skysight-inc/HackerNews huggingface dataset:
I support this. I think once the platforms become large enough, Facebook, YouTube, Google, etc, they should be regulated as a utility.
I remember walking through Tempelhof when their appeared to be a sort of cycling event on. It might have been a regular thing, but it was fairly incredible. A single massive continuous swarm of people of all ages looping the airfield, on bikes, trikes, recliners, even velomobile. There was a tandem towing a trailer with two kids in it. It was crazy.
Just note that for some people, no pricing means "enterprise"/expensive. (I never even consider a product without transparent pricing myself, but others have had more success with this approach).
Quite right. The other thing is people can use fake numbers like https://fakenum.io to bypass phone verification!
Problem is, when you're debugging later on you need to understand what a breaking commit does (or is intended to do) before knowing what it did wrong.

Let alone the code review issue. In any multi-person project, it is just as important that your commit history be readable by a third party for information as that it be useful for your own personal debugging.
I wouldn't lead with symbols in an article focused on understandability.

A linker in first approximation just concatenates files.

In second approximation, it splits every input file into N parts (code and data, basically), then concatenates the corresponding parts in each input file, and writes all concatenated parts ("sections") to the output file.

It needs to fix up references at the end and it needs symbols for that, but that's kind of an implementation detail.

Even diagnosing duplicate symbols is a convenience feature if you look at things this way.

Symbols become more important if you want to write a "real" linker that supports weak symbols and symbols imported from dynamic libraries. But for the understanding the basics, it helps to deemphasize symbols, in my opinion.
It is unclear what the free tier entails, was anyone able to see? (I'm not going to sign up just to see the features, and I'm definitely not going to sign up for a subscription for an unknown product that might not be around in a year).
CSS Aesthetics with Subgrid
Wrong. IF there exists a general purpose formula (which isn't known yet) for all quantum problems, so secp256k1 is broken, then it would only reduce the complexity sqrt(N), from 2^256 down to 2^128. Which is unsolvable. (source: Stanford cryptography I course on coursera).

AND even if the elliptic curve cryptography of bitcoin is broken, say you can solve it in a year/month/week/day, the fact is most BTC unspent transaction outputs (UTXO's) are scripted "pay to public key hash".

The entity proving ownership of the UTXO needs to show a public key (that is so far unknown ... if they haven't reused this address before), AND this public key needs to hash into the address, AND the signature signed by the private key verified.

So if somebody announced they had solved secp256k1 and could break it in 1 week, your funds are safe. (1) They probably don't know your public key. Relax. And (2) You just wait for the BTC soft fork to support new crypto, then do a transfer to yourself. You transmit your transaction to the mempool (exposing your public key for the first time), and it will be mined in 10-30 minutes. Not enough time for the hackers to monitor the mempool and come up with a valid signature. Then your new UTXO is a different spend script for how to spend it next time using some new unbreakable crypto.
Time constraints on an RTOS are what you need them to be for the domain.

On the RTOS I was the lead for, some constraints were measured in 100s of ns.

Edit to address the edit: our upper bound in that case was single digit microseconds.
To be clear, I've looked at these assumptions before as a comparison, and from the sources I read at the time, Germany did have less hours compared to Australia, by a lot.

Social studies have too many variables to strongly conclude exactly why, and I'm not coming out with great sources here (om phone), but it does appear that Germany works far less than Australia, US, Mexico etc.

https://www.instarem.com/blog/are-you-working-more-than-you-...

Some of it is likely wealth. But some of it is definitely cultural attitudes to work.
> political views

What the hell has that got to do with anything?
A lot of these divisions and names are country or culture-specific.

Asian countries call those one way, European another, the US a different, some countries prefer their own, etc.

As the Wikipedia entry below says e.g.:

"Australasia is a region which comprises Australia, New Zealand, and some neighbouring islands. The term is used in a number of different contexts including geopolitically, physiogeographically, and ecologically where the term covers several slightly different but related regions."

This include continents, which, depending on the context, country, etc can be seen as being anywhere from 4 to 7.

https://en.wikipedia.org/wiki/Continent#Separation
> The very things that make SMS a uniquely good second factor make it an awful only factor. Use of SMS for account recovery should in general (or at least for important accounts) have a delay (order of days) that allows the real user to intervene.

No, SMS shouldn't be a single factor, period. It doesn't prove much, and is insecure, as the current post shows.
I have a dictionary with the tongue map printed in it. It's also in a Magic School Bus book.

It's a good case study in society's ability to believe things despite the fact that every single individual in the society has direct personal experience falsifying the belief. If you've ever eaten candy, you've experienced the taste of sugar all across your tongue.

It takes only a couple of seconds to run an experiment that conclusively disproves the tongue map. But there it is in the reference books.
Yes, Lockdown.exe is indeed signed. I saw that installer isn't signed and didn't bother to look at the exe inside.

