skysight-inc/HackerNews huggingface dataset:
If you'd rather use a service to help identify user's location && advanced proxy detection (plus more advanced user management stuff, I'd love to chat about it with you, let me know (email in profile!) This painful stuff is what we specialize in at https://clerk.dev .

Congrats on the launch!!
It is all based on donations, see https://calyxinstitute.org/projects/digital-services/vpn
Clubhouse is a case where I expect the Twitter clone (Spaces) to eat their lunch.

Twitter gives a social graph, and an asynchronous way to get to know people (accounts, really, one of the signatures of Twitter is how normal pseudonymity is).

Spaces then gives the ability to throw together a little Clubhouse (synchronous voice chat) on top of that.

My bet is that this works better as a feature, not a platform, and that the rise of Clubhouse was in fact an artifact of the pandemic. We'll see what happens.
Implementing Base64 from Scratch in Rust
I'm not talking about the American middle class in the comparison I make in the GP.

I actually have no idea what you're talking about, because I didn't mention any amount of money at all.
Unfortunately there's an 80 character limit for the titles. I had to pull a few key items out. I figured that because the first word was 'SEC', "fraudulent offerings" would be implied.
OpenGL 3 is backwards compatible with 2 itself being backwards compatible with 1, etc. (ignoring the whole profiles thing which was a mistake and aside from Apple who went their own way with Metal, everyone else eventually agreed with that) as is 4.

Also OpenGL 1.x didn't map to the underlying hardware even considering SGI, a lot of stuff was done on the CPU. The only time OpenGL matched the underlying hardware was around GeForce 2 and AFAIK that was really matching Nvidia's hardware - before and after that little window, OpenGL was its own abstraction.

But of course OpenGL is a very good example of an API done right (especially before Khronos took over and made a mess out of it): it did a reasonably good prediction for the future while providing a good API for the present (at the time) and even when the underlying hardware changed considerably, it still remains a very useful API with a reasonable mapping and its extension system allows it to take advantage of new hardware features without breaking existing code.

While i do not think Khronos did a good job on OpenGL, at least they did the right thing by making Vulkan a separate API instead of calling it "OpenGL 5", allowing the two APIs to coexist and not break any existing code. After all Vulkan is fine (even if not to my taste, it is unnecessarily oververbose and pretends to be a low level API when it isn't) if you absolutely want the best performance from a hardware abstraction API while OpenGL is still around when you do not need that and want something more user (programmer) friendly instead (though do not get me wrong, depending on what you do, you can extract a lot of performance out of OpenGL, though after some point you may need to switch to Vulkan).
Privacy was never a "core value" at Apple. Have people forgot about Prism? During that, Apple bent over backward to give data to the nsa. Other companies like yahoo sued to try preventing it. Privacy is a marketing tactic at apple they used when they realized it could be used against their competitors like Google who have business models based on knowing as much as possible about their consumers.
Splay trees aren't a dynamic programming thing (and aren't used in any database storage backends I know of). They are, however, conjectured to be no more than a constant factor slower than a dynamically optimal binary search tree.

https://en.wikipedia.org/wiki/Optimal_binary_search_tree
It adds endpoint to the gateway, the Client component can then send data to these endpoints by selecting it via the Target endpoint selection
Don't privacy and security go hand in hand?
The sole constraint on a primary key is that it is unique. Even in distributed systems, deterministically unique keys are almost always much more compressible than probabilistically unique keys, which is a double win.

Should you desire a high-entropy key, e.g. for hash tables or security, this can be trivially derived from the low-entropy key while still guaranteeing deterministic uniqueness.

Compressible primary keys are superior in every way.
Thats some wild speculation spoken with conviction...where WILL it be attractive to live btw?
Can you run this on the desktop?
I for one welcome our new robot overdogs!

