skysight-inc/HackerNews huggingface dataset:
Back in the '90s I filled my car up with gas at the local 7-11. My car sputtered across the parking lot and then died and wouldn't restart as I was pulling out onto the street. I drained the gas and put fresh in from another place and it started right up.

Called the regional HQ, told the guy there the story, and he just hung up on me and wouldn't answer when I called back.

Since then I've been avoiding 7-11 because, as far as I can tell, it's run by a-holes. They've lost more business from me than they would have spent on just refunding my $30 gas purchase or whatever.

Makes me think twice about plugging a $50-$100k car in to their business though. :-)
US Constitution empowers Congress to issue "Letters of Marque and Reprisal" - to wit grant permission for private entities (people, companies) to wage war on other private entities. Enacted to help shipping companies deal with pirates, applies today for the likes of ransomware perpetrators.
This is well within the scope of what the government should be doing--just as a country's navy protects merchant ships from pirates and the police protect shopkeepers from burglary. If a foreign military were launching physical attacks on your business we'd expect any government in the world to intervene.

Realistically even with government support, effective cybersecurity is going to require significant private effort and investment as well.
> sparking an ethics probe into sexual impropriety

Everything aside, I'm amazed and disappointed such a thing exists. More of character self-indictment of the people involved than anything.
We have plenty of historical and current examples of governments imposing capital controls to restrict access to foreign currency. Very rarely does it result in the market price of the foreign currency going down. Usually quite the opposite.

Heck, even in American history we once tried to ban private ownership of gold bullion. The black market price of gold rose substantially.
I don't know if I agree. An attacker may be able to craft a call to io_uring_{setup,enter,etc} even if no call exists in the program under attack. And if io_uring is poorly designed it could result in a privilege escalation or other bad things.

I suppose if it were a completely uninteresting feature it wouldn't end up enabled in most distros' kernel configs.
I think a lot of people don't realize this, because I never see it mentioned, but when the Soviet Union dissolved we (U.S.) convinced the Ukrainians to give up their loose nuclear weapons with the promise that we would protect them going forward. I may be time to ratchet up on that promise and help the Ukrainians drive the Russians back across their border. Crimea will stay gone because it belonged to Russia to begin with (https://en.wikipedia.org/wiki/1954_transfer_of_Crimea) There are a lot of things we could do with Ukraine to punish Russia.
Aren't they? Isn't their rep part of a council of reps making decisions for the wider area? Sorry if I'm being dumb, I thought they were licking 1 rep to send to a government, not 1 rep to run that area...
I think the article says it's 40 times nearer than the previous closest, which seems more relevant than the farthest galaxy.
I mean its armageddon either way
obligatory xkcd https://xkcd.com/567/
You're inventing an arbitrary difference where none exists. Twitter is literally a microblogging platform. There is no legal or moral difference between a Tweet versus a post on a different blogging platform such as Medium.
I kind of like Rust's version: macros are limited and clunky (and really clunky if you want to do anything super fancy), which means they're available, but I only end up using them when they're really necessary (like I'd be copying and pasting huge amounts of code and there's no other way to avoid doing that)
I believe you're spreading misinformation that has no place on Hacker News - or anywhere else to be honest. It's wildly accusatory and as you say, you are suggesting a vast "conspiracy against Trump" which involved unprecedented amounts of fraud, "improper" voting, and so on.
The GP was interested in "trying" Gitlab. If you want to try it out, but are wary of the time involved, isn't a docker-compose installation a great solution?
That's where the link redirects.
There's also gas stations with just pumps, maybe a mechanics shop, and no food or bathrooms. Nobody is going to hang out there for a charge.

Charging stations are best placed where there is something to do. That's why every casino has them.
Location: COL GMT-5

Remote: Yes !

Willing to relocate: Yes !

