skysight-inc/HackerNews huggingface dataset:
When I was young, the Norton package was the first thing to install in a new computer.

Now the brand has fall a lot and IIUC this is another big jump down :( .

@Peter: If you are reading this, can you pull a McAfee and make an interesting video. (But perhaps skip the later part about going to jail...)
Why the Parquet step? You should be able to do straight Debezium -> Kafka -> BQ, using the BQ sink connector for Kafka Connect (https://github.com/confluentinc/kafka-connect-bigquery); we have users using this with the Debezium MySQL connector, I'd expect this to work equally for Postgres.

Disclaimer: working on Debezium
> They can make all the agreements they want, but it's not a legal treaty until 2/3 of the Senate agrees

That's not true under international law. The confusing thing here is that "treaty" means different things under international law and US law.

Under international law, any legally binding agreement between two countries is a treaty.

Under US law, there are three types of agreements between the US and foreign states (or international organizations): treaties, congressional-executive agreements, and sole executive agreements. The first are approved by two-thirds vote in the Senate, the second by an ordinary Act of Congress, the third by the President acting alone (without Congressional involvement.) But all these three are considered equally to be treaties under international law. The distinction between the three is purely a US domestic law distinction. Article 46 of the Vienna Convention on the Law of Treaties says that domestic law does not determine the validity of treaties under international law unless the violation is manifest, which means that for most purposes the rest of the world can just ignore this US-internal distinction.

The authority to ratify treaties, in the international law sense of "ratify" and "treaties", solely belongs to the President (and the Secretary of State, and ambassadors, acting on the President's behalf). When the US constitution speaks of "ratifying" a treaty by the Senate, that is not ratification under international law. That's actually a domestic US legislative procedure which confusingly happens to have the same name.

> many laws affecting jurisdiction, accounting standards, and the tax laws themselves. None of this can be done with an executive agreement.

In practice this will likely be done by an ordinary Act of Congress (a "congressional-executive agreement") which only requires an ordinary (not two-thirds) vote in the Senate.

However, one needs to understand that ratifying a treaty under international law, and passing domestic legislation to implement it, are independent things. Under international law, the President or Secretary of State can legally submit the instrument of ratification for the treaty even if Congress hasn't passed any implementing legislation. International law doesn't care about implementation legislation, that's a domestic law concern. Now in practice the President or Secretary of State wouldn't do that, because that is not the traditional practice of the US. But other countries in the world do sometimes ratify treaties before the implementing legislation is passed. That generally happens in systems – whether Westminster democracies or non-democracies – in which the executive can be confident they'll get the implementing legislation passed.
> Yet the law ignores these implications.

Is that surprising? There's no physical law forcing legislators to write Constitutional laws or the executive branch to enforce them. They're just empty words until people actually implement them and then it's up to the Judiciary to review those implementations and resolve the ambiguities and inconsistencies between the laws and the real world. Unfortunately, there's nothing stopping bad laws from destroying lives on their way through courts, which often takes decades.

The Supreme Court hasn't decided the constitutionality of the born secret doctrine because the real world hasn't presented an opportunity. A core constitutional restriction of the courts is that they can't legislate, only rule on the cases that go before them. The doctrine has been abandoned by the government when push came to shove, likely because it knew the doctrine is indefensible before SCOTUS and only useful for the threat of litigation and criminal charges against civilians.
It seems to me that if you want some fancy curvilinear perspective, the simplest way is to render the scene normally (or make six renderings in a cubemap if needed), then texture-map it onto a suitable shape. That should work for any rearrangement of light rays, as long as they are straight and come to a point camera. Might get more fun if you want curved light or a camera extended in space :-)
About Face
As others have noted, according to spec, it's not supposed to but in practice at least some browsers apply the CSP to them.

