skysight-inc/HackerNews huggingface dataset:
I have seen plenty of these servers left unattended for years and they all build up weird issues like time drifting out of sync, log files filling the disk, hackers somehow getting in and setting up crypto miners.

None of this is stuff the average company needs to deal with when youtube works just fine. I'm sure you can list out all the ways to avoid those listed problems but that just shows how much work and knowledge is needed to pull this off while anyone can use youtube.
I came here to write basically this same comment. Big fan of the negative income tax as a better (IMO) version of UBI as well. But as you say, it’s probably never going to happen.
and hypocritically the media publishes this info and discusses it. yet refusing to discuss other disclosures as "private".
"database of revoked tokens...but you've just reimplemented server side session authentication"

There's one important difference between session authentication and JWT+revocation: the revocation list can be distributed asynchronously, whereas a session list needs at least read-after-write consistency.

It's a minor point for most use cases, but occasionally can be very significant.
Now Is the Time. Tell Congress to Ban Federal Use of Face Recognition
Gray Hair Can Return to Its Original Color–and Stress Is Involved, of Course
> It is most definitely an abuse of IRA's to shield from capital gains taxes this way. It was never meant to be used for this.

That is what an IRA is, a shield from capital gains. They are not meant just for people who lose money or whose investment growth is very low. It's meant for people who put money into them. It's wrong to blame the successful entrepreneurs, because they were successful.

You know that when he wants to use any of that money or when he has to take distributions that taxes will be paid, and those taxes will be higher compared to them having been paid along the way.
The tax code is like everything else created by the US legislature: a product of many decades of compromise between competing ideas. I'm pretty sure none of it was designed.
maybe you can add a `sid` in jwt token, then store this sid in redis. when you want invoke a session, just del this sid in redis.
Viable, but not great.

My Linux mint install gets a duplicate mouse cursor appearing sometimes, just floating on top of everything on my desktop. If I don’t reboot the machine often weird things break. Like after a few days my media keys stop working on my keyboard. My trackpad sometimes stops working and needs to be power cycled. (One time after awaking from sleep my mouse was moving upside down.) The activity monitor in the tray freezes for me after a week or so. I’ve had some hard graphical freezes as well, which I assume is an AMD graphics driver bug.

Then bugs aside, I hate how inconsistent the keyboard shortcuts are between applications. I’ve been spoiled by macos where the same keyboard shortcuts to move a text editing cursor (cmd+left/right and so on) work the same in every application. Not so in Linux - and I can’t even configure it to work based on my muscle memory because IntelliJ doesn’t support using the start/meta key as a modifier. And some applications don’t support smooth scrolling for some reason.

So yeah, it’s viable. But I can’t say I’m impressed. I love having the source code, and knowing that if I want to I can actually fix these issues. But I’m still considering bouncing back to macos for my next computer.
Wouldn't that be injuctive relief though instead of damages? Damages would be some kind of loss, which at this point there appears to be none as the author has stated.
Nothing is "secure or not" - technologies/mitigations are secure against particular attacks. HTTPS is generally secure against passive network eavesdropping, but does nothing to stop local file inclusion in a web app.

Just because there are attacks or ways around a particular defense doesn't mean it's worthless, that's why we have defense in depth.
Do you have an alternative explanation?
Not bad for an advert. If you are interested, here is a short guide how to actually implement JWT securely:

- Make the JWT short lived ( 5 minutes)

- Re-freshing the JWT should involve server state (DB hit every 5 minutes, not every request)

- Protect highly-sensitive actions (typically overwrite/delete, but not read / non-overwrite) by requiring a fresh token.
Nothing is forever, including your own copies. Put it on youtube and keep a local backup. Most likely the local backup will get lost before the youtube one does. It's most likely the youtube copy will last longer than your company does.
My instincts say that you're saying something revelatory/insightful here, at least to me, but I'm not quite sure. Would you mind expounding, either with more context or more examples?
Not just anything, but the other kind of IRA lets you put money in without paying income tax first.
You can choose foods other than Natto for breakfast as many people do. There are many choices.
Hong Kong's Apple Daily to live on in blockchain, free of censors
Incoming lass-action lawsuit in.......3.......2....1
I feel like the trick must be if you can amortize some of the maintenance costs across multiple projects.

