skysight-inc/HackerNews huggingface dataset:
>The whole point of privacy is to not signal anything to anyone.

No. The point of privacy is to signal only what I want to, and to people who I want to contact.

Looking for a privacy does not mean staying in a room, never leaving it and not communicating with external world.

I am fine with my friends and family knowing about $PRIVATE_MATTER, I am not fine with my bank/shop/government/employer knowing about it.
Useful machine readable iana and ripe data
I was reading a HN post about Public Suffix List Problems [1] and saw a mention for a JSON list of Generic top-level domains (gTLDs) [3] as opposed to the human readable list [4].

I'm always on the lookout for the canonical source of interesting machine readable data that I might use one day.

One source is the Internet Assigned Numbers Authority [2]. A google search (site:data.iana.org -tz) was interesting. [5][6]

Most of the IANA protocol registries have a machine readable list [7]

Time zone data [8][9]

The Regional Internet Registry for Europe, the Middle East and parts of Central Asia (RIPE) [10] has a great data API [11] where you can do lookups such as [12] and even [13]

[1] https://news.ycombinator.com/item?id=27852962
[2] https://www.iana.org
[3] https://www.icann.org/resources/registries/gtlds/v2/gtlds.json
[4] https://www.iana.org/domains/root/db
[5] https://data.iana.org/ietf-extracts/2021/07/15/
[6] https://data.iana.org/TLD/tlds-alpha-by-domain.txt
[7] https://www.iana.org/protocols
[8] https://data.iana.org/time-zones/tz-link.html
[9] https://www.iana.org/time-zones/repository/tzcode-latest.tar.gz
[10] https://www.ripe.net/
[11] https://stat.ripe.net/docs/data_api
[12] https://stat.ripe.net/data/iana-registry-info/data.json?resource=193/23
[13] https://stat.ripe.net/data/whats-my-ip/data.json
> Perhaps, yet the person who gets the most FB page views is apparently Ben Shapiro.

Shapiro, even if he is at the top, only represents a very small fraction of the overall attention space people see compared to everything else that's on Facebook. This is a cherry picked example at best. Also Shapiro is not anti-establishment by any definition of the word, see his stance on BlackRock buying up real estate as a recent example. Also outside debating naive socialist college students, he's not really an intellectual powerhouse outside variations of "it's a free market, they can do what they want and it will turn out fine; here's my cherry-picked facts", which is a narrative Facebook has a direct interest to promote. Anyway I digress.

> I see all those topics in my FB feed so at least from my perspective I have no idea what you're complaining about.

Your personal anecdotes are irrelevant. Also I never said they were outright banned, I said algorithmically manipulated. For instance Facebook is actively suppressing topics that are discussing vaccines in a negative light, such as discussion on long term effects which we obviously don't know since they just came out.
Again, not legal officially and definitely not the trade, but you don't have to go to some dodgy area to get them with the risk of getting beaten up: they are really easy to get and everyone who wants them knows where. The police are supposed to offer counseling addresses when they catch you; that is the story and I like that. However, from what I have seen, like for instance during the PT-FR Euro match in Faro, there were plenty people snorting coke/speed and smoking spliffs while drinking on the streets and plenty of cops that walked by and ignored. So it seems similar to Spain or NL where they 'close their eyes' for personal use and try to take on trafficking, which, in my opinion, has been proven enough to not work. It is safer than also outlaw personal use, but it is not good enough.
gnu tar does disable extracting paths like that by default. You need to explicitly add the '--absolute-names' flag to gnu tar in order to extract such a malicious archive.

I think all tar utilities that are in common usage disable extracting those sorts of paths by default.

It just happens that the go stdlib includes a tar implementation that was written from scratch (the go authors are allergic to re-using any C code and will NIH as much as they can).. and they probably don't want to fix it now because the go1 promise heavily discourages making changes like that, even if security is an exception to it.