Something I'm not clear on is whether the CSP spec says it shouldn't apply to any bookmarklet or if it only shouldn't apply to bookmarklets that don't request resources from other domains. That is, CSP shouldn't prevent a bookmarklet's own code from doing things like adding/removing attributes to elements but if the bookmarklet tries to load other files (more JavaScript, CSS files, images, etc.) then the page's CSP should apply.

To me, if a browser extension can run, a bookmarklet should also be able to run; a difference is the bookmarklet will only run once when it's clicked and will always clear from memory when a new page is requested.

Both extensions and bookmarklets pose some risk to the user but it's a worthwhile trade-off. If bookmarklets started to become a problem (remote resources being replaced will malware), maybe restrictions would be necessary, like all links to remote resources requiring valid subresource integrity hashes.
> What's crazy to me is not that regular users put up with a ton of bullshit - they have to

Honestly, the number of people working in tech, not using an adblock (and not even knowing that things like this exist) is making me sad.
Cool. No crypto-to-fiat exchange necessary. Salvador becomes the lab: a pure BTC medium of exchange for local goods and services, as well as receiving remittances internationally. Up close, it just looks like scanning a QR code ;)

Bullish for BTC Maximalists. And perhaps bullish for Miami as a crypto hub if LATAM adoption accelerates. Venezuela already proving something of a testing ground.

My question: how to peg the price of staples (gas,bread,houses) so they are not subject to price volatility of the underlying crypto currency?
I’m not the OP but I’ll tell you how I “deal”: awfully. Takes days if not weeks to get rid of an uncomfortable feeling of anxiety, some undesirable FOMO.
Don't cherry pick, read the rest of my comment. It wasn't at all about any individual password complexity, it was about password managers that work with browsers in context of the blog post.

Out of curiosity, what does haveibeenpwned.com say about your most used email?
How does this sciencealert type garbage even reach the HN frontpage?
I think there's two issues making it this way. The big one is the use of 'exponential space' based on each distance being halved along an axis, which is not accurate to how artists perspective works if drawn properly (someone smarter than me may do the math to figure out what the real formula is here).

The second point is the vanishing point for verticals is ridiculously close to the cube which makes it an incredibly tortured perspective for the eye to understand to start with.
EL Salvador to Declare Bitcoin as Legal Tender
This isn't right. If workers have to apply for any benefits, because they cannot live off what they get paid, it means other tax payers subsidise their wages, but Amazon keeps the profits (then fakes losses and avoid tax).
They are essentially stealing from everyone.
Amazon offers cost-follow pricing by default. Prime is the unlimited override.

Also, shipping costs are largely included in the price, and the shipping price / prime thing is just an economic game on top.
One hour earlier from what, your normal wake up time? When that becomes your normal wake up time do you get depressed again, lol
I wouldn't be worried about someone breaking in, so much as the paper getting lost.
I am in depression since like i was born and at the short period of times when i am out of depression for complicated reasons, i was getting up early nonintentionally.
This story is an example of one of the rare few I'd like to open the Mollyguard cage and click the Downvote (on the submission) for.
The Wikipedia article on capital punishment is interesting. The number of countries that have abolished or functionally abolished capital punishment is heartening, though the population that live in countries that still practice it is depressing.

https://en.m.wikipedia.org/wiki/Capital_punishment
About 10 years ago, I took a background with 2 cats and pinned window-decoration-less xeyes to them. It was hilarious when I paired with people and they would realize the cats were watching us.

Even at the time, most folks had forgotten or never knew about xeyes.

I did use to customize everything in the late 90s/early 2000s. I loved Sawmill/Sawfish for its lispy extensibility. I was constantly flipping between heavy desktop environments and seeing how stripped down I could run.

Nowadays I don't even change the wallpaper on my mac. I don't use any fancy shell prompt (just host$).

I do still have a ~200 line shell rc just to make all my oses consistent (macos, freebsd, redhat, debian/ubuntu) and deal with junk like my ssh-agent. I change a line or two every year or so. And my neovim config is in flux. But most everything else I use is just OOB.

