skysight-inc/HackerNews huggingface dataset:
It appears to be documented here:

https://gitee.com/openharmony/docs/tree/master/en/applicatio...

Some example code here:

https://gitee.com/openharmony/docs/blob/master/en/applicatio...

Apparently made very web like with ui layouts described in hml Huawei markup language rather than html.

Also lots of low level access - you can query the temperature of the battery via one of the apis.
This is so exhausting, infuriating and perplexing.

Just 1 week after managing to claw our LightHouse score up to 90 - its shot back down 72. The arbitrary nature of their weighting is just tiring - and its compounded by the fact that noone actually knows how much this actually impacts SEO.
They would normally use a key-generation mechanism, but knowing that is not helpful at all.

A typical key-generation mechanism would be for each malware copy to have a serial number and the keys to be generated by encrypting the serial number, e.g. with AES, using another secret key.

Even if you know precisely the serial number of a copy and how the per-copy keys are generated by the attacker, you do not know the attacker's secret key used for key generation, so this is a dead end.
What!? Who spends $60 a DAY on food? I live in Zürich, a very expensive place to eat, and my weekly total food budget for my wife and me is like $170.
ACG has Australian employees. They cannot be fired for this reason.
The bubble has popped, but these graphs show that we are still at January-February levels of bubble.

I am not sure if the market has fully collapsed (Unfortunately?).
Prisma | Senior Product Manager | Remote (UTC-3 to UTC +3) | €65,000 to €100,000 | www.prisma.io

Prisma is a next generation ORM for NodeJS and TypeScript.

We are looking for a Senior Product Manager to join cross-functional Migrations team including 4 x Engineers, and Product Designer and yourself.

The team is currently focused on driving the continued maturity of the Migrate tool and related features.

If you are a technically minded PM, who would like to join the team, please apply here: https://grnh.se/a766e7d62us or send me an email: rensburg@prisma.io
Least alluring name for a thing ever, but love the concept. Will definitely check it out :)
Maybe they keylog and incrementally hash everything including password subset? Seems implausible.
I did some test with ogg vorbis a while back. I think it was q4 vs q5 that was my limit.

What struck me though was that I couldn’t tell which was “better”.

In the track there was a section where the background drumming on one setting sounded like aluminum drum sticks while the other like wooden drumstick. Very subtle effect, and took some intense concentration to pick out.
Riot Games’ Valorant is coming to mobile
> Been smooth sailing ever since

Did you stay with Paypal after that? I'd have run for the hills.
I'm curious about what the pointless pedantry is in drawing a distinction between "stupid" and "morally abhorrent".
My teenage son is currently 223rd in the world in Super Mario Bros with a sub-5 personal best. He's explained just bits and pieces of the SMB speedrun subculture to me (frame rules, etc.) and it's just fascinating.

At under 5 minutes, it seems like it's the ideal length for practicing as well - if you screw up a full run, you at most have lost 5 minutes of time, you just start over again.

No-warp runs which go about 20 minutes are way more painful when you make a dumb mistake in 8-4.
Thank you for the advice.
The issue that I'm facing as an engineer is , everything I want to use has already been built, maybe I can come upon with improved versions of them.
Wasn't Windows 10 supposed to be the "last" Windows? (In terms of branding)

That didn't take long...
I am hardly surprised. While Bitcoin maybe had theoretical uses as a currency a decade ago, the NFT hype never made any sense whatsoever to begin with.
One thing I have noticed when listening to the interviews of NFT companies is that, when describing NFT is the future, the arguments from these founders are examples of people/artists made money by selling NFT online. It has become more and more a theme for cryptocurrency technology has well: the reason you should be in is that other people have made money rather than the benefit of the technology itself. It is not a good sign.
Yeah there are hacks around the problem, even JS application could be downloaded to a VM that is airgapped and the sate of which is saved, and after auditing the minified code (painful as hell) you know you can trust it on consecutive runs. This is all mostly fine but having to rely on such sandboxes isn't what we really want from security software, especially when minification makes auditing e.g. implementation of cryptographic algorithms really difficult.
Luckily most of those vulnerabilities will be dormant, impossible to reach and exploit. Hopefully.