As a random data point, since go and rust are often compared, the most popular tar extraction library in rust has a secure default for this: https://docs.rs/tar/0.4.35/tar/struct.Archive.html#method.un...
Yes, and no. The less unharmonic bass strings make a noticeable difference for the middle and high register too, when the dampers are lifted by the sustain pedal and the bass strings resonate with the higher ones. This "roominess" is also noticeable on the old long-neck lutes like the chitarrone, which had long bass strings for the same reason as this piano: avoiding wound strings (in their case, because those hadn't been invented yet)
I think the serious issue is more around long COVID and the associated symptoms with something that could perhaps become a chronic issue down the line.
I'm not convinced that Zig is the best 'low lovel' language for such kind of context: it's more targeted for'embedded' use when you need 'absolute' control.

A compiled language with a GC like D or Nim seems more productive..
why would it, neither require this on windows
why are you not just saying "Samsung"?
Multiple countries have already began to buy foreign land because they know their entire country will wither because it will be underwater.

Perhaps you should... fuck, I don't even know. All of this information is completely free and accessible and nobody gives a single fuck because they think they're smarter.

https://www.theguardian.com/world/2021/feb/24/kiribati-and-c...

https://www.reuters.com/article/us-climate-change-maldives/w...

https://www.reuters.com/article/us-maldives-environment/mald...
I think this question is framed the wrong way for me. I think if the question was "Is this composite?" I would get much better scores. The way I think is "Does it have a factor?" and inverting that Boolean trips me up.
While Python wasn't born pure object based, it is definetly object based in its current version.

Python 3.9.5 (default, May 27 2021, 19:45:35)
[GCC 9.3.0] on linux
Type "help", "copyright", "credits" or "license" for more information.
>>> x = 1
>>> type(x)
<class 'int'>
>>> dir(x)
['__abs__', '__add__', '__and__', '__bool__', '__ceil__', '__class__', '__delattr__', '__dir__', '__divmod
__', '__doc__', '__eq__', '__float__', '__floor__', '__floordiv__', '__format__', '__ge__', '__getattribut
e__', '__getnewargs__', '__gt__', '__hash__', '__index__', '__init__', '__init_subclass__', '__int__', '__
invert__', '__le__', '__lshift__', '__lt__', '__mod__', '__mul__', '__ne__', '__neg__', '__new__', '__or__
', '__pos__', '__pow__', '__radd__', '__rand__', '__rdivmod__', '__reduce__', '__reduce_ex__', '__repr__',
'__rfloordiv__', '__rlshift__', '__rmod__', '__rmul__', '__ror__', '__round__', '__rpow__', '__rrshift__'
, '__rshift__', '__rsub__', '__rtruediv__', '__rxor__', '__setattr__', '__sizeof__', '__str__', '__sub__',
'__subclasshook__', '__truediv__', '__trunc__', '__xor__', 'as_integer_ratio', 'bit_length', 'conjugate',
'denominator', 'from_bytes', 'imag', 'numerator', 'real', 'to_bytes']
>>>
>>> y = [2]
>>> type(y)
<class 'list'>
>>> dir(y)
['__add__', '__class__', '__class_getitem__', '__contains__', '__delattr__', '__delitem__', '__dir__', '__
doc__', '__eq__', '__format__', '__ge__', '__getattribute__', '__getitem__', '__gt__', '__hash__', '__iadd
__', '__imul__', '__init__', '__init_subclass__', '__iter__', '__le__', '__len__', '__lt__', '__mul__', '_
_ne__', '__new__', '__reduce__', '__reduce_ex__', '__repr__', '__reversed__', '__rmul__', '__setattr__', '
__setitem__', '__sizeof__', '__str__', '__subclasshook__', 'append', 'clear', 'copy', 'count', 'extend', '
index', 'insert', 'pop', 'remove', 'reverse', 'sort']
>>>
>>> def sum(a, b): return a + b
...
>>> sum
<function sum at 0x7f673429d1f0>
>>> dir(sum)
['__annotations__', '__call__', '__class__', '__closure__', '__code__', '__defaults__', '__delattr__', '__
dict__', '__dir__', '__doc__', '__eq__', '__format__', '__ge__', '__get__', '__getattribute__', '__globals
__', '__gt__', '__hash__', '__init__', '__init_subclass__', '__kwdefaults__', '__le__', '__lt__', '__modul
e__', '__name__', '__ne__', '__new__', '__qualname__', '__reduce__', '__reduce_ex__', '__repr__', '__setat
tr__', '__sizeof__', '__str__', '__subclasshook__']

Apparently everyone keeps forgetting that after the new class type declarations were introduced and the primitive types made subclasses of them, everything in Python is an object as well.
> Spreading rumours doesn't pay the bills, so there's no large scale incentive to spread them.