Don't generalize my point about openness, I understand that for many unlike me it wouldn't add any benefits.

My recommendation would be for Microsoft to not abandon Applocker, provide it with decent UI and enable it on home editions.
Twitter is very toxic. It gives very dogmatic people an oversized cudgel to beat others over with. I wish whatever alternative takes shape for the other side of the aisle that Twitter sidelines, makes an effort to neutralize this effect, but I'm not optimistic. It's too alluring.

When one tactic didn't work, they chose another, then another, then another. Relentless in their thirst for things to become their vision no matter what.

I was heartened by the village public servants serving the public and ignoring the intrusion of these busybodies who had no stake in the locality whatsoever beside some remote association with their "passion". I mean, some big wig like Cher prancing in and calling some French minister to heel. This is outrageous.

You want cruelty of elephants, go to Africa and stop the tusk harvesting --oh, right, they might get shot. It's pathetic what gives these activists meaning in life.
I agree, it's just for some DR scenarios there's only so much you can do. And 'the internet is down' is hard to plan for.
If CNN is offline due to some outage and you're a smaller enterprise then are people really still doing online eCommerce stuff, or are they waiting for their favorite sites to come back up as a signal that things are back to normal.
You can just search a file on mobile. The lack of integration with spyware is a feature, not a bug.
I didn’t like Safari at first either, but after using it for performance reasons I prefer it in general now. Simple sane UI and it helps that it syncs to my phone and table seamlessly.
Fastly Internet Outage Was Caused by One Customer Changing a Setting
Where do you think the "servants of the community" dealers get their supply from?
There is a solution for us schmucks too.

Vote a government that reduce spending, and eventually remove taxes and the government itself.

Let infrastructure (health care, police && safety insurance, court system, roads, banking, army) gradually become private services you need to pay to use.

Companies won't be able to exploit infrastructure anymore, nobody gets their profits forcefully stolen by politicians on threat of violence (albeit some of the bureaucracy and management overhead will move to private companies).
Maybe look into whether you can get a Skype number set up to receive the SMSs. Some countries/banks will work with this arrangement.

But I feel your pain. It is very frustrating situation to be in.
I have not regained access to my bitcoin account, in part because I have not contacted customer support to do so. I’ve been too busy regaining access and continuing to support my client base.

My account is locked, and I am pretty sure my funds are still there. It will be a significant loss, but not devastating as this was my non-primary investment account.

I still don’t know the full extent of my losses.

So far, my losses are primarily loss of billable time. I am not a litigious person, but I am also going to educate myself as to what ‘pain-and-suffering’ means. Both my personal and business bank accounts are ok. I now understand why banks do not use email addresses as the login id. The thief would not (easily) be able to align my email address with my bank login id.

Once through this, I plan disassociate any portion of my login id with my name.
Leaving aside the readability and code-review concerns, bisection as a process is supremely painful when you have to separate out your targeted bug from the usual intermittent compilation and runtime issues that show up during local development.
> Most of the world's general-purpose languages have a heavy runtime.

"Heavy" by 1970 standards perhaps. When e.g. ML was first created, the newest and fanciest PCs had 512Kb of RAM. Nowadays if you wanted to buy a microcontroller with such a small amount of RAM you'd have to pay extra because you're asking for a lower-volume specialised part.

> What programming language do you think the allocator is written in?

Any language where someone actually bothered to actually try to write one - writing them in high-level languages has been done plenty of times with plenty of techniques (perhaps most elegantly in T by just carefully writing the allocator code such that it's not doing any allocations in the allocator itself). "Not actually needing to write a custom allocator" is also very easy in every domain if you actually try, IME.
That's a good precaution.

Another one might be to log queries and check for use of that old column.

2 caveats: (1) ensure this logging doesn't cause performance bottleneck and (2) this might not catch queries that use globs (ie. "select * from ..."). For (1) you can do this one only some of your instances of your DB cluster and (2), try to always use explicit column references.
To be fair, they have a point. Besides, It's not so much America thats the issue but "Americans".

Then again I don't blame the US for calling itself a continent since United states really isn't a name. Like South Africa isn't a name. Very nebulous now that I think about it. On the other hand, the UK has too many names.
Finally good and free project management for up to 10 people
What's wrong with Firefox?

It's an honest question, since as a user I really love it. Is it the 'dev-friendly', which Firefox lacks?
> Compare that to a U2F token where you can very reasonably remove the password entirely and still be just as safe

Yeah, and it requires me to use a U2F token, which I can loose, etc. You have to balance security and usability, and SMS as a second factor seems like a perfectly reasonable balance.
This does not really apply to language learning.
Most traditional gyms also have very high up front costs and extremely low unit costs, so the benefit from scale. You could go every day and they're still not really losing money on you (I don't think you can do $50 of wesr and tear every month).