I should say I did fall in love with chezmoi for managing config like this a couple years back and still use it religiously.
Having just three extra decimals to your bank account cuts depression risk by triple digits.
I'm the OP, and this is my first time making the HN front page. It's been great fun. Thanks all for the great discussion, and especially for the additional tips listed here!
iOS has a dedicated API for password managers - Password Autofill (https://developer.apple.com/documentation/security/password_...). It presents passwords in password managers the same way it would passwords in iCloud Keychain.

You still sometimes need to use the interfaces you mention, but increasingly rarely.
Neither perspective is toxic. I’m sure it’s knowable whether kids add or decrease happiness. And there’s probably some outlier set that feels differently than the population.

Thinking this doesn’t mean anything about toxicity.

Generally speaking I haven’t heard anyone use that word properly in years. It’s a pretty stupid word, unless dealing with chemicals and lethal doses.
His conclusion seems off to me too. I got "Password managers that use content scripts are bad" not "password managers are bad".

Edit: I just cracked open the 1password extension, and it does indeed use a content script. Glancing over the code I only see stuff related to locating which fields are the username and password field - but I was mistaken in thinking that they didn't use a content script.
Ask HN: How to deal with someone signing up email for spam?
Starting about 5 months ago, someone seems to have been signing up my email for spam. The emails:

* Have a name, but not my name. The name varies. This is why I think someone is signing me up.

* Are with real organizations. Local realtors, diet sites, dating sites, credit/debt help, unemployment help. Some are very spammy, some are legit

* Are in a manageable volume. Maybe 2-5 a day.

I don’t know who it is. Is there any way to either:

1. Find out who it is, or

2. In some way filter these emails? I use gmail

Am interested in either technical or legal measures. Currently I’m either unsubscribing or spamming the emails depending on the source, but it would be nice to stop them. They generally go to my “other” folder but not always, and in any case I usually need to process the “other” emails too.

Using a throwaway in case this person watches my account. My regular account has 10,000+ karma. Figured HN might have some ideas I hadn’t thought of.
Law of large numbers. Do what I did and flag it and move on.

More substantively, I agree with other commenters who have said all this shows is that there are people who have lower depression who wake up one hour earlier. Definitely does seem like clickbait.
I guess any kind of extremist on either side of the political spectrum could make that claim to justify their bigotry and hypocrisy.
I remember Anonymous made similar threat to Sinaloa cartel at the peak of their violence, did they actually do anything ?
The latest version of Android does, yes. Though they can still abuse the accessibility API for injecting password into applications that don't support this API.
Chrome's password manager has an export feature. Are you perhaps thinking of some other browser?
> 6. Fundamental cryptanalytics in the solution of aperiodic systems.

That section is white. Is there any information on cyphers that generate codes indistinguishable from absolute randomness based on the properties of entropy?
Depends on how old you are.
constantly trying to reach some kind of equilibrium

apologies to ask such a naive question, but im trying to understand, what is the basis that it is thought 'a market is "trying" to reach an equilibrium'...

maybe im too hung up on the semantics/wording, but im genuinely curious because in my mind "the market" isnt really "trying" to reach anything.... maybe its agents are (gain a profit, hoodswink someone, make a fair exchange, etc etc)... so in aggregate there may be some result over time, but i find it hard to imagine its trying to reach an equilibrium per se...?
This somewhat overlooks the main threat model that password managers solve - leaked credentials.

People can’t remember 80 passwords so they reuse the same one, that password eventually gets leaked and 9/10 times it doesn’t get leaked due to a targeted attack or a compromised machine but rather due to a breach of a service you signed up too.

Sure password managers have issues, they don’t solve user related errors and can even add to the attack surface of a machine they are running on but that’s really not important...

Using password managers and generating different passwords for each service reduces the blast radius from any breach.