I don't think there's going to be any change in how people package containers. So perhaps what is needed is a dependency-walking Link-Time-Optimization-like tool that can trim down, perhaps by masking rather than removing, the dead code?
I am not sure. These charts don’t say a whole lot in my opinion.

Sure, if you compare snapshots then there is less activity than say a couple of weeks earlier at the peak. But YoY comparison looks solid for example.

I don’t think this is a proper and nuanced analysis.
Yea, for all we know it could be a temporary correction, just to shoot up further next month. I think it's too early to speak of a 'collapse'.
These stories terrify me.

If they scare you now, just wait a few months or years until we see some massive breaches of Google, Facebook and Amazon data. It's possible the 'cloud-storage' model is a house of cards, because it may be the case that the whole thing collapses after a sufficiently high percent of the public experiences a financially-, socially- or career-devastating leak.
I don't want this, I wouldn't use this. I guess I'm just not optimistic enough to see this work:

Flatpak, snap, etc don't work as they just try to make the current desktop philosophy secure, without the application and the rest of the OS really being aware of it. Android and ios have been designed to offer native features for fine grained access control and isolation. For a desktop os, you need the same, from the ground up, and every app needs to be tailored to this. You'll start with a desert and tumbleweed.

This will never work, because it's simply too late: The web. A Chromebook pretty much does all the isolation you want on a different level, and is enough for the vast majority of people. I know you can now list a thousand things you cannot do in a browser and whatnot, but consider that the folks here on HN are a very rare breed.

And again, as you even said, for such a hypothetical sndboxing desktop os, user space needs to be rebuilt in large parts from scratch. Not in a hundred years. There so many things that are still lacking on the linux desktop today that this would at best be yet another experimental toy OS with no real world usability.

For me it's simply two separate, physical machines, one for online banking and sensitive stuff, the other for dev work, games, goofing off, and one or two android devices for other random crap. That's my sandboxing.
Thank you a lot for clarifying and educating! Also thanks to your contributions, you've definitely made the web a better place :)
The laundering market realizes that a public record is antithetical to some of their goals?
This has supported my trust in bitcoin from the very beginning. Why do you need NFT for money laundering when you can use cryptocurrency to achieve the same directly?
the sale of invisible sculpture just 2 days ago happened using paper certificate instead of NFT. Pity. It would have been match made in heaven.

https://www.npr.org/2021/06/01/1002018211/italian-artist-sel...
Boffins have done research on this a bunch of times[1][2][3].

Average length of best jokes is 103 (exactly) words by the way, as explained by Richard Wiseman to Sean Moncrieff at the 7m45s mark of this Newstalk radio-show segment[4].

Anyway … the scientifically proven funniest joke in the world is:

Two hunters are out in the woods when one of them collapses. He's not breathing and his eyes are glazed, so his friend calls 911. "My friend is dead! What should I do?" The operator replies, "Calm down, sir. I can help. First make sure that he's dead." There's a silence, then a loud bang. Back on the phone, the guy says, "Ok, now what?"

===

[1] “The Complexity of Jokes Is Limited by Cognitive Constraints on Mentalizing” https://link.springer.com/article/10.1007/s12110-015-9251-6

[2] “In 2001, I teamed up with the British Science Association to carry out ‘LaughLab’ – the scientific search for the world’s funniest joke.” https://richardwiseman.wordpress.com/research/laughlab/

[3] “It's not just the way you tell 'em: researchers find the official 50 funniest jokes of all time” https://www.dailymail.co.uk/news/article-1322475/Researchers...

[4] “The Funniest Joke Ever” https://www.newstalk.com/joke
You absolutely can't just use a USB compatible controllers on a PS4.
> these are critical systems

I’d guess that recognizing that a given computer is now critical infrastructure is also part of the problem.
Wonderful project! The kind of filter you use is very smart. Thanks for sharing, Im definitely going to try and use it to find some good ideas.
Also, Im curious, are you scraping data from App Store, etc or are you retrieving it real time through their apis ?
> uploading a photo of my US passport and credit card to Huawei’s servers

What?! The Chinese government has found the cheapest way of building records on foreign citizens: just ask them to give you their credentials and anything that can be used to impersonate you. They'll do it.

