skysight-inc/HackerNews huggingface dataset:
> Farther north in Ontario, the heating season is way longer than the cooling one, so it does kind of make sense to optimize for heat retention. The other side is that having a roof which warms itself in winter is better for reducing snow accumulation.

So much wrong here. Asphalt shingles neither "retain heat" nor "warm themselves." You really do not want either property in a roof covering in a climate where it snows because that will cause the formation of ice dams. If you have snow on your roof, it obviously covers the black shingles - now you have a white roof anyway. If it is winter and you do not have snow on your roof, it is still not worth it - solar irradiance at 50° latitude (approximately Timmins, Ontario) is going to be about a factor of 7 less in January than in June. You are much better off with a white roof in northern Canada to reduce peak heat stress in the summer, which will continue to get worse and worse due to greenhouse gasses.
For Mac users, there is this: https://github.com/TimidRobot/mac-ssh-confirm

Doesn't add 2FA so much as it prompts you for each agent use.

On the remote end, you can enable 2FA for logging into the server with libpam-google-authenticator.
Yeah, hahaha that's where the eye rolling comes in. When I first read the book I was working at a different company and recommended it pretty broadly as a set of principles that would help us in dealing with a specific frustrating customer and another organization that they had partnered with.

To their credit, I believe the entire C-suite did actually read/listen to the book after I recommended it. And talked the talk quite a bit, but continued things exactly how they had been before.
Hah, Turmoil! That was a pretty good Atari 2600 game.

And as far as I know not a very well-known one. Someone gave me that cartridge as a gift, and I never knew anyone else who had it.
I think most people would say colonialism did a poor job of explaining safety at least. Instead it was often powered by racism and subjugation. We do desperately need to find a way to help countries develop, but on the balance colonialism doesn’t seem to be it
I thought it was made so they could offer “unlimited” coffee but making it so hot increased the drinking time so customers were far away before finishing?
Colonialism certainly liked to think it was "civilizing the savages" but that was far from its true intended purpose or effect.
New findings in SARS-CoV-2 origin
On passing environment variables instead of the full request, probably to make it more accessible to get started with the existing popular languages (C, Perl, Tcl, Shell Scripts, mostly) without having to write all the request parsing. There was also less "stuff" in the request than today. No cookies, no file uploads, and so on. They also passed things in that weren't in the request itself, like REMOTE_ADDR, REMOTE_HOST, SERVER_PORT, PATH_INFO and so on. So it seemed natural to just put everything in environment variables, other than the $CONTENT_LENGTH bytes that followed the header.

As for the fork() per request, I believe mostly because they were starting with requirements where avoiding fork() wasn't important. Conserving memory was probably more important, given the timeframe. CGI programs that leaked memory would have been common if they were daemons. For most web servers, there also probably weren't that many requests.

It was also a common existing pattern. Many of the services on unix boxes worked the same way...one daemon (inetd) would start instances of daemons per request and they would serve only one request.

That said, NSAPI appeared pretty quickly after CGI, then FastCGI, etc. Still pushing environment variables for headers, but stopping the request->fork->exit pattern and allowing persistent daemons.
> AMT workers use VPNs to work around geographical restrictions

Interesting. When I go to login to Amazon with a VPN it puts me in a CAPTCHA loop and never lets me access my account. I have to login with a residential IP address to access my account.
The vast majority of public housing in Singapore is owned, not rented. However, government policy is that subsidized flats are only available to married couples, and thanks to colonial-era British laws still in force, in Singapore that means only a man and woman.
Lip-reading has been extremely difficult in the last 18 months.
This, frankly, seems ridiculous.

A common complaint is that it is too difficult to have career growth without changing companies and that promotions and raises are difficult to come by because companies don't care about developing their people. What you are saying now is that it is also bad if a company promotes people from within, since it encourages people to leave. Both options (never promote / encourage growth) can't be wrong.