Maintaining DNS records and SSL keys is not 3x as hard for 3 domains as for one. Probably neither are taxes. Or keeping on top of security fixes for projects using the same tech stacks.

There’s a couple groups out there who do something like this for public sector projects, sort of taking over the devops aspects and keeping the lights on. And in that case creating project generators could be feasible as well, because it’s easier to run a project that’s built the way you prefer them to be built.
WSJ: Interview with Satya Nadella about Windows 11
Walmart makes over 200k in revenue per employee. Using profit to make your point is not applicable if honest. Otherwise you would advise Amazon to cease hiring altogether in all those years they were seemingly losing money per employee.
I suppose if you really want to avoid the hop to session storage as much as possible, you could have your applications servers continuously refresh a lightweight Bloom filter or other probabilistic data structure storing maybe-invalidated sessions in memory, and in case of a potential hit, confirm it with the session store. Then your logout endpoint just needs to wait until all servers receive the data to tell you you're logged out (I suppose CAP applies here). If this sounds like overkill to anyone reading this, then it probably is!
Never used finviz before, but I found a simpler link: https://finviz.com/insidertrading.ashx?oc=1549917&tc=1&b=2
I actively do not want this to become normalized. Things are bad enough as they currently stand, without further enabling appification and the degeneration of standards.
Agreed that RAID isn't backup, but other online systems, while not completely decoupled, are less-coupled, which serves as a convenient middle ground for some cases.
Would you consider founders and institutional investors having influence that hedge funds will not have to be a good, bad, or neutral arrangement?
Would you list on your own exchange? Is that legal?
Regarding Devise + Rails cookie session store:

1. Logging out deletes the cookie, you are really logged out. If your session cookie got stolen, you have other issues but I don't think this is really a matter of being 'logged out'. It is pretty easy to implement 'revoke all sessions for this user' type of logic with Devise and Devise does this of the box when a user changes their password.

2. Permissions are orthagonal to Devise. Devise stores the user ID in the session and loads the user model on every request, any permissions / blocking system would chain from there.

3. I can't think of anything that devise stores in the session where staleness would matter, other than things intended to be checked for staleness, like the salt that is used for the aforementioned revoke all sessions on password change functionality.
The irony is: redis and memcached are not great for storing sessions either.
It is indeed a huge pain in the ass to chop out exhaust components behind anything at all. Cutting tools are all speed and no torque.

If you use stainless or something it will really piss them off. Aluminum will deform, frustrating cutting attempts. Mesh will block access just as easily, maybe go for a stainless mesh so its really annoying to cut through and bank the weight reduction/cooling benefits.

If you use a grinder, the abrasion will take a lot longer as you have to clear both spots where you would like to cut.

If you use a sawzall aka reciprocating saw, the blade has to have totally clear movements or else it will flex and slow down.

If you use a torch it goes quicker, but the set up and hauling the tanks is not easy, torches are fiddly, especially if not properly maintained, the smoke is poison, and theres fuel lines down there to boot.

Unpleasant. They'll just curse and roll onto the next mark.
When Time machine backs up over Samba, it creates a sparse HFS+ disk image bundle on the remote drive. File are not backed up directly to the ext4.
Virtue is not 'virtue signaling'.

Investing in green energy for your corp is virtuous(some would argue).

