skysight-inc/HackerNews huggingface dataset:
Now the units for almost all physical quantities (the few exceptions are those that are not dependent on time, length or force, e.g. angles and amount of substance) are derived from the unit of frequency.

The frequency of an atomic clock with cesium has a conventional value, and the units for the other physical quantities, e.g. length, force, voltage, electrical current, temperature and so on are derived from the unit of frequency by conversion factors that are functions of various universal constants, all of which have conventional values chosen so that the units derived in this way are approximately equal with the units that have been used in the past.
Don’t sweat it. We used to have to go to the library or book shop to do that and buy CDs which was a pain in the ass and expensive.

I’d rather be an internet addict than go back to those days.
WebAuthn
Crime, corruption, and interference: China’s CCP confluence in PC Canada
Strict Tables
I'm still waiting for password managers to add soft-WebAuthn support, so I can log in using my password manager (and no physical keys or passwords). That would make password managers ten times better.

Then again, it doesn't have to be the password manager that does this, but it'd be nice if it were integrated.
I would appreciate any comments that explain what is wrong with my definition or the comment as a whole. I do not find this downvoting without any form of discussion to be of substance, nor facilitate any discussion, it achieves nothing except leave the author perplexed but without a way of reconciling it, except by assuming that people dislike hearing what they don't want to hear, that is, that human brains are nothing, but heuristic based computational units with lazy evaluation.

Grand parent comment claimed that believing algorithms (and computers) can perform better than humans is hubris, I claim that believing humans are special, is hubris.
The technologies that could transform ageing
I don't know why the downvote, but I talk from experience. I was hired this way (chat in a coffee shop), and I never required it when I was hiring...
>Of course there are degrees.

that you don't give to sex work because "you just don't know".

We never know, but odds are the best way to know is by encouraging workers to report abuse. Something the tech industry has institutionally failed upon over the deacdes to do despite being shown as "honest, intellectual work".

>if you found out your favorite anime or Pixar movie was animated by slaves

There are degrees, apparently.

But for the sake of reducto ad absurdum: If there was an entire sweatshop of talented slave labor making Toy Story, I'd be impressed first, and then mortified. But I guess my brain just ticks differently in that regard. Maybe I've just seen/heard enough evil that these "revelations" are surprising but not taking me completely off guard.
I understand that there are still some pain points for casual users. I first started using Linux on a daily basis in university in the mid 2000s. Back then, even distributions designed for casual users like Ubuntu had problems with everyday tasks like configuring multiple monitors. These days, I don't see any of those problems. I'm pretty confident I could give my parents a computer with Ubuntu 20 on it and they could probably figure out how to do their everyday tasks without any issues.
It's not like this is some kind of new or unfamiliar experience. Many programmers had to deal with something like that in Java or C#, back when they didn't have generics. There's a reason why both got them eventually.
Volcanoes could cool Earth more in a warming world
Going back to work? No, thank you
Deet? Tiger mosquitoes in my home region don't care about it, I sprayed heavily my shoes and legs with Deet based repellent and within 5min, I had these fuckers trying to bite through my shoes! And I could see them feeding on mint flowers as well.
The FIDO2 key is usually protected by a PIN that wipes the key after a few wrong attempts, so it combines the two itself.

Besides, there's nothing that dictates how secure the key should be. You could use your hardware cryptocurrency wallet for this, which is probably much more secure and convenient than the average Yubikey (you can duplicate it with the seed phrase).
I have worked at more than one place where shooting the c-suite would have dramatically improved the company :-)
By the same token, functions in general are second-order things - you can build things just fine with GOTO, and plenty of real-world software was built like that back in the day. But we don't do that anymore.
You might be surprised just how fast 80ms really is. Again I'm not saying this shouldn't be addressed if it's causing noticeable issues but labeling it as a bug just seems strange to me (but that label wouldn't change the priority for me by itself)
I'm all for citing software. I still don't understand the guidelines for who to list as an author, though. In modern open source projects, you're going to have a very long tail of drive-by contributors. Some of these might not even touch the software itself, but merely fix a typo in the README or similar. Should the citation list all of these? As for myself, I'm very much in favour of crediting anyone for any contribution, no matter how small, but standard scientific practice is more exclusive. And what about names? When I look at the author list that Zenodo generates for my own main project [0], it's not only very long, but contains lots of online pseudonyms and even a few duplicates, due to differences in spelling or inclusion of middle names and such. My background is in the hacker community, so I think this is great, but I don't think a journal editor would agree.