Spreading rumours absolutely helps pay the bills, it's almost an essential part of the experience of going to the pub in a small town that only has a couple.

You're right to say that there is no "large-scale" incentive though.
Yes and incredibly well balanced, listen to the Funérailles von Liszt recording if you want to get the bass sounds. You get both really nice bass with clear high tones. Chapeau.
This is what I saw. But I think it would be good to share the experience of a big, mature company with it to show that it's a system that can work, and can be easily added to companies which currently have a multi repo approach.

Also, there are quite a few tools to manage the distributions, and it would be great if they were open sourced. Basically Bloomberg championing their approach, to gain the usual advantages of open source (developer familiarity, cooperating across companies for improvements, and so on)

> Those projects typically have additional CI/CD enrollments outside of the integration build system too.

Another thing to call out is that you can simulate the "promotion", so you can check in your PRs whether your change is going to break any dependency or dependant.
AFAIK overlapping patents are fine and common. It just means that when implementing the technology you need to license/own both patents.
You can start solving this by taking out yourself. Thanks!
> RSI

https://workrave.org/

Also, check your desk and chair ergonomics. I find having my elbows on the desk reduces wrist strain.
After checking the contents of the file to send the report, I was surprised.
Surprisingly, clearly sensitive information such as GITHUB_REPO_API_KEY and WORKERS_KV_API_TOKEN was displayed. I couldn’t understand what happened for a moment, and when I checked the command log, I found that I accidentally put a link to /proc/self/environ instead of /proc/self/maps.
[…]
It seems that GitHub notified Cloudflare immediately because GITHUB_REPO_API_KEY (API key of GitHub) was included in the repository, and Cloudflare started incident response immediately after the notification.

[…]

April 6, 2021 20:30 cdnjs processed the file
At the same time GitHub sent an alert to Cloudflare
At the same time Cloudflare started an incident response
Within minutes Cloudflare finished revocation of credentials
April 6, 2021 20:40 I sent an initial report

This a nice Github feature. Also kudos to Cloudflare for quickly reacting to this.
I never saw the switch as a device for games in general. It is mostly the vessel for the next iteration of Nintendo-exclusive games. Those games don’t need super fancy hardware because the point of the games isn’t to show you the latest graphics.

The switch isn’t “just a handheld games console like any other.” It is “this thing you must buy to play the latest mario/Zelda/animal crossing game.” Obviously if you aren’t interested in those games there isn’t so much of a point.
Once you look at the verbs as symbols for algorithms, it will make much more sense. Most languages make you create algorithms. k code is the composition of algorithms.
Then you are participating in a self fulfilling prophecy. The oil and gas lobby won't stop calling. Nor will the car industry lobby and all the other industry groups. So if you don't call (or vote, for that matter) the cause is lost and what you think about politics. But you contributed to it by inaction, so don't blame others.
Whimsical
> I'm talking about situations in which kids share a bedroom with their parents.

In a single-parent family, one child wouldn't even qualify for a second bedroom under HUD guidelines. Now, its true that many child welfare rules wouldn't allow a placement to a foster or adoptive home that would force parent/child bedroom sharing, but neither would they prohibit it for an existing permanent family.

> The kids need another bedroom.

Again, if you have evidence such a rule exists, please present it.
Missing detail information to properly estimate it. But for now, as a lower bound I would look at the 3200G. That one had 8 CUs @ 1,25 GHz, but with Vega architecture, so two architecture steps behind. In my meta benchmark that put the 3200G igpu behind the GeForce GT 1030 [0], but with certainly playable FPS on many games, especially on 720p.