Technologies: Angular, Reactjs, nodejs, tailwindcss

Résumé/CV: https://www.linkedin.com/in/camilogiraldo91/

Email: camilogiraldo91 [at] gmail [dot] com

Hey there, most of my experience is working with UI's but I'm open to fullstack roles if needed. Been working for outsourcing companies with US clients, I just want to move on to a product company and cut off that intermediary
Companies which fall victim to such attacks aren't normally the kind which have bug bounties or engage with security researchers.
You'll be surprised to know how many doctors and police officers around the World made use of drugs, went through rehab and still do a decent job...
How to hire freelance developers for small jobs?
Looking for some advice on hiring freelance developers. I have a website I've developed mostly myself. It's small, but has some intermediate patterns (Async processing, websockets, etc.).

If I'm adding a new feature or improving the functionality of the site, currently I attempt to build it myself (+ using StackOverflow), and if I can't knock it out fairly quickly, I try to hire someone to unblock me. This has worked fairly well so far, but I've noticed an issue when I try to hire for a small job on Upwork: I get time estimates that are all over the place.

I had a job recently that I thought would take someone who has experience with the packages ~3-4hrs to complete, but I got time estimates ranging from 1hr to 40hrs. On top of that, most of those that applied had no reviews, or reviews that weren't relevant to my use case. Some of the applicants work with agencies, but even within that group there's a big variance in estimates.

Any thoughts on how I should approach this? Here's what I'm faced with, essentially:
- I know what needs to be built
- Because I'm not experienced in a certain framework, eg. SocketIO, it takes me a long time to figure it out
- I'm not able to solve the issue using StackOverflow

Really what I'd love to do is just pay an expert developer that's familiar with the package I'm working with to either A. do it quickly, or B. Pair program with me for 1hr.

A few things to note:
- I've tried to make it easy on freelancer: they work from a basic dummy app that mirrors the structure of my larger app, but much more simplified.
- The code is clean and easy to understand, because I strip out everything that's not necessary for the freelancer to use.
- I'm willing to pay for it and I rarely hire the cheapest offer.

It's very difficult to weed through the applicants for a job and understand which estimates are legitimate and which are either wishful thinking or gross overestimates. Any advice appreciated.
>the majority of uses of Bitcoin are criminal
Citation badly needed.
Brussels puts forward plan to create new EU-wide digital identity
https://drewdevault.com/2021/04/26/Cryptocurrency-is-a-disas...

Nations make laws against bad things. People who violate those laws go to jail. A ban on cryptocurrency (or rather, exchanging it for dollars) will be a hell of a lot easier than banning popular intoxicants.

We're done putting up with this particularly pernicious iteration of tulip mania. Time to pull the plug before it does any more damage.
Do you have a source for your claim that the majority of Bitcoin uses are criminal? Research by blockchain analysis companies show that only a small percentage of Bitcoin usage is illicit [1][2][3].

[1] https://www.elliptic.co/resources/typologies-concise-guide-c...

[2] https://ciphertrace.com/2020-year-end-cryptocurrency-crime-a...

[3] https://blog.chainalysis.com/reports/2021-crypto-crime-repor...
Fairly simple, they have footage from every time a person had to correct AP's driving. Take that footage label it. Train some of it, save some for test cases. Finally don't release an update until it drives better than the current system.
Yes, that one.

I rewatched this moment on Prime and I remembered it correctly. While she exhales after last words slowly, she inhales sharply before pressing the button.

I remember it probably because I watch everything with subtitles on and that was written. I now watched it without to avoid being biased and it still holds.

In addition she was exposed to the vacuum about 40 seconds before using the shot.
I wonder if the negative commenters are unaware of the history of CFAA prosecution abuse, and are coming at this for the first time only through this case.

This is very, very good news.

https://www.eff.org/deeplinks/2020/01/eff-asks-supreme-court...

https://www.eff.org/deeplinks/2021/06/supreme-court-overturn...
I was expecting the typical criticism of Israeli government = antisemitism junk but that's definitely not what this was. It's not like the guy wrote this in the 50s. It was obviously a little eye-raising in 2007 as well. I think Google made the right call here.
I see this rather differently. In fact AI is already as good as human drivers, statistically. Only a few years back, we could point at people getting killed by software bugs like the Tesla path-under-semi-trailer issue (not a lot, but it did happen and they were real bugs).