This is why I don’t care if the password manager has the best encryption, or does it even encrypts at all or does it uses the clipboard vs some more secure side channel. Yeah that’s nice but that’s not in my threat model.

Which is why I don’t care if your password manager is a spreadsheet, it’s a terrible choice for a business because their threat landscape and the fact that a spreadsheet won’t allow you to audit who has access to what but for you or your mom even that is better than using the same password everywhere else.

Heck at home print your passwords and store them somewhere safe... put them on a post note for all I care as long as you live alone or at least not with anyone you wouldn’t want stumbling on that list...
https://en.wikipedia.org/wiki/One-time_pad

Note that for the code to be indistinguishable from absolute randomness, you need the key to be as long as the text.
I think your kind of discussing the positives of rust, but despite all that still rust is a lot of work to learn. The learning curve of rust might be worth it, I just didn't agree with the statement that rust isn't actually hard to learn.
Yeah, this is basically what got me to that idea of separating formula from parameter: whenever politics should care about some quality of a formula, it gets completely drowned in the noise of people screaming at each other trying to drag the parameters one way or the other. As evidenced by every single discussion about UBI. Sometimes the formula still turns out ok, but far too often not ok at all.

It was in my second or third programming side job when I was asked by the ramshackle finance marketing upstarts I was working for if it was possible to implement the almighty Income Tax Table (in Access, obviously). I had heard scary things about that beast. A few minutes of googling (I think was already Google?) and I realized that the law in question defined a simple linear factor that increases at certain thresholds, with a tax-exmpt base per threshold to correct for any jumps. I was so disappointed! Not so much by a scary mad beast that turned out to be all tame and reasonable but by the professions of finance marketers and tax consultants who routinely acted as if it was some arbitrary monstrosity that could only be dealt with in a lookup table.
> how to peg the price of staples (gas,bread,houses) so they are not subject to price volatility of the underlying crypto currency?

The only way to do this generally is to have an entire country functioning in a currency.

If, say, you earn in USD and live abroad, you face more volatility than someone earning in local currency, as exchange rates can swing rapidly. But having all transactions in a country follow the local currency stabilizes things.

Crypto is this situation times 10,000.
This recommendation always comes up in this sort of discussion, and I wholeheartedly agree with it. This book greatly affected the way I interact with people. It also lends itself well to just reading a random chapter here or there depending on what catches your interest.
Fair.

Notcurses' principal author aspires for it to provide a widget toolkit for TUIs[1], but much of the demo and much of the commit log to date is heavily focused on graphical capabilities and lower-level details.

It may be that one day it ships with a robust widget toolkit; or perhaps someone else will build another library on top of notcurses with that as the principal focus.

I'm also impressed with the effort put into FinalCut[2], but notcurses seems to me to be paving a more interesting path forward for TUI development.

[1] https://nick-black.com/htp-notcurses.pdf, see e.g. page 3

[2] https://github.com/gansm/finalcut
How does this address the point of the article? Which is that you should use the browser's builtin password manager and not a third party manager that injects user scripts into all websites and break the sandbox model?
> Then take that gaggle to the back in a meeting room so that it's not visible to the customers.

Maybe they don’t care about offending you? Just a thought.
Maybe early rising is an effect of being emotionally healthy, not a cause. Someone that naturally rises early might be in good emotional shape, but someone that is not healthy will not magically become healthier by just forcing him or herself to rise earlier.

I think we are mixing cause and effect here. It might also not be correlated. I mean, it may well be cultural, to rise earlier when you are feeling fine, but those two facts, early rising and emotional health, might not have a cause and effect relationship at all.
How much does constructing giant skull walls and pillars from the remains of your human sacrifices(https://www.sciencemag.org/news/2018/06/feeding-gods-hundred...) contribute to happiness and the good life? Asking for a friend.
This used to be the case, but somewhere around Android 7 (might've been 8 or 9) added proper support for autofill services.
That’s pretty interesting.