How are people even doing that on purpose? Man, fuck that.
I'm not talking about XSS vulnerabilities, but having to trust the vendor to do the right thing every time I use it. Some companies can be coerced, internally compromised, and TLS and X.509 isn't exactly designed to be safe against nation state attackers so MITM can inject malicious JS clients.

Native clients suffer from code distribution problems too, but to much lesser extent, especially with reproducible builds and actually readable code as opposed to minified JS.
Completely different - They are a large company with a proven track record and a lot to lose if they incorrectly claim efficacy. They were reporting on the results of a registered clinical trial with 30,000 subjects.

This shows results for ~ 48 transgenic mice. I would say that, at the time, the vaccine reported in the press release from Pfizer had a 99% chance of being approved by FDA, while this vaccine has maybe a 10% chance of being approved by the FDA at best.
Oh you could find an expensive way to do it, but the idea is the same.
Blockchain Mainnet Platform, Fleta Is Rebranding
Tilde.team – A Founding Member of Tildeverse
Live with my parents, do contracting the whole time in London, keep applying for new jobs all the time, learn tech in demand, invest all the excess money in SP500. Then spend $40 on a pizza for 10000BTC and hold that until April 2021 and sell it all while living in a tax free country.
Mistakes to Avoid While Hire Dedicated Development Team
I submitted a few patches but got turned of having to deal with Vala and C. Tooling and docs feel ancient compared to whats available in .Net/Java/js etc.

Thats said I really admire how ambitious they tried to be and all the stuff they have managed to produce with such few resources.
> Assuming you get a political majority to approve it. If you do, the costs will indeed be transferred to others, but I don't think it's politically feasible.

> Current society is fixated around short-term profits, and has little regard for the good of humanity.

Kind of sad. We could do it in a fair way, we just don't care enough. But was there ever a time when that was actually different? I assume not, and even though lots of things are crappy right now, we're probably still better off than ever (speaking for Europe, at least ...)
That was quick. Rubbish like this will kill crypto. So many grifters in crypto.
A very awesome blog post. We are really grateful for your blog post. You will find a lot of approaches after visiting your post. I was exactly searching for. Thanks for such post and please keep it up.

https://www.upsers.page/
70 GB CSV files aren't uncommon at my work. It's not really a problem since CSV streams well.
Hussein Nasser just recently created a video on the topic of leaky abstractions in our everday tech stack.

https://youtube.com/watch?v=4a3bI7AYsy4
I have a small company that sells 3D printed jewelry (https://lulimjewelry.com) and I use blender to automatically generate STL files ready for printing with my customers designs engraved on them.

Their scripting support is top notch. Virtually everything you can do in the GUI is accessible with the scripting library. You can even pop open a window that shows the equivalent python commands to actions you are doing in the GUI. They have a nice integrated editor for writing/debugging, and when you are all done you can run it headless from the command line.

I have blender running in a docker container on google cloud run that spits out STL files, which is awesome.
Another person living in the UK, I agree wholeheartedly; nice insights about Singapore and classism. I live in Manchester and take remote contracts with London clients from time to time. Getting paid London salaries outside of London is one way to live comfortably in this country. There are a few larger companies that truly believe in remote work, Utility Warehouse is one of them. I don't understand how people put up with London or the horrible commute.
I believe the author is correct that statistically, most intelligent alien species are likely to be less populous, and more physically massive than, human beings.