That's not happening any more. All we have left is laughing at stuff like this, where the visualization (not even the autopilot!) gets confused by seeing real (!) traffic lights on a truck, so it paints them in space, but then has to re-recognize them because they are moving.

At some point, the luddites will just run out of ammunition. It's sort of happening already.
The thing is, none of that is true. Even for the cloud hosted providers (Gitlab at least) you can install your own native runner and connect it to your CI system. Then run any weird combination of commands you want.
There are more chargers than (most people) you think.

Having more is a good thing, but gas stations adding them wont move the needle any time soon.

A friend was telling me recently that there aren't many chargers. He lives in Boulder, of all places. There are a million public chargers around Boulder, but they're relatively invisible compared to a gas station, especially if you aren't actively looking for them. When I showed him the plugshare map he couldn't believe it, he thought this stuff was a decade away.

In my experience owning five EVs, public charging isn't really an issue, especially for Tesla and J-1772. If anything, I worry for chargepoint et. al. in the face of so many free chargers in the short term.

That said, there are some weird spots between superchargers if you have a tesla. And if you rely on CCS with the coming onslaught of F-150 lightnings... I wish you good luck and to reconsider. Slow charging speed and crappily maintained CCS / CHaDeMo are really going to suck the life out of you on road trips compared to superchargers. But if you can get by with J1772 then life is good.
I guess there are many reasons, e.g. for some people it’s easier to find their phone than a pen; or lack of sticky notes.
Here in Norway the main limitation seems to be cost, not for the chargers but for the connection to the grid.

Installation might require increasing the local transformer station, which whoever wants the capacity has to share the cost for. This can be very expensive, usually hundreds of thousands USD from what I understand.

Also the running costs can be significant, as there's a separate grid charge based on the peak kW used per month. This can add up to a lot if multiple chargers are used simultaneously.
Try taking $10,001 in cash into the US and tell me that again
Why is it, in your view, a better example?
He is very much involved at actual day-to-day engineering at SpaceX. He is the CEO and the chief engineer there.

Sources: https://www.reddit.com/r/SpaceXLounge/comments/k1e0ta/eviden...

https://www.youtube.com/watch?v=S1nc_chrNQk&t=377s
How do you get notifications from all tenants at the same time? How do you even check the other tenants when you are in a Teams meeting? I mean, the client disconnects from the meeting if you try to view other tenants. How can you see which channels across five tenants have new messages?

If you are a small company and use Teams internally. Fine, but it simply does not work in an enterprise environments.
1) All security has weaknesses or work-arounds. That doesn't mean that all security is worthless. Forcing adversaries to take more risks and expend more effort is kind of the whole point, and that's exactly what you're talking about.

2) Are you arguing that the actual Great Firewall, a real thing we see actually working on a massive scale, does not make it much harder for foreigners to cyber-attack China?

3) See my other post on this thread—there's work toward re-designing the Internet to make evading state- or bloc-level origin control, including communicating with existing compromised nodes inside a state, remotely, way harder than it is now. I'm talking at the node-to-node routing and backbone level. It's interesting/terrifying stuff.

4) Couple 3 with some other minor and fairly obvious tweaks to how Internet access works, and even getting a foreign device with its own infinite-range radio into the target state would be reduced to step one of several to gain access to a target state's network, and that access would likely not last long if you start doing anything weird with it.
United could’ve also invested in the co as part of the deal.
> I have always wondered how difficult it it to debug macro heavy code

It isn't much harder than regular core. `macroexpand' is your friend! Particularly when wrapped by your IDE[0] into a "macrostepper" tool, which lets you macroexpand into an overlay[1], step by step.