It also begs the question, if it is easier and cheaper to create and run a business (in theory, more profitable per time unit), it makes sense that more businesses would exist, making the landscape more competitive, placing more impetus on competitive pricing as a “differentiator” (race to the bottom).
That’s troubling. In fairness, when I last used RDS (2018) we had 9 databases running and we averaged about one database failover per month, with about 2-3 minutes of downtime per incident. I never got a satisfactory answer from support other than that this was a thing that sometimes happened.
The fact that the average HN voter can’t read isn’t evidence that the GP meant something.
No, there's an evil tradeoff, and a non-evil tradeoff.

One of the choices in the conflict of interests is bad.
Yeah of course, that was for the benefit of readers who didn't know.
Product Instrumentation Best Practices
I hear that. But your examples fail because (e.g.) your house is not an unfalsifiable assertion about the cosmos.

I get why you would make an unqualified rejection of the concept of a Sky Daddy. In practice I do, too. We human beings have so much ahead of us, and arbitrary lifestyle demands and fevered imaginings of desert nomads dead over 2000 years don't have a place in our present, much less our future.

Of the infinite set of all possible assertions about the nature of the cosmos, Sky Daddy is almost surely wrong. But then, I believe all assertions about the nature of the cosmos are all almost surely wrong.
traversing them won't get you O(log(m+n)) complexity.
> and all third-party scripts are always clunky

> I use [...] pass as overflow for more involved secrets

Why don't you consider pass a third-party script here in this context? Don't you use the Firefox plugin passFF?
I use unix pass as my "source of truth" and then individual browser password managers (mostly Firefox) as a local "cache" for sites where it is painful to manually go out to pass too often. Honestly it works brilliantly, pass syncs using git which I do to a bare ssh repo on a server I control (although it would be perfectly safe to put on github tbh).

I really feel like people overthink this sometimes.
Freenode BBS
Legit email lists are supposed to be "double opt-in;" they are supposed to send you one message which contain a link you need to click on (or otherwise reply to) to be subscribed.

Are they bypassing that somehow?
Subpoenas leak IP addresses all the time. It's not a big deal if the org being subpoenaed isn't a suspect.
When I’m able to shift my schedule a couple of hours earlier, I feel happier. Not sure why - maybe because this way I have some free time before kicking off my day and never feel I’m late at the start of the day.
Could you please not be a jerk in HN comments or otherwise break the site guidelines? It's not the first time you've done this, unfortunately, and we're really trying for something different here.

If you wouldn't mind reviewing https://news.ycombinator.com/newsguidelines.html and taking the intended spirit of the site more to heart, we'd be grateful.
People call anything and everything "Nazi" in this day and age, but in this case it might be somewhat of a relevant comparison. We're not talking about the Na'vi here: the Aztec were some brutally cruel people.
OK. Until a contract is signed, something is not a "historic" deal, is that right?
I've been calling people who spread these kafkatrap things out for exactly what they are. People completely out of touch with how logic or reason works. Of course, they aren't interested in that, since logic is "the Master's Tools" of oppression.
Have you ever looked at the Mac App Store? It is a literal dumpster fire.
Artist is my day job and this is a decent approximation of what a complex perspective drawing entails. And, really, it probably entails a lot of eyeballing it, too - sketch in something that feels roughly right against whatever guidelines you may have constructed, and leave it at that.

"Two-point perspective" and "three-point perspective" are good enough approximations for the common problem of "drawing a scene set within a place built around a lot of right angles".

I feel like the computing analogy to make here is "a very opinionated framework": it makes life a lot easier, if you want to do things the same way it's built to do. If you want to do stuff outside of what it's built to do you're gonna have to do a lot of the work yourself.
The battle was over an ultimately unsuccessful effort by the Justice Department to seize email logs from Google, which operates The Times’s email system, and which had resisted the effort to obtain the information.

Good on Google!