I could manually curate a list of the "main authors", which would be much smaller, but I'm not particularly enthusiastic about being the arbiter of when someone's contributions are major enough to become a "main author".

[0]: https://zenodo.org/record/5062209
Literally any other website. Even a Youtube comment would be easier to read.

But Twitter gets you views, so we're stuck with this.
For 0.5%-1% C++ is a powerful tool which allows to quickly (thanks to rich abstractions) to write high-performance code.

For merge mortals it is a tool hard not to misuse full of hidden traps and debugging of code written even by the very best developers (surprise - it has bugs too) is a challenge.

Go just did a step towards C++, even if a tiny one.
(a) I didn't downvote you.

(b) setInterval and setTimeout fire off the same event loop; they can only occur at the same fixed times. Why do you think one is more reliable? Just repeating that it's the case doesn't convey any information.

(c) I've written various schedulers; the most recent one is `micro-game-shell` on github if you're interested.
Super Mario 64 16 Star World Records
Alright I guess we will just have to agree to disagree. For me, if an action takes slightly longer than it could take but isn't significantly impacting UX then I don't personally think of that as a bug. Maybe I just don't understand the impact this particular issue had
Zig is probably a better comparison for this:

https://ziglang.org/documentation/master/#Errors
Whenever I see a "how-but-not-why" article I assume that the author doesn't understand the "why" part yet... they've likely just rote-learned the "how" part and are regurgitating it.

My favorite articles are where they only explain the "why" and largely leave the "how" as an exercise for the reader!
That's simply not true, in nominal terms income has increased quite substantially. In real terms they haven't climbed much, but then you're comparing a home price increase to an income that's already been adjusted for prices, that makes no sense.

To understand if housing became more affordable you'd have to look at nominal income levels versus nominal housing costs.

Look at median income for example here: https://fred.stlouisfed.org/series/MEHOINUSA646N

That's a 50% increase since 2008. It's not the top 1%, it's not an average where the high-earners jack up the average. It's a median, the middle-earning person in the US, now earning 50% more yearly than 2008. Combined with much lower interest rates and consistently bigger homes, housing is much more affordable compared to then.
I'm a very privacy conscious Linux user. I'm not doing anything illegal, so I have no active concern about security. I'm not unrealistic. When it comes to my threat profiling, I don't expect my desktop to withstand attack by alphabet-soup US federal agencies. I just want to know that I have complete ownership of my hardware, and my data. I'm satisfied just knowing that a shadowy company like Google, or Apple, is not profiling me. If someone was going to be concerned with security from the government, Linux is still much more preferable than Windows, Android, or MacOS.
Typing "google.com" in my url bar is way easier than typing "https://google". And typing just "google" results in a DDG search.
> There needs to be a modern language that looks friendly, is compatible with shell, and is apart of the shells environment.

Julia: https://docs.julialang.org/en/v1/manual/running-external-pro...

julia> prefixer(prefix, sleep) = `perl -nle '$|=1; print "'$prefix' ", $_; sleep '$sleep';'`;

julia> run(pipeline(`perl -le '$|=1; for(0..5){ print; sleep 1 }'`, prefixer("A",2) & prefixer("B",2)));

B 0

A 1

B 2

A 3

B 4

A 5
This seems somewhat strange to me (and I don't just mean hard on the eyes):

func (o Option[T]) Unwrap() T

How does Go know that T is a type parameter here, and not a concrete type named T?
I think many of the points in the article apply to academic papers as well!
So what mitigations are "fanciful junk" exactly, and was that actually known before or just poo-poo'd the way basically everything the openbsd folks introduce is?
At least according to the original link, GMail follows the link when a user views an email. That sounds like tracking gold to me.