That being said, at least in the blog post — I haven't read the paper the author also wrote on the subject — there's one critical error, where the author assumes that because most alien species are less populous and more massive, if we ever successfully contact one, we should expect our own species to be more numerous and physically smaller than the contacted alien species. But that assumes contact is based on a random distribution of species! It seems much likelier that contact would be biased just as population size is: that is, we are more likely to contact aliens from a more numerous species than a less numerous one, because they have more spaceships and satellites and listening devices, etc. Using that framework, the contact case actually inverts: the most likely species to contact is the most numerous one, and while it is likely that we are among the most numerous intelligent species, it's not likely that we are the most numerous — at least, not using the country-based datasets. Therefore, it's likely that even though the author is correct that we are more numerous than most, in general alien contact will seem to contradict this, because we will likely be contacting the (relatively few) species that are more numerous than us. We are most likely the Pakistan of the galaxy, but we are also most likely to contact galactic China — not galactic Iceland.

The contacted species will also likely be physically smaller than us, for the same reason: contact is biased towards the largest populations, and species with large populations are biased towards physical smallness for thermodynamic reasons.

Edit: I read the author's paper, and indeed, the error is not present in the paper (which presumably received more scrutiny) — it's only present in the blog post. The paper instead claims that our nearest intelligent neighbors are likely to be less numerous, physically larger, and from smaller planets — which seems correct. The conclusion of the paper speculates that it may be more useful to search for nearby neighbors than more-numerous far away neighbors, and thus we should prioritize searching nearby systems that have smaller planets (since that's where the neighbors likely are). I'm not necessarily sure that's true — it really depends on whether physics allows reliable semi-FTL travel such as stable wormholes — but it's an interesting take and not immediately controvertible.
I am terrible at video games. It's not what my brain does well so I miss out on playing computer games in general, I'm more interested in board games or cards. Not long ago I was waiting for laundry to be done with a friend who had a Nintendo Switch on her, and we started a game of Mario Kart. The entire time we played, maybe 15 mins, I thought wow, I'm better than I think! Then after the game I told my friend and she says, the whole time she was racing behind me to kill the bad guys so I could enjoy playing. What a beautiful gesture!
99% of this cryptocurrency market is a joke (https://henvic.dev/posts/bitcoin/). I'm tired of seeing this. Now we've NFT and an antivirus which has a miner embedded. lol
And several hundred descendants living elsewhere (Norfolk Island, Australia, New Zealand).
Agreed! The beauty-per-effort-unit on Flutter is so high. There's a reason that Android's new UI framework looks a lot like Flutter widgets!
I could've drawn a similar looking graph in 2021-04-01 and arrived at the same conclusion on that basis ... and I would've been wrong.
Earth2 makes millions right now i think... It's sad
Not only are they cheap, but they are good too. I'm typing this on a Xiaomi Mi 9 SE, which I've had for 2 years now, and it's the best phone I've ever owned - build quality is fantastic (as good as Samsung), it's really fast, and the battery life is amazing - I use it a lot, but only need to charge it every other day.
The newsletter is really interesting if you're into the science of marketing. It's very action oriented and fast to read.
The OCR codes/checksums are readable both by machine and human, which was the point. Not a hack.

But the bit-length of the QR-code is probably bigger than what humans would accept so putting the information into alphanumerics might not be practical.
"Dumb idea is worth no money." Cool headline.
These cycles are getting faster:

1. I read a post on HN extolling a new use of some technology. I understand how it works but don't get why.
I do not jump on the bandwagon.

2. I read about the same technology but not on HN - maybe an online newspaper. I recognise there is an upcurve. Maybe I should have jumped when I read it on HN.

3. Beeple makes a fortune. My son and I enjoy watching him on corridor crew. I think I still don't know why but it can't be that bad. I do not jump on the bandwagon.

4. I realise I want to know the why makes sense. I play with some tech. I still know how but not why. I do not jump on the bandwagon.

5. The bubble bursts. I retro-think my inaction into foresight - I am glad I did not jump on the bandwagon.

But, just maybe, perhaps why is less important than try.
One reasons could be that Ethereum gas fees for minting a piece are extremely high at the moment.