IMO, this is not the way it works at any reasonable place. I've had zero engineers under me leave over the last four years and I attribute that in large part to me being able to meet their career growth goals within my team.
I don't have to pay $15/month.
How to Deploy a Rust REST API on AWS with Ease
As AMT’s largest requester, we have longitudinal (~3yr) worker quality data for over 85% of respondents. Feel free to DM for details
Idris 2 version 0.5.0 Released
> 3. Only forward your agent connection to machines you trust.

You can get the convenience of agent forwarding without the negatives by using openssh's ProxyJump (or, in old versions ProxyCommand). Either allows you to transparently forward your ssh connection via another host (or chain of hosts).
> an illusion of automation meant to fool others

They even say it on the site: 'Artificial Artificial Intelligence'
Looks like a useful tool, thanks for sharing!
I like that it inspired Krita. Those folks really seem to be listening to users; working hard to build highly demanded features without navel-gazing or bike-shedding.

For those who haven't seen it before, check https://krita.org/en/ out!
you'll probably never get hired anywhere again

How is that? I would hire them. Maybe the people who won't hire someone who spoke out against an employer are not the ones worth working for.
> How can they be avoided without stopping the use of CI/CD?

Use separate systems for CI and CD, and don't put sensitive "keys to the kingdom" credentials in CI. For example:

Put CI in GitHub Actions or GitLab CI without any credentials to write artifacts or knowledge of stage/prod deployments. Let the "interns" in the threat model use this.

Put production CD/release in Jenkins or a similar self hosted, not publicly accessible system. Limit the folks who can trigger jobs in this system to a small group of trusted employees, and don't trigger runs on actions that don't require U2F auth (e.g. require a manual click through the webui protected by SSO, or only deploy from specific branches protected to only allow approved PRs -- no git client pushes).

> I assume it is the same with GitLab?

Yes. While GitLab does offer some secret and variable masking controls, the Travis disclosure earlier this week where all secrets were exposed to Pull Request CI shows you probably don't want to bet your business on those controls. (Acknowledging GitLab != Travis)

See https://travis-ci.community/t/security-bulletin/12081
Broken Escalator Phenomenon
LA has a very extensive system, it's just slow.
I tried gimp, and still use it sometimes, but switched to affinity photo mostly because the smart select tool was so much better, and the Ux was a lot smoother. Faster too. They are basically the same program in a lot of ways and if I’m on Linux (I dual boot) I do use gimp sometimes still. You will spend some time on YouTube trying to figure out how to do things but there are a lot of good short videos to get you moving

On a related note, I used kdenlive (video editing) the other day and it was a really good experience, smoother and faster than a paid editor I used to use
Golden Artist Colors – Heavy Body Acrylics
TLDR

But for teflon to passively cool, it would have to be strongly absorbent in the IR.

The way it works is this: the sun’s rays are at 5500 K. So you pick the set of materials that reflect light in the visible gap (the atmosphere takes care of the rest).

This keeps the material from getting heat.

Then, from this set, you pick a material that is strongly absorbent in IR.

If it absorbs in IR, itll emit there too, there y cooling itself
Hi HN!

Setting CD pipelines for serverless functions and figuring out how to compile them and all of that work, just to get some code executed securely is tiresome. So, I developed Merebase as a solution to this problem. It's one JavaScript function that you can call in your front-end application and it handles the whole deployment process on our servers.

The security side is handled by giving users two keys, a private one and a public one. Functions are only compiled using the private key and can be executed safely in production using the public key. This ensures that no one will deploy malicious functions on your behalf. Furthermore, you can limit code execution to certain hosts.

You can also set environment variables through the dashboard, which are then loaded into your deployed functions. This means that you can access your database or any secured endpoints without having to set up a server.

I decided to keep Merebase in beta in order to tackle any security issues and freely change the API without disturbing users. Currently, it only supports Node.js with plans to add Go and Python.

What do you think? Are there any concerns that I need to address? Are there any features you'd want to see added before the public release?
also people who have families will never lose jobs and have to take minimum wage jobs, or condoms fail, or anything else inconvenient, so everybody better plan their lives well, because good planning keeps accidents from happening. Just look at any software development project!
I had forgotten about "wallah"! What an abomination.
That's another fun conversation of governance, rights and nation building.