As to masking your IP when you actually click on the link. How could that possibly work? Your IP is still definitely making its way to the tracking server upon clicking the link. There would be no mechanism for GMail to prevent that unless it rewrote the links to point at its caching server, which would pretty much break GMail.

Sure, pre-fetching would create a bit of noise because your IP would be mixed in with the Google IPs, but as you've quite rightly noted, filtering out clicks from AS15169 would eliminate that noise.
Society is always a factor, but not the focus on this specific site making a specific action on a specific date.

We could literally spend our entire lifetimes arguing about sex and society's view on it over history. This twitter thread was already annoying enough to read without that context.
You won’t believe this is photoshopped
This isn't correct, it's not the only way. A Facebook vulnerability is less valuable than a browser 0-day and could similarly leak credentials.

In fact, Facebook has had numerous authentication blunders in the past. [1] One of them was a zero-click mechanism very recently. [2]

Facebook's security team is a joke, or worse -- they're muzzled by product teams and forced to do their bidding. [3]

[1] https://threatpost.com/facebook-patches-oauth-authentication...

[2] https://about.fb.com/news/2018/09/security-update/

[3] https://appleinsider.com/articles/21/04/22/facebook-dangerou...
One of my favorite bad analogies is mixins. I came up with this Mixin FAQ to satirize how mixins are often explained.

Mixin FAQ

Q: What is a mixin?

A: Mixin allows to inject functionality into classes. Mixins first appeared in the Flawors system and were inspired by an ice cream shop offering a basic flavor of ice cream (vanilla, chocolate, etc.) with a choice of optional "mix-in" ingredients like nuts, cookies, candies, etc.

Q: Can I mix-in a ServerSocket into a ColorPicker?

A: Yes, why not.

Q: How will it work?

A: Like ice cream with cookies.
How to Start Bug Bounty Hunting
Writing Portable Rendering Code with Nvrhi
That hasn't been a trivial option for a while, userland W^X (DEP) was implemented across the board >15 years ago.

TFA seems to be confused about what Apple did with the M1, macOS has had W^X enabled across the board (for userland) on all supported 64b architectures since 10.5 (10.4 only had stack W^X).
Can ‘smart thinking’ books give you the edge?
It’s almost like HN is not a single person
Great idea, maybe experiment with these pathogens in a lab? I'm sure China would offer its assistance.
Not me. More energy less overconsumption. Free balance
Thanks for sharing that story about CP Ellis, it's nice to know people can change.
Predict weather and issue an AR warning where to seek shelter from nearby tornado and a passing heat dome, all sponsored by your telecom and facilitated by facebook, of course.
Is this still true?

I know it certainly was several years ago, and the problem was magnified by every video sharing site using it in their ingestion and transcoding pipelines. It's a single, incredibly powerful and versatile tool, to the point where it's often easier[ß] to fiddle around with command line parameters than to hit the underlying libraries directly.

And by design, in that kind of setup ffmpeg is processing vast quantities of untrusted inputs, coming in at all possible (and some impossible) combinations of video formats, container formats, invalid segment headers, bitstream corruptions and whatever else you can think of. If my memory serves me right, when M. Zalewski first joined Google, he worked on YouTube's video processing ... and to make their engine more robust, started to fuzz ffmpeg. I've heard people describe the result as if shaking a plum tree.

As a result of all these years of hardening, these days ffmpeg should be reasonably robust against malicious inputs. Now, if anyone is generating command lines for it and passing anything from user input to that - well, that's an open invitation to abuse.

ß: subjective, of course. But I've tried to look at using the libraries for something fairly straightforward and every single time it's been much more effective use of my time to just look up what the necessary ffmpeg CLI flags+arguments were.
I mean, I'm sure half of us have stupid actions at 18 that we regret.