Ultimately, macros are just functions - if slightly peculiar ones (they receive unevaluated arguments, and their return values are treated as if they were the code at the point of invocation). You can unit-test them just like any other function.

That's not to say there aren't macros that are very tough to debug. But the problem isn't macro-heavy code, as in code containing a lot of macros. The problem are heavy macros - monstrosities with complex internal logic, expanding their inputs into large amount of code generation, hidden state, etc. Complex macros like these take skill to write[2], but they're also rare to see.

--

[0] - By which I mean Emacs, though I guess there are Clojure IDEs now too.

[1] - I.e. a read-only view replacing the code you're macroexpanding on screen.

[2] - First rule: minimize the amount of code within the actual macro definition, move all logic into functions to be called by the macro, and unit test those extensively.
it's just a metaphor. in reality, they're just going to use the old Patriot Act mass surveillance infrastructure, which sits inside ISPs and processes every packet.
I'd wager the average case of a non-lit traffic light is more likely to be a traffic light that's... out (at least around here newly installed ones are covered until they're activated) so no, I wouldn't say ignoring them would make sense.

It would generally be a clue that there's an intersection busy enough to require signals that now lacks signals or signage which would warrant extra caution. I'd expect the car to at least slow down significantly, if not come to a complete stop before proceeding.
Funnily enough for openfaas/faas - only the Google product showed dependencies. Both different tools also showed different "dependents"

If the exercise is to capture / mediate GPL2/3 dependencies, then having results missing kind of defeats the purpose.
So you get Apple dictating both the security model and the commercial model, to developer detriment.

It's clearly monopolistic - exploitative, monolithic, controlling.

The app store is the biggest source of friction standing between app developers and their customers.

Now - this wouldn't be a problem if Apple did the job they claim they do, improved search so it worked well, provided easy visibility for relevant apps, and threw out the scams and the trash.

That isn't what's happening. And that is a problem.

The security angle is a non-issue. Returning the app ecosystem to some semblance of functionality and fairness would is an orthogonal issue.

Apple can keep its walled garden. But it needs to start treating it like a valuable garden, not like a pile of burning trash that happens to generate huge amounts of free money.
They'll just hire a million little Dutch boys with SCUBA to put their fingers where less wholy materials up to ship-building codes belongs. Problem solved!
I don't find either side's arguments particularly compelling in this case; they all look like legalistic sophistry to me more than anything else. I think the fundamental problem is that the CFAA is bad law, which means that there will be reasonable arguments on both sides any time it comes up in a court case. What should really happen is that the law should be changed.
Anything involving modifying parking stalls or electricity quickly becomes expensive, and these require both. Signage, striping, curb and walkway alterations, burying cable and permits quickly add up. The installation may also require security considerations since the charger is worth something.

But you are completely right; stations that become conspicuous charging destinations are going to do a lot of convenience store business. It'd be smart of well located towns to work on making it easier to add charging infrastructure so they can continue to be popular stops.
Cowboy coffee! I also tell everyone this is the best way to brew coffee but no one believes me.
A popular (stupid) talking point in the stupid discussions about static/dynamic while missing that the axes were orthogonal, was for proponents of static types to claim that dynamic languages were "unityped" based on some convoluted logic about tagging data at runtime.
The problem is that website presents me almost zero information about the product.
Then that's a crime. The innocent motivation doesn't wash away the guilty one.
They could, though. The original owner could assign ownership to whoever the bearer of the NFT happens to be.
I read and heard that as a Def Leppard ballad.
Yeah well, I think it depends of your workplace. I would never want to trade back my quiet home office with a view and my high end gear for my company's fully crowded and super loud openspace and the low cost gear waiting for me at my desk. I don't want to waste my time commuting anymore as it doesnt make any sense. But I admit that I miss eating lunch with some of my coworkers or taking a cofee break with them.
XSS in the AWS Console
Bitcoin is just math. The US isn't going to be able make holding bitcoin illegal, and I very much doubt it will ever be able to make the buying and selling of it illegal -- there are even free speech issues here. But what it can do is tax the hell out of it, regulate the exchanges as investment platforms, but they will have a hard time trying to make it illegal to pay someone to sign a cryptographic hash.
Ask HN: When is it appropriate to put a WIP project on my resume?
I'm writing an OpenGL rendering engine in C++. I'd like to put it on my resume but it's not much yet, just basic rendering + camera. I'm thinking to put it on there once I have all the OpenGL code properly abstracted along w/ a basic interface, unit tests and the ability to load meshes working.

