skysight-inc/HackerNews huggingface dataset:
I have the same sketchy feeling about Sofortüberweisung/Klarna. If they want to make transactions on my behalf, why should I give them full access to my account?

Most banks have a paragraph in their contracts/ToS forbidding sharing the account with third parties, but they are rarely enforcing it. Still, they could close the account due to contract/ToS violation.
I never filed the rustc bug report. I suspect that the problem is actually in LLVM.

Byte strings are much easier to use than UTF-8. Also, I only needed to execute regular expressions against ASCII HTTP headers. I think `safe-regex` will get String support eventually, or somebody will write another safe regular expression library.

Safe Rust has a bright future. Eventually, modern OSes will simply refuse to run software built from unsafe code, unless it has attached correctness proofs. This will mostly solve the IT security dumpster fire. To get us there, we need to write more useful things in safe Rust or other memory-safe languages.
Why Are You an Entrepreneur?
Probably the mentioned 25 Gbit/s. At least now nobody needs that at home. I'm not even sure how one would hook up a computer to such a fast connection. certainly not with conventional ethernet.
Musk was once quoting Shackleton supposed Antarctic job ad:

"Men wanted for hazardous journey. Low wages, bitter cold, long hours of complete darkness. Safe return doubtful. Honor and recognition in event of success."

Seems like a fair proposition :) .

https://www.youtube.com/watch?v=Dfg1n7Lh62Q
about 70$ per month
Just in case there are others out there who like me stumbled on the reference to 'codon optimized' in the abstract - here's a nice explanation:

https://blog.addgene.org/to-codon-optimize-or-not-that-is-th...
From the actual journal article: "Three further points are relevant to the question of whether the model-observed differences in
Figs. 10A-C are mainly due to underestimated observed tropospheric temperature trends or to an
overestimated satellite WV trend. First, independent estimates of tropospheric temperature change
from GPS radio occultation (RO) and radiosondes suggest that over the 2002 to 2018 period
of overlap between MSU/AMSU and GPS-RO, tropospheric warming is smaller in microwave
sounders than in GPS-RO or radiosondes (Steiner et al. 2020). Second, there is some evidence
that observational uncertainties may be smaller in satellite WV data than in satellite tropospheric
temperature data (Wentz 2013; see Section 2c). Third, when the individual trend components of
our four trend ratios are examined, the agreement between models and observations is better for
WV and SST trends than for TMT or TLT trends. These three lines of evidence, taken together with
the results of the RSS sensitivity tests, suggest that underestimated observed tropospheric warming
is plausible. This inference is predicated on the assumption that the model-based covariance
constraints are realistic."
Stepping down in general, or the timing?
> I regularly max out my 1gbps connection

Regularly in frequency, sure, but how much on average? Would you notice if your backups took 1 hour instead of 10 minutes?

A watercooler regularly maxes out its water input, but no one getting a drink would notice if it filled its tank by 1 oz/sec or 2.
What are the qualifications for such advice? The author presents it as hard fact, yet does not substantiate their claim.

Many administrators of IRC servers participate in the very same community in which they administer.
Do You Know What's in the Sky Above You?
I don't think we were ever "fine" with 56k, but I think we reached a good speed with 1Gb/s. It will be more than enough for most households until everything we do will scale up in resolution.
People who get this should donate their excess bandwidth to a "worthy" cause.

For example e-hentai.org serve their images from a p2p system called hentai@home and their total network is only using ~4Gbit/sec:

https://e-hentai.org/hentaiathome.php

(or https://imgur.com/a/1H04buw if you don't want to login)
Because nature tells us :

"Women are saying that a guy had an interaction with them"

So all our brain emergency signals flare up. That's because somebody who is not ourselves having interactions with women triggers an immediate response...that guy is, in fact, an enemy from a reproductive standpoint. Deeply rooted in our brains there is the idea that WE should be interacting with those women and that we must destroy that guy because he's ahead in the reproductive race

This happens subcounciously.

Even standup guys like Bill Gates aren't immune to it, if you want to hurt a guy reputation and you have nothing, absolutely nothing on him...well just say that he's a playboy and a philanderer.