I wouldn't necessarily want to make those things illegal/more regulated tho. As I've seen and experienced, that doesn't stop 18 year olds from being stupid. It may even enbolden some.
I feel like "self control" isn't a helpful framework to describe what is happening.

It seems like technology is just exploiting instinctive ways we interact with the world and learn.

This matters because it is not an individual problem of low will power etc. We will understand that the way the internet and social media interact with people just fundamentally creates false connections and impressions and generally confuses our unconscious mind.
> children are apparently filling up ICUs

They are??
Swedish gov’t pays out $1.5M in Bitcoin to convicted drug dealer
It's not just about performance, or really not so much about performance - e.g. when Java added generics, they didn't make it any faster than it used to be when you had to use Object everywhere.

It's about type safety - i.e. catching bugs earlier and more reliably. Every time you have to write an explicit downcast, you are throwing away the benefits of using a statically typed language in the first place. Which is fine, but then why stop halfway, and not just go full dynamic? It doesn't really make sense to have strong typing for scalars but not for collections.
> The key to readability is programming with readability in mind

Imo Golang buried that theory. I’ve read a lot of Golang code and it’s always been the clearest and most readable code I’ve read.
Normally no. But it’s based on the exact same company that OP made the assertion based on. And the relevant bit is this - I actually used the process, they didn’t. They were sharing conjecture, I was sharing experience.
With work from home you don't need a facial expression at all. Just close your Jira tickets quick enough, and surveillance software will ensure you are not doing anything funny in your working hours.
Corp trip, so please refund
pkg.go.dev is a pretty horrible name. It shouldn't have two dots. It is hard to remember the order of the words initially (I had forgotten after the summer vacation), and you shouldn't use vanity domain names.

Short, clear and boring names work best. godoc.org was descriptive, clear, short, and easy to remember. It was totally unnecessary to ditch it. The new name adds no value to the user and complicates something that didn't need complicating.
> It's about time to say goodbye to the illusion that we're ever going to extinguish this fire.

That's a mischaracterisation of the above. Endemic at low levels is not the same as raging pandemic. Yes, the raging fire does actually have to be damped down to low levels before we can adjust and implement next steps after that.

But measures that are necessary during a pandemic are not the same as those necessary when a disease is endemic.
Better idea, don't use Heroku, nothing but an extremely expensive shell over AWS, in essence.
The evolutionary process is the same...

1) A population of virus or biotics has genetic diversity and mutations through generations when reproducing.

2) Some pressure is put on its survival (antibiotics, vaccines).

3) Those in the population that survive better (with the new pressure introduced) proliferate more than those in the population that didn't survive or thrive as much.

4) You end up with a population more resistant or immune to the chosen selective pressure initially used on it.
>There's no known way at present to regulate sex work in a way that keeps traffickers from coercing their victims to work for their benefit. Many countries outside the U.S. have tried and failed to do this

yes, much like many other modern companies and how they abuse workers, or turn a blind eye to abuse.

I'd rather be able to report my company to some labor board and get them sued than render my work illegal and have me arrested for snitching on myself.
Java didn't have user-defined generics, but it did have parametrized builtin types: arrays. Same thing for C#.
What special access to the divine do you think you have that would encourage you to report as facts the last two sentences (which are actually quite false)? You are confusing your internal inferences with what is actually going on -- and to the extent that you feel you can tell others.

If you are trying to bluff your way through -- to appear knowledgeable when you aren't and can't be -- this is a behavioral syndrome that will not serve you at all well overall.
> i cant stop thinking about the tesla bot. was he he outright lying?

Elon is jealous of Boston Dynamics.

Boston Dynamics released an impressive video this week [1], which took the spotlight away from Tesla.