Running ads about how you support BLM/LGBT/etc(no real cost to this) while pretending not to know about the environmental destruction and human rights abuses your products create around the world(would require actual action) is virtue signaling.
I use mixed dpi screens on Linux mint. It works but it’s officially experimental and there are some small bugs. (After sleeping all my window move to one of my displays. And some other small things)
It seems like quite a silly position. By the author's own admission, it is possible to mitigate all the risks warned about. I certainly don't agree that something is never OK to use because if implemented improperly it wouldn't be secure. If I took that seriously, random password generation is insecure, because someone could just use an cryptographically insecure PRNG.
You don't need short interest to make money shorting the stock. Short interest is useful for trying to squeeze people shorting the stock.

To make money off shorting the stock, all you need is for the stock to drop in price
You could pay yourself a salary, but right now capital gains are still more tax efficient.

I have often wondered how providing yourself insurance and a dollar salary works out financially.
It is, but it was also easy to click previously. By being in the bottom left you could just flick your mouse to the corner and not have to aim for a little icon. Now you can't do that. The position will also change as more icons are added which will make for bad UX as well.
Active discussion here: https://news.ycombinator.com/item?id=27624735
I'm not quite sure I follow. Most people who work for a startup (<10 people) and receive stocks get a similar deal. I've had to buy exercise options at previous companies. I also know people who have had options for $0.10/share for stocks that were then trading at $1.00/share after IPO.

If I worked at a startup pre-Series A, I got 1000 shares at $0.001/share, and then 1 year later they got a Series A and my shares became valued at $0.01/share, and then in a few more years we IPO'd and my shares became worth $100/share the IRS shouldn't have the ability to say "woopsie, yea, you actually paid too little taxes because that company that succeeded was actually worth way more than we expected back when it looked like it was going to fail"

That's just my opinion. I'm not sure if I'm misunderstanding something here. A startup is a high risk prospect. If you buy shares of a startup you're essentially putting money into a shredder in hopes that people pay you a bunch of money to play with the confetti. When a pre-Series A startup offers me "$50k/year in stock options" I instantly value that at $0/year in income mentally because there's no guarantee for any return. Its like options trading penny stocks.
Shitty article by a shitty user with a shitty submission history. How has it lived for so long on the front page? Who upvotes this?
Peter Theil was a 3.5% shareholder in 2002 when it was sold to Ebay

He likely was within the thresholds back in 1999 or very quickly after

its director && >= 10%

not or

but feel free to split hairs about that nuance, this isnt an area the IRS is splitting hairs, they go with the percent ownership
It wasn’t only that. Setting up the infrastructure to actually measure and track wealth (nice pre-IPO stocks there, how much are those worth? Nothing? How interesting) is a massive undertaking and a bureaucratic mess.

It’s a tax with a massive administrative overhead to it.
Interesting. Did you encounter any trade-offs or downsides in choosing this over a traditional s-expression style lisp? I am curious why this hasn’t been seen in a mainstream lisp before.
If I specify a particular venue, does Reg NMS still require my order to only be filled if it's within the national best bid-offer (NBBO) range? If not, that would seem to be a big caveat that should be mentioned whenever mentioning that retail inventors can specify a specific venue.

(Disclosure: I work on the sell-side, but don't have a Series 7. Certainly, for vanilla orders, Reg NMS requires your broker to route your order for best price. If you're specifying the routing, though, I'll leave it to someone with a Series 7 to explain which Reg NMS protections still apply.)
so set up a local account... there's no requirement that all accounts be MS accounts...
Agreed so much.
Indeed, the process might have been quite traumatic for the natives. On the flip side, the aliens might have had the best of intentions, alas executed with significant flaws. It so happens that boarding schools are (were?) a major tradition in the alien British culture.

https://en.wikipedia.org/wiki/Boarding_school#United_Kingdom

> Boarding schools in Britain started in medieval times when boys were sent to be educated at a monastery or noble household, where a lone literate cleric could be found. In the 12th century, the Pope ordered all Benedictine monasteries such as Westminster to provide charity schools, and many public schools started when such schools attracted paying students. These public schools reflected the collegiate universities of Oxford and Cambridge, as in many ways they still do, and were accordingly staffed almost entirely by clergymen until the 19th century. Private tuition at home remained the norm for aristocratic families, and for girls in particular, but after the 16th century, it was increasingly accepted that adolescents of any rank might best be educated collectively. The institution has thus adapted itself to changing social circumstances over 1,000 years.
Based on your report, without having the facts at hand, I would guess that COVID is more lethal for the vaccinated because there are more elderly people in that demographic.