Is this a good idea? I'll be applying for my first CS job so I'm not sure what is appropriate for my resume.

Thanks in advance :)
Chia Cryptocurrency Engaging in Obnoxiously Bogus Trademark Bullying
Elixir at Ramp
But where do you draw the line re: which type of "lie" matters?

A naive generalization might say that "lying" by setting a header = illegal. But clearly there is a difference between setting the Authorization header and setting the User-Agent header.

But what about headers that are not so well-defined? What about custom headers?

I'm not disagreeing with you, but these are the first questions that come to mind.

It seems that a judge would have to carefully consider the design of the system, and whether the vector that granted access was something that was clearly negligent on the part of the site owner, or was truly an attack vector and deemed illegal. But it seems difficult to formulate a universal test for this.
Oh they don’t all read the usernames.

I’ve had at least one person on here (years ago now) assume I must be a woman after I wrote something feminist.
ccp, national people's congress, the political consultative conference, state state council orgs like Ministry of Ecology and Environment, have environmental researchers, experts and advocates. And throughout the years, they have advocated for ecosystem protection, clean environment (air, water, ground, etc), sustainable development etc.
I think this website have all of the environment related laws and regulations. https://www.mee.gov.cn/ywgz/fgbz/fl/

For example, there is national protected animals, protected under Wild Animal Conservation Law. http://www.lawinfochina.com/display.aspx?id=22418&lib=law
Yangtz river protection law. One of the provision grants government power to ban fishing on yangtz and all of its tributary. Current ban is 10 years. http://www.npc.gov.cn/englishnpc/c23934/202103/8cccd3c25caf4...
Regulations of the People's Republic of China on Nature Reserves， http://www.lawinfochina.com/display.aspx?id=12164&lib=law&Se...
Law of the People's Republic of China on the Prevention and Control of Atmospheric Pollution http://www.lawinfochina.com/display.aspx?lib=law&id=1178&CGi...

also the constitution of the ccp, the top law within the party, says "The Communist Party of China shall lead the people in building a socialist ecological civilization. It shall strengthen the philosophy underlying ecological civilization that nature should be respected, adapted to, and protected; fully understand that lucid waters and lush mountains are invaluable assets; follow the fundamental national policy of conserving resources and protecting the environment; uphold the principle of prioritizing resource conservation and environmental protection and letting nature restore itself; and take a positive path to development that ensures increased production, higher living standards, and healthy ecosystems. The Party shall strive to build a resource-conserving, environmentally friendly society, implement the strictest possible environmental protection systems, and work to shape spatial layouts, industrial structures, modes of production, and ways of life that are conducive to resource conservation and environmental protection, creating good working and living environments for the people, and ensuring sustainable development for the Chinese nation." my interpretation is that the ccp is at least considering and not totally ignoring the environment. And if you look at banning fishing on the yangtz, transition fisherman to other jobs, pushing EVs, etc. I guess these things come from this principle.
or take that and deposit $5000 of it today and $5001 in a week ;)
This is where it gets interesting, because many of the things you've mentioned are things that we're spending a lot of time on thinking through.

At the moment Spot has "headphones mode" which signals to others that you prefer not to be interrupted. It also temporarily mutes notifications and other things, just like putting on real headphones in real life would. We're very conscious of these things, and coming from UI/UX research I believe it's paying attention to these fine details that add up to a great product overall.
I wonder if they'd be abandoned if companies using them considered these 3rd party libraries valuable enough to contribute/fund the development.