Which, ironically has plagued South America for quite a while - The reason Colombia and Venezuela have similar flags is they had the same wars and fight for freedom. They freed themselves from Spain and then became the institutions we know today. Corrupt, semi corrupt nation states, not on a national level but influence can be bought.

Africa no idea, but that's the thing, was it fully rejection?

Not every country can be the United States in terms of fighting for freedom, gaining independence and being successful. You can still go into many parts of New England and see lots of British influence.

Also Florida, and see much Spanish influence.

It isn't as much as "export" but building, having a plan and the problem then (and possibly event today) is that the people who are successful, ethical, moral and such are living comfortable lives.

Prisoners were most of the people that were on the Spanish ships that sailed to Venezuela and Colombia and built much of that, alongside prisoners were political refugees such as Jewish people and people who were destitute. Religious political refugees too, bad enough stuff but not exactly criminal.

You can kinda align it today with the people who are ground on troops with USA in AFghanistan, where we exported our way of life for 20 years.

Overnight, erased. The people there didn't want it, we didn't leave anyone part of the military behind and whomever had some influence slid into power or fled for their life.

--

I don't even know where to begin w/ Africa, I'm not up to date on their History or such besides some/much used to belong to the French.
I think it's called a FBC (Full blood count) in the UK, at least that's what my GP app on the phone says. I had one done in relation to some issues that I was complaining about to my GP, the results all came back normal luckily and had the following:

Haemoglobin estimation, Total white cell count, Platelet count, Haematocrit, RBC, MCV, MCH, MCHC, Neotruphil/Lymphocyte/Monocyte/Eosinophil/Basophil count, Nucleated red blood count
Additionally, there also might be one or two ladder climbers in the lead's org who considered themselves "sure thing" for that lead promotion. They did not get it because you promoted someone else. They will be disillusioned and are very likely to be gone within a year. An unfortunate, but natural consequence of the fact that there are always fewer opportunities to lead than there are people looking to grow. Make sure you can handle losing the overachievers who finished in 2nd place.
This looks like CGI on WebAssembly. Do the wagi scripts have to be spawned upon every request, or can the somehow persist in memory?
Humans are inherently evil tribalistic creatures.
Someone will correct me, hopefully, if I'm wrong:

Rebase means moving the branch point of your feature branch to later on the main branch.

Let's say you create feature branch foo from main on 2021-08-01. You do work. Others do work and add them to main. On 2021-09-18, you rebase foo onto main. This has the effect of re-writing history! There's no longer a branch point at 08-01, it's been moved to 09-18.

https://www.atlassian.com/git/tutorials/merging-vs-rebasing

Rebase is not always the best option. I personally prefer merging, and that has worked for 100% of situations I've found myself in so far in my DevOps career.
a clever friend once said it this way, while I was complaining about the GIMP interface. He said "Adobe spent years refining the small details of Photoshop, and GIMP must not copy PS, so therefore all the GIMP interface parts will feel terrible, by default"

of course this is humorous oversimplification, but I can't help but think of it every time I really, really need a general editor, open GIMP and immediately start cursing over ordinary thing.

source: I wrote the third color paint app for the Mac II thirty years ago while a contractor at Apple Inc.
Even with more pay, there aren’t any real repercussions for doing bad work. Sure there are different “tiers” of turkers, but realistically anyone could recreate their account once their rating gets low enough.
That is hindsight value.
You can't really compare rates of death by suicide across countries.

> Of the 183 WHO Member States for which estimates were made for 2000-2019, just over 60 had high-quality vital registration data. Modelling methods were required to generate estimates for the majority of remaining countries, which were mostly low- and middle-income. [Suicide worldwide in 2019: global health estimates. Geneva: World Health Organization; 2021. Licence: CC BY-NC-SA 3.0]

The best you can do is (cautiously) use the WHO data.

