relative to other sources than our peers.

https://archive.is/ND3cQ
Depending on how things are linked it might be simpler than you imagine and not involve any kernel modifications, you can do a lot of cool and/or horrifying stuff with a few environment variables: https://unix.stackexchange.com/questions/24811/changing-link...

If anything this would discourage more programs from adopting the xdg spec though.
It’s weird we call it muscle memory. It’s still a brain memory.
Yes, but unfortunately no rich person actually paid those rates: "despite these high marginal rates, the top 1 percent of taxpayers in the 1950s only paid about 42 percent of their income in taxes. As a result, the tax burden on high-income households today is only slightly lower than what these households faced in the 1950s."

https://taxfoundation.org/taxes-on-the-rich-1950s-not-high/
I've tried using a number of these solutions but I always have the same problem which is that after a while not using it regularly I'd want to make a change and forget the magic incantations, get frustrated and stop bothering.

To be fair I also have this problem a lot administering my linux machines because they just work - until they don't. Then I have to re-learn what to do to fix the problem.
If their products are good they will gain popularity on their own merit.
It looks like most countries in Europe have lower corporate tax rates than the US (https://en.wikipedia.org/wiki/Tax_rates_in_Europe)
My dad developed accounting and general business software on CP/M right around that time and he used dBase II/III a lot for that.
Quick, I need to parse a simple string; should I use scanf, fscanf, sscanf, scanf_s, fscanf_s, or sscanf_s?
I’m curious if they would petition Steve Jobs today if he were alive.
It's per-user. Just a column with all their other stuff.

Sessions:Users are Many:1 typically so that's not as simple
Don’t just eat the bones. The skin has more nutrients and radiation.
CMOS-based cryogenic control of silicon quantum circuits
That is the cool thing about JWT. You get the best of both worlds. With JWT you don't have to hit the auth server for requests where a ~5 minute (or whatever) window doesn't matter. That is probably 99% of the authenticated traffic on a lot of sites (thinking of HN, reddit, youtube, etc). On requests that matter, like on a write request or a "sensitive" read request, you can always ping your auth server to make sure the token is still legit.

Cutting out 99% of your auth backend traffic can dramatically change how you design it.
^ This is the best solution I've found (detached head). Add a single cron line to automatically commit and push changes and you get automatic backup of dotfile changes. The only thing missing now is for pass to handle files as secrets.