With the new architecture the APU in this machine should be faster (despite the low TDP?), and isn't it combined with really fast ram? If it beats the GTX 750 Ti then that makes a lot of games available on the target resolution, and maybe that's too low a target and your GTX 1050 comparison is apt. The 128MB cache integrated with RDNA 2 could have the effect it had on the Intel Iris Pro 6200 and give a big performance boost in some scenarios, that graphics hardware was awfully strong for an old igpu. Something like that on newer hardware could be really nice and make this a lot stronger than one would expect at first.

[0]: https://www.pc-kombo.com/us/benchmark/games/gpu/compare?ids%...
Tiny nuclear hearts is the future
At this point, we have two competing pieces of information:

(1) Some workers say they are just as effective at home

(2) Some higher ups believe employees are noticeably more productive in the office

Comparing the veracity of these two opposing statement, both from groups that have some claim to authority on the matter is hard. I, as an external observer, can only really judge with the aid of some secondary information. Both claims seem, on the surface, plausible.

However, if we are indeed missing some larger point, there must some data to backup claim (2). That data does not seem to be made public, as reported quarterly profits during the pandemic were up. Not releasing that information is up to Apple, they don't need to let outsiders know how the sausage is made.

https://www.macrotrends.net/stocks/charts/AAPL/apple/gross-p...

More importantly, if a non-trivial # of employees believe (1), regardless of its veracity, then Apple isn't correctly communicating their reasons for (2) internally. So at this point, we, as outside observers, don't know the reasons, many of the employees don't seem to know/believe the reasons, but we should take Apple Management's word for it?

You may trust the word of one group of the other, I'm not here to question that. Such value judgements are how we navigate life. However, expecting me to believe Apple's Management on face value, when their formerly happy-to-come-in employees don't is a tough sell.
On performance it is also good to mention that these sort of cdns where mostly conceived before http2, so then you ran into the risk of filling your connection quota to the origin server. Nowadays with http2/http3 that is no longer a problem.
Erlang/OTP fault-tolerant design patterns implemented in Go
I once pitched up a sample of a very low note plated on piano, it sounds so weird! The inharmonicity manifests as all kinds of weird whistling sounds.
The is zero chance of Apple ever releasing anything gaming-related
Smalltalk was born as a graphics based workstation OS, naturally it can do all of that.
I'm on my 8th Startup and I can assure you every one of them looked like they are definitely going to work out and I should YOLO the heck out of them.

But reality is obviously different. Not YOLOing and keeping my day job let me work on the next one without too much stress and let me improve my skills as a founder.

Finally my 7th one (which I started with a group of friends) is going some where and I'm working in parallel to launch 8th (with same guys) while we are trying to improve traction for 7th. I can confidently say now that startups are less about technology and more about getting to solve customer problems. Often even the idea isn't going to be original but as long as its helping some one, there is a chance to make a product out of it.
Very clean sounding low end, otherwise sounds like a good piano. The problem with piano IMO is the lowest notes are often kinda muddy sounding. This doesn't have that issue.
Concurrency vs. Parallelism in 5 mins [video]
yup that is correct. however non-mechanical valves last typically for 10 to 15 years, and will require a surgery past that time period.

some studies[1] have shown the mechanical valves are the safest choice.

1. https://med.stanford.edu/news/all-news/2017/11/mechanical-he...
There’s still plenty of money sloshing around the coffers of European royalty, even in modern republics. If you’re good at the greed thing I think the head-on-stick risk is pretty small.
I figure most people that have done it and are doing it are doing it 'just for money'

Or 'mostly or primarily for money'

So all the folks on the indie hackers podcast, for instance
In two decades of reading about it I've seen this oil theory many times but I haven't seen anything that convinces me that it was the real motivation. The closest strategic explanation was the neocons' PNAC letters which were basically just bravado about America throwing its weight around to maintain their global dominance. Reprehensible stuff.
7 months is not five times 18 months, did you misread this as 7 years?
Now you seem to be arguing for a complete set of welfare benefits comparable to whatever minimum wage is?