[1] https://youtu.be/tF4DML7FIWk
Orlando urges residents to conserve water because of surge in hospitalizations
Don’t Let Power Corrupt You
The second question has been extensively answered by numerous mainstream languages adopting generics in the past, oh, 30 years or so?
I think its a rather stupid concept to claim there is such a thing as internet addiction, because otherwise we would have to roll back time and ask equally stupid questions such as :

- Is there such a thing as library addiction ?
- Is there such a thing as school / university addiction ?
- Is there such a thing as newspaper/book reading addiction ?
- Is there such a thing as chess club addiction ?

Because as we all know, you can do the above and more on the internet.

The internet, just like your personal life, is what you make of it. Its a fabulous resource.
Giraffes deal with sky-high blood pressure
X.509 has a feature called constraints, where you say e.g. "This is a CA but it must only issue for names under .foo.example" or "This is a CA but it can only issue for S/MIME" and to make these effective you set a bitflag that means "If you are parsing this certificate and you don't understand this part, the certificate is invalid for you".

The consequence of that second element is that clients which don't understand the constraint (and thus wouldn't know which are or are not trustworthy leafs under the constrained intermediate) mustn't trust the intermediate at all. This means if you need those clients you cannot use the constraints they don't understand, because they'll reject your entire intermediate.

Mozilla defines constrained as it pertains to the problems they care about, so for example they do not consider a CA constrained if it lacks a constraint they require.

For your use-case there are two practical options:

1. Most suitable for commercial projects e.g. you're a startup selling a new IoT device. Talk to a commercial CA and work out a deal where you get what you need. Outfits like Sectigo strike deals like this all the time. They understand that you don't want to pay high prices per certificate for this problem, but on the other hand you may be able to guarantee minimum volume and that means it makes commercial sense compared to piecemeal orders.

2. For a hobby project talk to Let's Encrypt about getting an exemption to the rate limit for your specific application, or, if it fact the devices are owned by third parties, whether this should be on the Public Suffix List and thus exempt from rate limits anyway. (the PSL also means these devices can't share HTTP cookies among each other, which might well be exactly what you wanted anyway).
If you don't believe AWS's attestations about their security encryption and customer isolation and the associated certifications, then agreed, you shouldn't be sharing your data.

That restricts you to your own infrastructure then. There are tradeoffs in both directions.
Pedestrians are lighting homes in Sierra Leone
Phone battery creates striking alien landscapes
Hackers infect DailyNK website with malware to spy on readers
Hi, co-lead of the CFF project here.

One advantage I see is semantics, and that it's single-purpose. Downstream clients (archives, indexers, GitHub citation feature, etc.) know exactly what they're dealing with (citation information for software or datasets). Also has better support for software-related fields than BibTeX for example (@software being an alias for @misc).
well, yes. That's all businesses. If the costs exceed the expected revenue, then you either eat the loss or reduce the (potential) operating costs.

There isn't many (moral) ways to allow for reviewing every submission manually while also getting content published in a timely matter. Not for a site this size.
That is an important point. My mind too went in the direction of "this is just white people hiding their privilege in an offshore account." But then I realized that I hardly know any black people.
Thanks for this. Admittedly my tone was somewhat hyperbolistic, but you bring up an excellent point that I'd like to build off:

It pains me to think there's large bodies of deep academic research in the social sciences that could guide certain tech platforms in a much more responsible direction. Instead, the drive for market domination and profit ensures that a mangled society is left in their wake (ironically, economics is also a social science).

The hubris certain tech leaders have in making the decisions they do astounds me. Virtually every major tech platform has the money to have a veritable army of social scientists pondering the ethics of anything that company does with its platform. Certainly some of these companies do employ ethicists, though I can't help but feel more often than not it's a dog and pony show.
although in that case agtc is the obvious choice
Now including GitHub, that gives you BibTeX generated from CFF files :).
Do you feel compelled to go to the library or to the chess club as you are talking to a friend?

I am sure the vast majority of people don’t, while so many people feel completed to check something on the Internet.

Do you feel uncomfortable if you know in advance you won’t be able to use the library or the chess club for a whole day?
Thoughtworks Files Registration Statement for Proposed Initial Public Offering