If you claim those things you immediately ruin his reputation with women and with smart/family men. All he's left with the approval of less smart men who are no use for guys who have ambitious goals such as Bill Gates or even the Pasquale VC of the main article. They'd have lost so much "approval rating" among smart men, as well as men who are capable of reading the room and don't want to be associated with a guy who is under attack by the mob.
> It's easy to make this argument in the abstract, but harder to demonstrate with a concrete example.

One of the codebases I'm currently working is a big example of that. I obviously can't share parts of it, but I'll say that I agree with GP. Lots of tiny functions kills readability.

> 1. Depth first function ordering, so the execution order of the lines in the function is fairly similar to that of the expanded 100 lines. This makes top to bottom readability reasonable.

Assuming your language supports this. C++ notably doesn't, especially in the cases where you'd produce such small functions - inside a single translation unit, in an anonymous namespace, where enforcing "caller before callee" order would require you to forward-declare everything up front. Which is work, and more lines of code.

> 2. Explicit naming of the functions to make it clear what they do, not just part1(); part2() etc.

That's table stakes. Unfortunately, quite often a properly descriptive name would be 100+ characters long, which obviously nobody does.

> 3. Similar levels of abstraction in each function

That's a given, but in a way, each "layer" of such functions introduces its own sublevel of abstraction, so this leads to abstraction proliferation. Sometimes those abstractions are necessary, but I found it easier when I can handle them through few "deep" (as Ousterhout calls it) functions than a lot of "shallow" ones.

> 4. Explicit pre/post conditions in each method

These introduce a lot of redundant code, just so that the function can ensure a consistent state for itself. It's such a big overhead that, in practice, people skip those checks, and rely on everyone remembering that these functions are "internal" and had their preconditions already checked. Meanwhile, a bigger, multi-step function can check those preconditions once.
I mean, it's a trade-off. IntelliJ is better at some things, and worse at others. There are certain programming languages where I prefer IntelliJ (mainly Java and PHP), and there are other cases where I prefer Neovim (Rust, Julia, Python, LaTeX, markdown).

> Text-editors struggle with the "integrated" aspect of an IDE.

Neovim integrates a lot better with my terminal heavy workflows than IntelliJ does.
Detecting silence by searching for 0 isn't the best idea, even without endianness bugs.

Silence is when the value doesn't change, no matter what it is. Noise is when the values change, the more they change - the louder the sound.

So a wav file filled with "ffff" is just as silent as one filled with "0000".

And a wav file filled with repeated "00003333" is louder than one filled with repeated "eeeeffff".
It should not be charged at all IMHO. And it should be a right of the parents to hold their newborn in the moment they enter this world.
Raise capital gains taxes on land. If they don't sell or rent it's their loss.
> How about real sanctions on autocrats, their cronies, families and businesses? Sanction oligarchs, sanction businesses that are main source of income for autocrats etc.

Sure, but these have a limited reach and they are usually being done very early in the sanction process. But once the targets have no more estate in the Western world, there is not much you can do.

> Maybe not, but they cripple country development and leave autocrats with less resources for a future actions.

But that's a really limited success at the cost of hundreds of lives, which makes it morally very difficult to justify.
What I want to know is if the transcription of the spike protein of the SARS-CoV-2 also leads to dangerous C-terminal truncated spike proteins or that SARS-CoV-2 transcription by definition doesn't lead to truncated spike proteins.
If so than catching SARS-CoV-2 is equally risky on this front.