Tezos ($xtz) based platforms such as https://www.hicetnunc.xyz are thriving.
The fees are next to nothing - especially compared to current alternatives.
You would be amazed at the quality of fresh food you can buy in the local stores. there's a good chance the potato you're eating for 5 dollar in the restaurant is the same one that's in your cellar which costed 5 cent
A meta-joke for people not in the UK: the TV channel that commissioned this is famous for re-runs of older BBC comedy programmes.
I still have a hope that increasing awareness of the problem may eventually lead to a reduction in the number of Dockerfiles starting `FROM <something_huge_and_not_really_needed>`.
Lots of people got "into the internet" because others have made money on it and not for the technology (html, tcp/ip, dns...)

Yes, crypto is mostly focused on financial apps, so they are harder to understand than "send me 140 chars and we make a timeline of it".
It's an interesting article but the term 'Leaky abstractions' is not suitable here. This abstraction is not leaky at all. It sounds like a great abstraction in fact. It's just the implementation that's slow and it's not because of the abstraction. The author himself admits "it’s relatively easy to think of ways to dramatically improve the performance of this scenario".

That fact that the issue can be easily resolved without changing the abstraction (the plugin system) is proof that the abstraction is not leaky.

A leaky abstraction would leak implementation details from the plugin to the caller and thus make it impossible to replace or modify the plugin without modifying the caller's logic. It doesn't appear to be the case here. It seems like the issue can be resolved just by changing the plugin's logic; the caller's logic would stay the same. This sounds like an excellent abstraction and could be the reason why the core logic hasn't had to be changed in 1998... It should be hailed as an achievement, not shunned as 'leaky'.
Stockholm syndrome ♡
"These days RSA is only used in digital signatures (which are not encryption)"

AFAIK digital signatures are created by encrypting the hash of the plaintext (be it content ofthe certificate or a message or whatnot). But yeah, RSA isn't really used for key exchanges due to it lacking forward secrecy. There are exceptions to this unfortunately, such as Apple's iMessage which is decades behind in cryptographic innovation.
There is an idea that after the bombs fall we all turn into raping and pillaging marauders. I have no idea why people find this idea comforting.

In reality villages will be built, laws written and religions made up.
I think you are saying that only positive feedback is acceptable? If this is the case, I disagree. As for "just go make your own/ use your own", well, many people do. Personally I do use a different WM when I can, but still have to use GNOME from time to time.
NFTs are dumb however some of the NFT markets have one cool thing that I hope sticks around: the artist gets a cut of all future sales.

If you sell your NFT art for $10 and then someone resells it for $1M, you will get some percentage of the $1M.

We've all heard the stories of "collector buys 10 Jackson Pollock's for $10 in the 70s, sells the collection for $100M today". Wouldn't it be nice if the artist could benefit from that belated appreciation?

Like most other things on the blockchain you don't really need the blockchain to do this, however this is one case where it's actually much simpler to implement the concept using a blockchain and smart contracts rather than any traditional method I'm aware of.
Because maybe someone has find ways to counter this type of money laundering so they need to find new ways
It would be a hard change, especially with the die-hard love for C, but I don’t think that it would be impossible to make it possible, with a backward compatible escape hatch.

Also, Linux user space is not famous for being binary backwards compatible, and everything being source available, I think with a clever abstraction it could potentially work.
>It's basically the report button on github.

No, it isn't.

The report button for github goes here.[0] A github hosted feedback/review system.

The link on gitee goes here[1]. A website ran by "Central Information Office Network (National Internet Information Office)" , Beijing.

If you can't spot the difference in methodologies then I'm not sure what else to say.

[0]: https://support.github.com/contact/report-abuse?category=rep...

[1]: https://12377.cn/
Almost every backup system I've seen will keep multiple versions of the file around with decreasing frequency as time progresses, ie one for every day of last week, every sunday of the last month, the first of every month for the last year, etc. That way if you get hit by ransomware, you can restore to a point in time where you are (fairly) sure no infection was present yet. Nothing is perfect, but this does give a decent amount of protection for "most" important files as they tend not to change that often. For things that do change often like databases, different strategies may be needed.
(Huawei) OpenHarmony Markup Language (HML)