Of course there's a limit to how many daily active users one gym can service and it's better for them if they have lots of paying, inactive users. But at no point does a user's activity cost the gym money.
Very cool, I'm building something similar (with a larger scope) [0] (it also has one-file exports, but it does load stuff from a CDN so it's not as contained to a single file as this project is.)

If you're looking for next steps: You can actually run user code using `import`, which will allow your users to import code from external websites using familiar `import {x} from "https://some-url.com/bla.js"` syntax at the top of cells. Here's how:

const exportsInCell = await import(URL.createObjectURL(new Blob([USER_CODE], { type: "text/javascript" })));

And with some transpilation you can support top-level await in eval [1]. Just some pointers!

[0]: https://starboard.gg & https://github.com/gzuidhof/starboard-notebook

[1]: https://github.com/gzuidhof/starboard-notebook/blob/master/s...
I hate being part of a dogpile, so yeah sorry about that, I just open up things to reply to, and then come back later and write it up just to find that I'm one of 10 people saying the same shit.

edit: FWIW I had a very negative initial reaction to the headline as well.
I love the idea of having a Discord for the book.
Why cancel your old phone number in that country when you still have a bank account there?

I suggest a bank which doesn't suck, such as bunq.
Watching the bots live on the Zoom meeting is surreal. There's literally a hand there with a finger extended poking on every ad and clickbaity headline.
I don't have a source to hand, but I've heard from other post-mortems that in SIM-jacking attack the carrier has been socially engineered into not bothering with the pin, ongoing court cases RE negligence perhaps on-going.
El Salvador makes Bitcoin legal tender
I think the 128 core GPU is rumored for desktop Mac Pro.
Managing Databases in a CI/CD pipeline is frankly difficult.

Applications are developed continuously, different versions of the application need to run in test, dev and staging environments, each of which has different data and a different schema. This makes for a difficult set of challenges in the set up of each environment, and the reliable promotion of software from one environment to the next. Staging environments need copies of production data in order to test things properly. They also need all the new data and schema changes that are required to make the new version of the software work.

So now you’re moving data and schema changes back and forth, up and down the pipeline. But unlike with software source code, you do not have Git to clone, branch and merge your changes. As applications become more data-centric and designers create design systems with all kinds of amazing reactive components for devs to use in their applications, each of these components has fields and each of these fields have data, and this data needs to be stored in a database, and this database needs to updated every time new components are added, modified, or used in new ways.

We should manage the revision of data the way we manage the revision of our source code. We should merge our latest changes into the production database. We should simply clone our production database for staging, we should just push changes from a developer’s local machines to a test environment!
I got yelled at about this on Fedi once, but the person insisted "USian" was correct

Give me a break, I'll determine the name for my own culture and how I identify myself, thanks
Hi renrutal,
Pascal from Airy here. Encryption is a very important topic for us. Since in all our versions all of the data resides in Apache Kafka and is only exposed via Kafka Streams Apps we are able to take advantage of Kafkas SSL encryption. For encryption-at-rest we use our cloud providers disk encryption.
We also support Open ID Connect as an identity layer so we can focus on improving our platform and be assured that our authentication is always up to date and secure.
You raise a good point though and we will continue innovating to make encryption accessible to everyone.
This is good advice since some DBs (like MySQL) store booleans as 8 bit ints anyways.
In bringing up CPAN, the other poster's point might have been that Matlab/Python/Octave don't generally contain native implementations of these either. A lot of Matlab and NumPy is wrapper around BLAS/ATLAS, for example.

One could do the same with Perl, and in fact, people have. If you need random variates from a Type 2 Gumbel distribution, for example, Math::GSL::Randist has you covered https://metacpan.org/pod/Math::GSL::Randist#Gumbel

Honestly, I'm not rushing to convert our stuff to PDL, but I did want to push back a little on the idea that python is The One True Way to do scientific computing. It's a fine language, but I think a lot of its specific benefits are overstated (or mixed in with the general idea of taking computing seriously).
It's ironic even, because their cartoon version of reality is so far out of touch that their desires would often do more harm than good to a particular animal. They treat all animals without subjectivity, forcing them to fit their idealized version of reality... this was made particularly apparent in the article for the rescued elephant at Longleat... where the group "Action for Elephants UK" want to take this 60 year old abused (recovering) elephant from her home of 10 years and transport her to a different country. It's beyond insensitive to just assume this is a good idea.
This time series plot is the most depressing thing I've seen this year.

You almost want to believe it fake, but you see how many data points are there and for how long the measurements have been taken.

The trend is so strong - I wonder what would Michael Crichton (ugh) say about it.
Resistor Noise Can Be Deafening, and Hard to Reduce (2007)
The pandemic changed us all.
If your crypto was stored on an exchange then this is par for the course; rule number one is that if you don't control the private keys, the coins are not yours.