From the abstract:

"..transcription of wildtype and codon-optimized Spike open reading frames enables alternative splice events that lead to C-terminal truncated, soluble Spike protein variants. These soluble Spike variants may initiate severe side effects when binding to ACE2-expressing endothelial cells in blood vessels"
Love Iosevka. I switched from Source Code Pro to Iosevka, I used in vim and vscode.
> (for now at least)

that's the point, right there, the one you're missing.

pushing speeds enable for new stuff to be done.
With many games approaching 100GB, I wouldn't mind 25 Gbps.
Vermont’s law is a great first step, but also a very kid gloves approach. It appears their disclosure requirements are minimal, basically that the company exists and how to opt out. What I would love to see is a requirement to notify the party that their data is being sold. Yeah, that might be a pain, but they are after all selling something that arguably is not theirs. Does anyone know if other similar laws are in place for other states? Or are in the works?
> asking for my bank login details is...ridiculous

Is there more information on this? Are they doing the same thing Plaid does in the US? That is, literally asking for user credentials to internet banking instead of using the banks' proper APIs?
Klarna is no stranger to criminally lax attitude towards data privacy and security. In Finland, they implemented a checkout flow based only on your SSN (personal ID number). By simply entering someone else's SSN (which is not hard to guess/pry) you can reveal anyone's official home address.

Further, they enable a "pay later by invoice" checkout flow, again by just knowing someone's SSN. Scammers use this to order items from web stores to automated pick-up lockers with someone's else's SSN for payment info. The victim usually only becomes aware about this activity when they start getting debt collection notices for unpaid invoices from multiple stores for thousands and thousands of euros. The debt collection process in Finland is famously unfair and harsh towards the supposed "debtor" (here: victim of fraud).

Unless the "debtor" (victim) actively opposes each and every individual collection, the cases will eventually end up in court with summary judgement. This will ruin the victim's credit rating, which has devastating results for just about all aspects of life. People are known to have collapsed under the burden of all this and ended up taking their own life.

Klarna's response to all this is that they want convenient checkout experience and some fraud is unavoidable. Although there are excellent technical means available to strongly identify users in Finland, they add a minor layer of inconvenience compared to just typing in your SSN. This is OK for Klarna since they give exactly zero fucks about security as long as they can make a little buck from it.
What a fantastic read. The title might be a bit cryptic; the authors propose a convincing hypothesis that explains why Astrazeneca and JNJ vaccines cause rare but fatal blood clotting incidents.

TLDR: mRNA vaccines turn their payload into proteins in the cytosol.

Conversely, DNA vaccines (astrazeneca, JNJ) must first use the nucleus to turn their DNA into mRNA. This incurs so-called post-~translational~ (edit: post-transcriptional) modification to the genetic material prior to protein synthesis.

As it turns out, some of these unforseen modifications create soluble spike protein fragments that bind to epithelial cells. This in turn causes inflammatory, and coagulant, activity, which leads to the lethal side effects that are sometimes observed.
Translation:

Major technical breakdown at Klarna when customers saw other people's data - The Swedish Financial Supervisory Authority (FI) has contacted the company

Payment giant Klarna, which has 87 million customers globally, is currently experiencing major technical problems. Users of the company's app saw other customers' payments and personal data, before it was shut down completely.
The supervisory authority Finansinspektionen, FI, has asked Klarna to explain what happened.

In its app, Klarna has major technical problems. It means that users were logged into other customers' accounts and thereby see sensitive data such as their payment and purchase history and postal address. Users were also able to see part of the bank details linked to Klarna, but not the full account number.

One of Di's journalists accessed an account belonging to "Elisabeth". When the app was reloaded, another customer's login became visible.

When customers logged in with their own bank ID, they accessed other people's accounts. Each time they refreshed the page on the app, they brought up the details of a new, seemingly random user. It is unclear whether customers have been able to shop with other people's money.

Klarna had a total of 87 million consumers worldwide at the end of 2020, but it's unclear how many of those have an account on the company's app. The technical breakdown also extends beyond Sweden's borders, with outraged reactions pouring in on Twitter from Klarna users in various countries.

Klarna has now closed the app, citing a service outage. The company's press officer Niklas Gillström will return to Di after a while with a written comment.

"We are currently experiencing disruptions in our systems caused by technical problems. We are doing our utmost to restore the system and our services to full capacity and apologize for any inconvenience this may cause our customers. We have currently blocked all logins to the app until we are sure the problem has been fully resolved."

Di continues to seek the company for follow-up questions on whether the technical problems are due to an internal breakdown or external influence, how seriously the company views the sharing of personal data between users and whether customers may now have accidentally traded with other people's money. Klarna has asked for a response.