What I've found amusing is Michael Burry's concerns over the vaccination for younger populations in his recent tweets. He tends to delete all of his tweets relatively quickly, so they're only available for a flash.
I want this on a t-shirt. It is funny with an exclamation point.
> liquidity just shifts that risk to someone else

This. This!

Shifting risk is not productive — it may be in some “economic” model, but by the hand of the market it is waste heat - and only compounds the probability of edge cases.

People shave off a return for holding the hot potato! Not one factory is built, not one wage increases, and not one investment made save for the HFT yacht.

This gets at my problem with the secondary market in general and why I believe dividends should be the only repayment terms for equity… it would align with the tax favors bestowed in our current market
Not with funds in a Roth IRA. Everything must be at "arm's length" (otherwise a lot of people would purchase homes using their Roth)
But what for? Do you really think they think people will stand in a shop and say "that laptop is only at 10, I take the one at 11"? Also, if that was indeed the intention, they should've moved for 11 earlier. The technical explanation seems far more reasonable.
"The conspiracist argument seemed to be reinforced when, the next week, a similarly botched Covid-19 tracking launch occurred in Massachusetts."

https://arstechnica.com/gadgets/2021/06/even-creepier-covid-...
Exactly. We don’t even know for sure that there isn’t a faster way to factor numbers with classical computers.

If you’re handling sensitive data, you have to understand the tools you’re using and what their relative weaknesses are. Best practices are nice. But it’s far too easy to make a mistake following them if you don’t understand the principles behind them.

“X is always secure” is a great way to ensure X is not implemented correctly.
I'd think this is not a good idea. You're essentially trying to break a stenographic code yourself. If you find nothing, was it not there or did you just not look hard enough?

If it matters if it's there or not, assume it's there. It's really the only safe option.

To answer the actual question though: how I'd start would be, scan a blank piece of paper. Print something small on it. Scan it again. Look for any differences using digital imaging tools. This should allow you to potentially find invisible differences.

You can also try to tell while it's printing if it does something to parts of the page that you didn't print to. Print at the bottom of the page only. Do the print heads engage anywhere else? Do the same thing with the middle.
Ask HN: How do you go about building low code visual tools in 2021?
Seeing a lot of low code platforms being built that have a baked in capability to define a workflow for data and use case automation.
I am wondering how does one go about building such workflow based engines in 2021?

Interested in understanding how to design the backend? Amazon seems to have its own state [language] (https://docs.aws.amazon.com/step-functions/latest/dg/concepts-amazon-states-language.html)

Any frameworks from OSS world that are dominating this space? Or just a collection of internal tooling exposed via APIs.

Any reference open architectures out there for backend and UI? Any theoretical concepts I need to revisit to get better at thinking about this? Finite State Machines modelling seems to be an obvious choice.

Some links:

AWS Step Functions :https://aws.amazon.com/blogs/aws/new-aws-step-functions-workflow-studio-a-low-code-visual-tool-for-building-state-machines/