(SCNR)
This is definitely better than google spyware as a phone. No built in exploit.
Try and showcase some African content - there is big film industry in places like Nigeria/Uganda and Ghana.
I thought the parent meant, provide two hashes, the hash itself and a hash of the hash (a check-hash, if you will).

fc94b0c1e5b0987c5843997697ee9fb7

5e81

fc94b0c1e5b0937c5843997697ee9fb7

d1da

You can see the difference v. clearly now. (hash used is md2 reduced to first and last 2 digits).
•Create: $16.59* (current price $15.50)

•Renewal: $16.59 (current price $15.50)

•Transfer: $13.38 (current price $12.50)

•Restore: $139.10 (current price $130.00*)
There is also a built-in Work Profile feature now, under Settings -> System -> Multiple Users.

It basically does the same thing under the hood.
Why not both?

More effective exploitation of labor is a competitive advantage that lowers costs and thereby increases profits and/or allows for lower prices. Exploitation of workers and value delivered to consumers are entirely compatible.
OK, thanks for explaining!

I have never had or thought of an application where a search engine interpreting the dashes as token delimiters was a problem. But if you have, and it was a problem, ok, that explains your preference I guess!

Curious if anyone reading has run into collisions with existing v1 UUIDs, or knows anyone who has, how often.

Pretty sure these new UUIDs are lexigraphically sortable (in timestamp order) in their hex representation (with or without dashes) as well as binary. Lots of people agree this is important, that in fact seems to be one of the main motivations of these new UUID formats in the draft we're discussing, I think?
Uuids are bulky if you store them in text form, but in binary form they are only 128 bits.

The main feature of a uuid is it allows distributed generation. 32-bit or 64-bit integers are almost always sequential numbers. The sequential nature allows efficient page filling and index creation, but the contention involved in creating a sequence grows rapidly with scale.

So while a 128-bit uuid is larger than a 64 bit integer, this version allows for the bulk of the benefits of sequential integers while reducing the biggest drawback of contention at the point of creation.
It seems like it will be extremely difficult to cater to the American Black market and assume those interests carryover to other populations.
Each point is true to me. Very nice job articulating these ideas.
The GPU I currently use is my laptop's 845m, so I don't think my performance numbers are that representative
Building CLI's in Rust
It's only awkward next to the spacebar if you use the wrong finger. What key are you currently hitting with your left thumb? That is a whole finger you could be using to hit LALT key, instead of letting it just sit there wasted., and it's very natural. You can use Emacs easily with this configuration for both modifiers.
The Gulf Stream doesn't shut down. The AMOC shuts off or decreases in intensity. This is thought to have led to a number of interesting climate blips since coming out of the last ice-age. i.e. melt water from North American land sheets flows into North Atlantic, making it less dense, and less likely to sink. This leads to a lessening in the AMOC. The Gulf Stream would have still flowed but perhaps not as intense nor have been "pulled" as far northward. One such event was 8200 years ago [0].

[0] https://en.wikipedia.org/wiki/8.2-kiloyear_event
New technology will allow important metals to be made more efficiently
Everyone, including some small startups have already added Clubhouse-like functionality into their own apps.

Look at Discord, Facebook / Instagram, Twitter, Reddit, LinkedIn, Spotify, Telegram, and even small startups like 'Public' have treated it like a feature, which is why Clubhouse is losing users.

The only daily active users there are a16z and the same VCs of Clubhouse. I still don't know why it is worth $4B.

And now Slack, with Slack Huddles [0]

[0] https://slack.com/intl/en-gb/help/articles/4402059015315-Int...
Please don't hijack top comments by replying with non-replies, and certainly not with flamebait.

We detached this comment from https://news.ycombinator.com/item?id=28089696.
I trust OS packages for main daemons like database, smtp, http daemons.

How are you meant to apply only security patches on docker containers?

What's the point of "isolating" daemons to avoid "random" files in /etc?

It just makes it harder to git control and back up /etc by splitting it all over the containers.
Interacting with Data from FFI in Rust
Developers don't get to see what is going on, everything is hidden in multiple layers of libraries, it isn't down to laziness.
Remediating TruffleHog Findings with Doppler
Unless someone wrote the library specifically to expose women to it, I think it is. Sex is something common, and this might be my European culture talking, but I just don't see what the big deal is.
Same with Snapchat versus Instagram Stories.

Except Snapchat was able to use their position and funding to invest in AR. Now they've got an incredibly compelling lead in that space.