You haven't even tried to regain access to it? Instead of spending time on HN you might want to reach out to Coinbase.
Placing the emphasis on "one customer" still creates a false narrative though. Note the headline doesn't even say it was a bug. This headline provokes the question "Who was it and what did they do?" rather than the more insightful "What was the bug?".

If a single bug caused the "internet meltdown", it's fairly likely that the bug was triggered by one person so there's no need to emphasize that part.
Certain taste receptors are enriched in different areas of the tongue, but there are no exclusive zones.

> all taste sensations come from all regions of the tongue, although different parts are more sensitive to certain tastes
> from _their_ backup quickly.

Wow, that is something
> Yeah, and it requires me to use a U2F token, which I can loose, etc.

In which case there are much safer recovery mechanisms available. For example, a second U2F token, or handwritten backup codes.

> and SMS as a second factor seems like a perfectly reasonable balance.

My point is that it isn't. Unfortunately, today, identity is a true privilege - it pretty much requires purchasing multiple U2F tokens, and that's super shitty. That doesn't mean that SMS 2FA is a good idea - the fact that it can actually reduce your security is very problematic.
... and it worked on linux and windows for years already.
I was looking for evidence of anthropogenic climate change in this article but didn’t find any
It is reasonable in this analysis, which is trying to compare normal people to billionaires. As explained in the article, wealthy people can get loans collateralized by their financial assets. Then they proceed to spend and pay back the loan (which is a deductible expense). The result is that they pay minuscule taxes compared to their worth (read more here: https://news.ycombinator.com/item?id=27447959 and here: https://news.ycombinator.com/item?id=27438941). The argument that their worth is not spendable until they sell does not stand up to scrutiny, as the example above shows.

So you end up with these wealthy people spending a ton and increasing their net worth by huge amounts, and paying small (or zero!) taxes.

I agree with you that a different tax law that calculated owed tax like this would not be completely reasonable, but it certainly shows the inequality and I believe it's a reasonable alternative. How would you measure the tax impact on the mega-rich otherwise?
You'd be surprised how many people are against this feature. I thought it'd be a no-brainer when it was proposed in the D community, but there was a lot of pushback against the feature (it's not implemented yet but it was accepted for the language). The main argument was that named arguments will cause your code to break when the arguments are renamed.
When you have more complex health problems, you'll notice though that you still have to use private healthcare, because state provided is next to useless.
It's interesting to me that they still run Varnish, since it doesn't have https/tls built-in. I do get that VCL is more expressive than similar capabilities in Nginx, HAproxy, etc. But it would seem like less work to add expressiveness to one of those (via Lua maybe?) than to maintain both Varnish and the separate components needed for both tls ingress and egress.
One of the side-effects of the efficiency obsession that capitalism generates, is the constant strive for centralization.

We took a technology stack designed to survive nuclear attacks, and turned it into something where a single bug can take down half the services on it. Why? Because on the flip side, a single improvement in the centralized service can automatically cascade to all the businesses using it.

Efficiency is a double-edged sword.
We should talk about the companies subverting water for bottling water, almond and avocado operations
Yep. Learning these things make it easier to google, not harder.
This. SMS is a great second factor and is perfectly suitable to prevent the main attack that you want second factors to prevent: that is if your password appears in a password list for any reason it should stopp anyone from just running away with your account. Note that if you are targeted directly SMS is not going to help you much but in this case maybe your password can (depending on the capabilities of the attacker).

Now is SMS the best second factor? Of course not and a proper U2F token will be a lot more secure in many cases but for most people SMS should be perfectly suitable. All this of course requires the auth provider to be somewhat competent and not use SMS as an only factor in any circumstances.
Worded another way: A human taxonomy construct arbitrarily changes.
Thanks for your feedback. Proton Calendar is now available for all users, and as part of our work on calendar integrations, there is already functionality to add calendar invites (.ics files) sent to your email into your calendar with one click. However, further work will need to be done to make this even better.
My apologies for any hostility on my part.
No, they don't have a point. The names are what they are. "Americans" are citizens of the United States of America. Insisting that's not correct is just petty whining, not a valid point.
One small thing in the latest redesign:
if you have two tabs, one active, one not, the visual cues suggest exactly the opposite. The active one seems like a clickable button, the inactive one seems pushed down and not clickable.

After misclicking hundreds of times, I still couldn't train myself to go against my perception and follow the designer's "bold vision", using it feels like writing with my left hand or steering a bicycle with a crooked wheel.
I don't mean to mock anyone, this scares the hell out of me.

I just want to call out what I see here in the hope that some of you might reconsider the implications of what is happening.

Everything branded as "new and shiny" or pioneering technology is not automatically better.