The Swedish Financial Supervisory Authority, FI, which among other things is the supervisory authority for banks, states that it has been informed of the situation.

"We have contacted Klarna and asked them for an explanation of what has happened," says Karin Lundberg, head of the business area Banking, to Di.

At the moment, FI has no further comments, she adds.

Di also seeks the Privacy Protection Authority, IMY, formerly known as the Data Inspectorate, for comment.

IMY has the right to fine companies up to 4 percent of their global annual turnover for serious violations. In addition, Klarna could face civil litigation, not least in the US where it has 15 million users.

(Translated with www.DeepL.com/Translator)
Serious question: why are paper authors allowed to be reviewers at all? That seems like the main logistical issue in this review process.
It's not likes giving people anxiety, it's the gaze of the panopticon.
There’s no paywall on the article.

And we wouldn’t share license keys for software we might believe should be free, or ad free, so why is this acceptable?
Do you think the network gear will last 20 years?
What is the best lead form builder tool?
Inspection paradox? https://towardsdatascience.com/the-inspection-paradox-is-eve...
neither mRNA (Pfizer + Moderna) nor viral vector (AZ + J&J) vaccines "inject" spike proteins. They use different delivery mechanisms (lipid nanoparticles or adenoviruses) for the genetic code that is used to create the spike proteins.

The article referenced is suggesting that the rare but serious clotting issues related to the adenovirus vaccines is caused by an errant processing of the spike gene which results in production of truncated spike protein that has soluble properties which results in it being excreted into the body. This soluble spike protein can then cause blood clotting issues when binding to endothelial cells in blood vessels.

So to attempt to answer your question: we expect the vaccine to result in the production of the spike protein in the body which your body then builds an immune response to which protects you from future infection. However, either due to a problem with the vaccine or how the spike protein is created in the body (I'm am not sure which - someone let me know), in rare instances a truncated spike protein can be produced that is slightly different than expected and results in blood clotting issues.
You can generically solve the problem of Alice giving David access to Bob's service on her behalf without giving Alice's credentials for Bob's service to David using stuff like OAuth2, this is already how lots of things work today.

In OAuth2 David only ends up with some token showing Alice authorised David to use this service on her behalf. Bob can tell David and Alice apart, and choose to restrict what David can do appropriately.

If Bob is particularly tired of this nonsense, and his customers like Alice keep giving David their credentials and then are surprised that doing so means Bob can't tell Alice and David apart, WebAuthn reifies it so that most users in Alice's position can now see where the problem is. When David tells Alice he needs her Yubikey to access Bob's service, it should occur to Alice that giving the Yubikey to David isn't a good idea because then she won't have it any more. Good.
Whatsapp was fantastic when it started. Right up until it was bought by facebook.
Ye Klarna was really scammy early. Making their living on reminder fees.
2.5 gbps and 10 gbps ethernet is starting to appear in consumer-grade computers too, albeit mostly in either apple stuff or enthusiast grade gear.
A colleague of mine recently published a paper on ML-based cell counting for human cancer cells.
It's open access and available here
https://www.mdpi.com/2076-3417/11/11/4912
Somehow my mind first jumped to the idea that two people taking an Uber together fell in love and married before the end of the ride.
This seems to have been brigade-flagged, as always if Fintech is criticized.
It's interesting to see this [0] on svaboda.org which certainly cannot be considered Putin/Lukashenka's propaganda by anyone.

[0] https://www.svaboda.org/a/27255566.html
I have personally found that the answers are tilted toward self-advertising.

The top answer is usually good, but the 2nd and 3rd answers are “check out my product”. I get it, but it has been off-putting for me.