It'll be interesting to see what VR/AR/XR/metaverse products that Apple and Facebook have in the pipeline will do to that lead.
> What benefit do we get from this complexity compared to just having static HTML pages that someone would update manually?

Static HTML scales much better, actually
I don't see why not? It just has to be more specific -- chicken breast requires processing, but one is pretty much like another, unlike say, some morning cereal from TV ads.

Actually that might be a good heuristic, I don't remember the last time I bought food that even has ads. The store itself does have some ads that feature some of the items, I guess.
I was hoping that because SEC was already in the title, fraud would be implied. They don't really tend to get involved for any other reason. Not at all my intention to editorialize or be deceitful, I made a good faith effort at removing the ~50% of characters that were least important to the content.
> Naive is not something I would associate with Apple, but I guess they have seen it now.

It wasn’t just Apple who was naïve, it was the entirety of US and European foreign policy too. Do you want to claim that the west didn’t expect political liberalization in China.

That article doesn’t change anything. Apple didn’t go into China thinking they were helping to strengthen an authoritarian regime. They went in thinking they were helping to liberalize it.

We all, Apple included, got played.
That's pretty scary, don't brakes contain asbestos?
>Other climate models have said the AMOC will weaken over the coming century but that a collapse before 2100 is unlikely.

And, lets bury the lede of why no one will care about this unless they are already on board for fighting climate change.
It's not going to end. Verisign was allowed to increase the wholesale price to registrars for .COM domains by 7% each year in 2020, 2021, 2022, and 2023.

Edited: in more detail from thread[0] last year:

[0]https://news.ycombinator.com/item?id=22292348
1) What would you say are your unique differences from LineageOS and GrapheneOS?

2) What big goals/projects are planned for the future?

3) Where do you see Android as a platform in 5 or 10 years? Any predictions or notable obstacles?

4) What do you think of mobile Linux distributions?
Raising awareness won't stop any of this. It's inevitable. We have the technological capacity and institutional interest required to implement it, it will be done, and it will be endemic.

Raising awareness is about letting people know so that they might take the necessary precautions if they consider themselves to be at risk of its abuse, and degrades their faith in the institutions that support it.
You can do the following:

TicketsatWork: https://www.lenovo.com/us/en/ticketsatwork/pc (Passcode: TICKETSatWK)
F-Droid is for distributing viruses. There may be legit apps on there, but there are also tons of virus's and not enough app oversite to be safe. It's doesn't seem like much of a threat because the userbase is so small that not a lot of hackers target it. Once it has 5% of pop though, it would be a meaninful target - particularly since these are rooted phones.
Those look suspiciously similar to the Python one!
Which, looks like, defeats the whole purpose. (It's almost like if ReactOS or WINE allowed Microsoft Windows updates.)
We do want to support more devices, however not all of them meet our requirements https://calyxos.org/about/faq/device-support/#requirements-f...

We're trying to find devices which do, and if not see if the requirements can be relaxed.

The most important part that's missing from many phones is being able to relock the bootloader with a custom OS installed.
Haha, had never thought of it as an abstraction over abstracts! Thanks for the detailed feedback.

The TTS cleanup ought to become one of my top priorities. I’ve heard a lot of $k$ (dollar k dollar) is etc. I’m guessing it’s LaTeX markup bleeding over into the abstract text rendering somehow.

I am not able to figure out how to curate a list, since I’m just processing Arxiv papers as they come in! One option is to provide papers accepted at conferences.

Another is to let people upvote, but I fear voting dynamics can get messy. Also, without sufficient users, voting isn’t of much use.

I’ll see how I can implement permalinks. I’m not too familiar with doing that in single page apps so I need to work on it. Related question: would you like to be able to star/bookmark papers so that you can come back to them?
> The exclusivity from launching as invite and iPhone only is wearing off now that anyone can join including Android users.

People still unironically believe shit like this, that your choice of phone OS says what kind of status you have??
Only the first page is visible with the current nature.com link.
I think you stumbled on a great idea!

Ranking each country by the sum of the normalised reciprocal of their placements in events.

I think that would be pretty cool.