Shopify Flow: https://apps.shopify.com/flow

Bubble: https://bubble.io/
Android apps running on windows to compete with adobe apps built for Windows...you must be kidding!
There was an article posted here not too long ago that demonstrated attacks on AI training sets. Unfortunately the name of the article and/or the technique itself escapes me. Maybe someone can help find it because it was very much like what you're describing.
Age is of zero relevance for hard drives?
Over 40k previously unknown viruses found in the human gut microbiome
I'm with you on this reaction. Sometimes hear the message notification while watching Linus Tech Tips' WAN Show. Always triggers a spike of anxiety because I think someone is looking for my help with something on the weekend. Ugh.
(Yes, I was being sarcastic.)
I swear by vertical taskbar usage. My right-most monitor has plenty of horizontal space, so my taskbar is about 250px wide, and I can read close to the full names of everything, plus I have plenty of room to see every single open window, WITHOUT combining multiple active windows of the same program. It's lovely.
where does it say that only MS accounts can be used or that you can only use one user account on the machine?

if you want to use a local account, USE ONE.
I think you're stretching the phrase "tragedy of the commons" too thin. The lesson in that story is that property ownership actually nets more value out of the property than 'nobody' owning it, because without a responsible steward then the populous strip mines it until it becomes useless to everyone. Of course there's the danger of the the owner doing the same if they are too short-sighted, which I think we might be seeing in many people's attitudes and businesses today.

You're using it to lament that people don't just sacrifice themselves for the greater good, which bears little resemblance to the original meaning. It also bears little resemblance to reality; you may observe that the most productive complex systems are the ones where the benefit to the individual is made to align with the benefit to the group, but your strategy is for the individual to shaft themselves so that some nameless "everybody else" gets the benefit. Reality check, that's never going to work. Instead aim for a system where the individual's interests are aligned with the groups interests. It's not that I don't see the value in maximizing the generation of new ideas, but for this to work everybody has to be on board for themselves where being onboard for yourself is good for the system.

If there's any modern corollary to "tragedy of the commons" it's open source software in general. People and companies use it for great gain but scarcely contribute back, strip mine its maintainers of value until they burn out and the project dies.
Definitely of interest! Thank you.
These are small and very convenient, and don't need a power supply. Great for trip use. I wouldn't use them for long term storage.
Makes sense this was written by Redis Head of Growth Marketing.
Why not? Every large system I’ve ever seen used one of these for sessions.
also different methods/software is important as you never know what bug may be lurking leading to bad backups
He wasn’t retroactively cast as a misogynist, he was known to be misogynistic at the time, and he issued a false apology at the time.

But to your other point, he has steadfastly attacked consumer privacy as not being a thing that matters, so hiring him runs counter to that.
Just like everyone is using OneDrive, Edge, and Bing?
Interesting ideas! Would it make sense to "sugarify" currying even further? For instance, `f[x][y][z]` could become something like `f→[x y z]`.
I am halfway through the second season of For All Mankind, it's a series based on an accelerated (versus the decelerated) series of events around the time of the Apollo missions. I think you may enjoy it!
I think we've really lost track of context here.

The thread began when it was pointed out that it wasn't just any corporation to which we handed so much power over us, it was a corporation dominated by white men.

The reason I believe this is unhelpful, confusing, and irrelevant, is that I believe that Google is actually one of the least racist powerful institutions on Earth, throughout both time and space. Don't get me wrong, I hate Google as much as any other ad-powered information harvesting giant, but they're a company that literally won't shut up about Black voices and women in tech. Which, more power to them for that! I think it's basically cynical from an executive's perspective, but cynical people can do good, so whatever.

But anyway, the point is I don't think race is relevant at all in the conversation about how Google has too much power. They use that power for evil quite often, but when they use it for good, the good is often trying to solve racism. Is it really helpful to point out how white they are?
The situation has been rapidly improving these weeks, after the release of NixOS 21.05. Here’s a working setup: https://nix.dev/tutorials/installing-nixos-on-a-raspberry-pi
They make better points on their readme, https://github.com/Cloud-CV/EvalAI ... I wonder about the automation of the entire model and putting the winning solution right into production and it can be shared and openly available. Imagine you just describe a problem and let the crowd produce the best and the top solution is always available with zero work.
Yes, but adjust for salary in india.