In general, I still think it’s a good service. It just needs to be cleaned up a bit.
With all respect, I don't disagree with your assumption about a silly cache somewhere, but that is sort of my point, if such a severe privacy and security vulnerability can be introduced by a single toggle box somewhere then the architecture of their platform is hugely lacking IMHO. This is not a cat photo sharing platform but a fin-tech business and there should be more layers to security than a single toggle box.
I'm hopeful that the RAFFWU (https://raffwu.org.au/) can supplant the SDA in the future.
Other discussion that is rapidly sinking from the front page:

https://news.ycombinator.com/item?id=27301311
Technically there is a shortage of nice places to live.
Corporate Tax Futures
They haven't been so successful with nurses. 12% effective pay cut over a decade.
> Applying all the restrictions stated above, lets you immense benefits: for instance cacheability, stateless and uniform resource identification make your system easy to distribute and scale to handle large amount of traffic; self-describing messages, manipulation of resources through representations and code-on-demand let you have a system that can evolve gracefully without requiring a big bang protocol upgrade.

Suppose that you wanted or needed any or all of these things: REST doesn't give these things to you for free. If REST was a standard that people actually followed, as opposed to an almost meaningless buzzword, maybe you'd get some of these things for free. The original REST paper doesn't specify any of these things to a degree where they would "just work". If it did, it would be a standard so complex, nobody would implement it properly.

> With traditional HTTP-RPC (even with a standardized protocol like gRPC or SOAP), your intermediary has to be fully aware of the RPC schema to cache or know when it can retry. If you want to add a sharding gateway you need to especially develop a customized solution. A Level 2 "RESTful API" still has all these benefits.

The only thing you're reasonably going be able to cache through a "dumb" intermediary are GETs for static or rarely changing resources. You don't have to handle these through RPC, you can use plain HTTP handlers for that, you don't need to go "full REST".
Developers Share Technical Debt Horror Stories (Part 1)
Using trendy tech doesn't solve much by itself. Especially if you can't (or don't) compete with FAANG on compensation.
Is that within The Great Basin[^1]?

[1]: https://en.wikipedia.org/wiki/Watersheds_of_North_America
How to start an eCommerce biz in 2021
Mine is A to C.
WeWork gave ex-CEO Neumann $245M stock deal to clear way for listing
Airport Assistance in Dubai Airport
Airport Assist by MUrgency offers the finest professional and personalized airport assistance in Dubai & rest of UAE both pre-scheduled and in emergencies. Travelling alone or with your family, on a business trip with your colleagues or on a holiday with your friends, we will make sure you are well looked after. Our trained representatives will make your airport experience comfortable, convenient and time saving.
It's a widely popular legal and prescription-free stimulant, and usually consummed in a safer way than nicotine, another
widely popular legal and prescription-free stimulant.
Why are paper authors able to also act as reviewers? This seems to be a big part of the problem. Is there a lack of topical experts?
This also happened to GitHub recently, although limited. https://github.blog/2021-03-18-how-we-found-and-fixed-a-rare...
This is about Pocket and the design choices made, not treetabs.
It's a country with _very_ close relationships to Russia. Up to the point where Russian riot police was participating in suppressing protests in Belarus. If it was not for Russian support Lukashenko would probably have been overthrown in 2020.
Yes, it looks like this: https://i.imgur.com/3ec9zpj.jpg ... I don't have a whole lot of custom about:config settings and I tried to disable no-script and ublock origin but no luck.
Contact administrator of closest Research Institute(s) and ask for a tour of the labs saying you want to sponsor research. That's the best way to meet the right people, hear the needs and figure out what will work. Put in 2-3 years doing the rounds and you will learn what it takes.
"In ad­di­tion, the fi­nal pack­age gave him nearly $200 mil­lion in cash, let him re­fi­nance $432 mil­lion in debt on fa­vor­able terms and al­lowed an en­tity Mr. Neu­mann con­trols to sell $578 mil­lion in We­Work stock."

"Ex­ec­u­tive-sev­er­ance ex­perts said the pack­age stands out not only for its enor­mous size, but also given Mr. Neu­mann’s record. The val­u­a­tion of We­Work, which he co-founded in 2010, fell to around $8 bil­lion when he left from $47 bil­lion in early 2019. In all, We­Work has raised more than $11 bil­lion to build a com­pany worth $7.9 bil­lion, not in­clud­ing debt."