Ranking by gold or ranking by total medals in my mind remain terrible ways to rank.
Is there an Android X86 build of this? That would be an awesome laptop OS.
All of the neocons will die in the next few years.
Replaced by the anti-war Middle Aged and the 9/11 Generation.
Assuming this system doesn't collapse in on itself I say that the US will retreat into isolationism, so it would be a good time for some one abroad to make major political moves if it suited him.
I disagree. It is the best thing they have in their lives.

Also, you don't really need money to be happy. I used to have no money at all when I was young and still had great time with girls.
Not exactly, as seeing a fresh ID lets you pretty accurately tell how many items there are.
It's definitely a 100% cultural thing. I know a "mixed" couple and they have chosen to raise the kids as "non-roma", much to the chagrin of a few elders on the roma side of the family. It could have been the other way round. It also helps that the skin color is not different, and pretty much anybody around here can "pass" as roma or non-roma just by adopting a few mannerisms.
There’s another typo in the v7 section where it’s erroneously referred to as v8.
> F-Droid is for distributing viruses.

Lol, please point me to one? (Or an article about one?)
The lack of sorting is what this rfc is fixing.
> Also, you don't need to take the honey from a beehive.

How do you manage this? Done they run out of space and swarm?
I have one that I took 7 boxes from (somewhere around 100kgs of honey) and I also split it during the season to stop them swarming - they grew so fast.
If I hadn’t there would have been swarms every few weeks.
In my experience, policing desk hours doesn't do much for software engineering and most creative fields. Sometimes it is necessary though, if someone is checked out and lying about getting stuff done or being able to hit a milestone if they are just forced to sit and policed they will get stuff done but otherwise they will not. I find this latter case to be the exception. People with this attitude are already toxic when being policed, I think with WFH there's going to be a multiplier for their toxicity.

I think in a great office culture people are going to the office because they want to, or because they are more productive there. In my experience this is what will happen once a bunch of people are already at the office and remote people can't catch up or feel left behind on some stuff. Also on meetings when there's like four or five people on a room the people on videoconference just can't work at the same level and it's very hard to accommodate for them.

I think it's ok if some companies don't want to go back to the office, but I just think colocated teams perform better. I'd rather be on the teams that perform better. I think maybe for a giant like Google letting everyone go home is not a bad idea, but if you want a tiger team to skunkworks something up for you I think WFH won't cut it. Maybe a few days a week or every other week if you need to a lot of alone work, but not all the time.
It's a terrible process for the users. And as we can see what did it get them, a third party logging into there webmail.

The service is protected with a username and password, didn't matter if it was IMAP or webmail.
As an aside, the silver color of the slippers was load-bearing, if we accept Littlefield's theory about Baum slipping some sly allegory into the story.

Interpreted this way, the yellow brick road is the gold standard, the silver shoes are the Silverite 16-to-1 exchange ratio of silver to gold, and Oz? Abbreviation for ounce.

Evidence that this was Baum's intention is... thin, but I've always liked it. For the curious: https://en.wikipedia.org/wiki/Political_interpretations_of_T...
Sounds like you have never worked at Amazon.
Why do all major companies act like this? Facebook, Google, PayPal, Stripe...

Is this being taught in some Ivy League module somewhere? I'm genuinely baffled.
Which makes the "CU" kind of ironic, because CUs haven't been used since Vega / GCN.

The new unit is "WGP", which are twice the size of a former CU. An RDNA 40-WGP will be sold as 80-CU. Presumably, AMD marketing felt that CUs stuck enough in the market that they should have a period where they sell WGPs but call them CUs on marketing material.
Google Fires 80 Employees for Exploiting User Data
> I find these comparisons extremely disrespectful to the memory of the Holocaust. The Third Reich systematically murdered millions of people.

I wasn't making a direct comparison, and instead of addressing what I said you got on a high horse about being offended. Disappointing.