Because a job is obviously more than a "box check". It's an income. Otherwise, anyone could turn their nose up at those soul-sucking low-wage jobs and choose that unemployment alternative willingly.
Agreed, memes and crap content that has filled our feeds completely lowers the quality of information we're obtaining from these applications.

But content is another story altogether.
I'm the creator of YourDigitalRights.org, a free and open source service in the privacy space. When we started 3 years ago we decided to make the service free precisely because of the reasons outlined in this article. Almost every week I get an offer to monetize the service in some way, but I still think you shouldn't need to pay for privacy (literally as I was writing this comment I got an email offering to pay for our web extension).

One of the problems is that there is very little funding available for my sort of nonprofits. Even Mozilla with their startup studio program, which is focused on privacy, target commercial ventures. I guess that the bottom line is that as a society we do not prioritize privacy over other ambitions. This is strange to me because there's some truth to privacy being a "maker of class". Not sure how to reconcile the two.
DVA Claims for Australian Veterans
Slater and Gordon have a team of Military Lawyers in Australia. Like DVA Advocates, RSL Advocates and ex-service organisations they provide legal insights for veterans in their dealings with the Department of Veteran Affairs.
Well said! Times has indeed changed. Today we have access to:

- http2
- broadband internet
- clients have large local caches/storage

Privacy and security are gaining traction.
> The next target will be also rich in oil, although it would be definitely said that it's only because of lack of democracy in the said country.

Haiti.
Everyone knows grep is faster in the C locale
They never mention the little details in articles like this, like the fact that TBD relies entirely on CI. So what does that mean?

- CI requires an automation tool to run a test suite. If you don't have one yet, you need to set one up (and, you know, have a suite of tests to run). hand-waves the idea that the test suite is perfect

- If you don't have Pull Requests to gate the test suite before merge to trunk, the tests have to be done pre-merge. But that means it has to run on your laptop, and maybe there's too many tests. So you can do 'fake' Pull Requests, by keeping a CI server with one copy of your repo, and if the tests pass, pushing that copy or change to the 'real' repo.

- Even if you do have Pull Requests, or Fake Pull Requests, and a person has to approve them before merge (a good idea), you can still end up with a PR stuck in pending-approval state for eternity. And every time a change hits the trunk, the PR needs to be rebased, retested, and possibly bugs fixed. This means the equivalent of a branch being open for a long time - the whole reason not to use feature branches.

- Therefore, assuming you have a test suite, and a CI server, you must only merge very small changes, quickly. Not only must the change be small, you must have review & approval constantly. Or throw out the review/approval step. Or only do it once a day, which goes back towards the long-lived branches that we're trying to avoid.

- Of course with all this fast merging, it's increasingly likely you will introduce a bug, because no testing is perfect. So you have to also back out changes quickly. But you still won't always catch them quickly.

- With all these changes and reverts happening all the time, the trunk is constantly changing underneath everybody. So you have to rebase or merge constantly. If you don't, it will take you longer to refactor the changes you've just developed to work with the new changes.

- And since you can't possibly implement a complex new feature at once with only small commits, you have to use feature flags and other strategies to keep your untested new code from exploding until you think it's ready for prime time.

- As all of that is going on, you also of course need to test all this crap. So you'll need a CD system designed to constantly deploy to various environments, potentially managing many constantly changing dependencies and data sets depending on what's being pushed/tested.

- That system has at least the same complexity as the CI system, but it's infrastructure-heavy, which means you'll need to lean heavily on DevOps practices and SWE having the tools and training to manage their own deploys/infra. And we haven't even talked about versioning.

These are just some of the issues that some books cover (I think) but quaint blog posts about branching never mention. How long will it take your team(s) to implement all of that and completely change their SDLC?
Ask HN: Why do you feel uncomfortable with BigTech?
What are the reasons why you feel uncomfortable with BigTech, if any?

Whatever BigTech means to you... Please be as specific as possible; I'd love to have a list of specific reasons rather than a debate about policies, politics etc.
How to Change Virtual Memory Size in Windows 11
Placeholder Image Generator, handy tool for web development
A small python tool that generates placeholder images with specific dimensions and color

Examples:

python main.py 400x200

python main.py 400x200 -c "#1011ff"