> You have to scroll most of the way through the article to find the first mention of the fact that scientific studies by public health authorities in these countries have shown that the Chinese vaccines in question have high real-world effectiveness

This is a good example of what I consider to be maddening. You claim Vaccine disinfo by the NYTs. You point out that actually, Chinese vaccines are as good if not better than the other, worst performing vaccines (Russian, etc.). You do not compare them to the highest performing ones, I can only assume you've done this on purpose. Chinese vaccine makers specifically refuse to release their user data proving efficacy (unlike western vaccines that continually do so) so we are left to guess how effective they are. Some countries refuse to use them based on this alone (https://www.washingtonpost.com/world/asia_pacific/china-coro...) As to how effective they are? The evidence isn't good.

Several countries are seeking western booster shots when the initial Sinovac vaccines haven't proven effective enough:

Turkey: https://www.wsj.com/articles/turkey-offers-covid-19-booster-...

UAE: https://www.wsj.com/articles/u-a-e-giving-third-shot-of-sino...

Bahrain: https://www.wsj.com/articles/bahrain-facing-a-covid-surge-st...

Vietnam: https://www.channelnewsasia.com/commentary/commentary-vietna...

Chinese companies themselves: https://www.usnews.com/news/health-news/articles/2021-04-28/...

And scientists:

"But the director of the Chinese Center for Disease Control and Prevention, Gao Fu, said at a conference Saturday their efficacy rates needed improving.

“We will solve the issue that current vaccines don’t have very high protection rates,” Gao said in a presentation on Chinese COVID-19 vaccines and immunization strategies at a conference in the southwestern city of Chengdu. “It’s now under consideration whether we should use different vaccines from different technical lines for the immunization process.”

https://apnews.com/article/china-gao-fu-vaccines-offer-low-p...

I know you might be tempted to blame the messenger as most do and call all that "fake news", but the data is there.

This isn't the NYTs pushing this narrative, it is widely accepted that the Chinese vaccines lose a lot of their potency only a few months after they are given. China has all but shut down their country because they have no confidence their vaccines work against Delta.

https://www.nbcnews.com/news/world/china-high-alert-delta-va...

I'm thoroughly unimpressed by your only example of this claimed bias. Usually when I get into these discusses on Twitter it ends in XJ denialism, which i'm glad we aren't doing. But it's clear you have made up your mind which "side" you are on in all this. For my own curiosity, what is your connection to China? Does your livelihood depend on them in any way?
Probability wise, nearly doubling your entropy will significantly reduce the risk of a collision in your generated IDs, but there's lots of other considerations for you to make. But for the raw odds perspective, from https://en.wikipedia.org/wiki/Birthday_attack we can get a rough idea of collision chance. You can plug this into Wolfram Alpha [1][2] to play around with it.

For a one-in-a-million chance of having at least one collision, you'd need to generate 3.04e6 random 62-bit values or 3.26e15 random 122-bit values. For a one-in-a-thousand chance, those numbers would be 9.6e7 or 1.03e17 respectively.

In other words: If you're sustained allocating v7 IDs (with no sub-second portion of the timestamp) at a rate of 3.04 million per second, there's a 1-in-a-million chance each second of having at least one collision. Taking 1 - 0.999999^86400, that gives an 8.3% chance of at least one collision after a day, 45.4% after a week, and 92.5% after a month.

If you instead were allocating v4 IDs at the same rate for a month, you'd have allocated (3.04e6)×86400×30 IDs, and you'd have a probability of 5.84e-12 of at least one collision among all of those IDs.

[1] Collision probability given number of draws: https://www.wolframalpha.com/input/?i=n%3D3.04e6%2C+H%3D2%5E...

[2] Min number of draws to get a given collision probability: https://www.wolframalpha.com/input/?i=p%3D0.000001%2C+H%3D2%...

edit: If you are storing milliseconds in subsec_a and generating IDs at the same rate, you'd have 3040 ids per millisecond, which have a probability 1.00164e-12 of a collision in any given millisecond. Taking 1-(1-1.00164e-12)^(86400*1000) gives you a probability of 0.0087% of a collision in a day, 0.061% in a week, or 0.26% in a month. So as long as your event generation is relatively constant across that second, you will indeed have a much lower collision chance if you are using millisecond subdivisions. If you have even higher precision time or are using a sequence counter, that can be pushed down even further.