Page 9, figure 8, seems to show high rates of death by suicide in Africa. https://www.who.int/publications/i/item/9789240026643
I'm so sick of this quote. Yes, there is unethical behavior, but there is unethical behavior in all practices. It's not the consumption that is ethical/unethical, it is the person doing the consuming and/or selling.
Click on the time stamp if you want to read a particular downvoted comment. (On technical threads, it’s rarely useful; on political/social threads, much more commonly used.)
Not sure I follow. A reasonable framework would stream both the incoming request as well as the response. If the WASM module wants to read the whole thing into memory, it's free to do so, but you could have it process the request piecemeal. It's just reading the request from a file descriptor and writing the response to another one. Not that different when those fds are actually sockets.
No - Norway hasnt been treated like Nigeria, Venezuela, Azerbaijan and Libya because Norway is a white western country. Thus, neither the US/UK/France nor others will topple democratic regimes in Norway to get at the resources.

Nigeria, Venezuela, Azerbaijan and Libya on the other hand are "expendable" nations where western powers clear the slate and build as they like. Usually in the name of Democracy, but really in the name of money.

A perfect example is Iraq -- the US installed Saddam Hussein, then armed him, let me rule the country to despair, then the US spent two decades removing him and re-destroying the country. All the while, cheap to free oil was extracted from the nation for the benefit of western powers.
https://en.wikipedia.org/wiki/Oil-for-Food_Programme

Nigeria, Venezuela, Azerbaijan and Libya are corrupt because the US/UK/others install corrupt regimes and topple democratic ones.
I would argue at least better than those before and after...
> Does WebAssembly even make sense as a standalone runtime, like the JVM? Is "server-side WebAssembly" going to be "a thing", or is it just a compatibility kludge?

Yes, see: https://bytecodealliance.org/articles/1-year-update

> Or would it be better to compile things directly to WebAssembly?

It'd be even better to roll out one's own Lambda@Edge: https://krustlet.dev/
Embedding Design into the Fiber of Fintech
>and thanks to colonial-era British laws still in force

These laws could easily be repealed. The root cause of the problem is that Singapore is still a pretty homophobic society. (Also, did Singapore have same sex marriage before British Colonial rule?)
Can you explain how wealth status of renters affects the competence of corporate landlords?

FWIW, I've also had nothing but good experiences in corporate-owned/managed housing.
Anyone here had their telomeres counted?

Apparently it's the most accurate indication of how long you will live:

https://outline.com/Ex2Z2R
My poor attempt at making a joke about the benignness of the opinion compared to the other things being discussed in the thread. Being german and having drunk a couple of beers probably didn't help.
>While there are far more videos uploaded that say the Earth is flat than those that say it’s round, on average, flat earth videos get far fewer views.

what a sentence
Algeria and Guinea rejected it.
May be if granted a buffer zone of influence, Russia will be a reliable partner to Europe. To me it is Europe (and the US) that is picking ideological battlegrounds, and showing eagerness to start a new cold war.
How do you deal with respondents who just created their account?
I'm continually impressed at how many uses fzf has. Yet I still feel like we're only scratching the surface of its utility.
> We do desperately need to find a way to help countries develop.

Hold our currencies.
Data Encryption Through Kafka
CrowdFlower / Figure Eight is now part of Appen FYI
4. Replace your Android device with an iPhone.
> Its relatively obscure

I don’t agree. Maybe it’s because you got it in the late 80s, and by then it was under powered and there were so many other choices like inexpensive IBM PC clones. In the early / mid 80s, it was definitely popular where I lived… and it was inexpensive compared to things like the Apple 2e. I had two friends with TI 99/4a units.
> What these donations through GNOME still cannot do is funding paid development, so if that’s what you want, please fund the developers directly as explained above. GIMP project obviously welcomes the 2 types of donation, for community needs through GNOME and for paid development through the 2 crowdfundings listed.

Well, that's confusing. It's unfortunate they were unable to work out an agreement with the GNOME foundation for donations. https://krita.org/en/support-us/donations/ or https://fund.krita.org/ looks way more straightforward.
I could accept this if there was clear test. Take a speech considered hate speech, substitute any words describing single group with those of others. If it is still considered hate speech give out punishment.
I think that this movie showed, besides showing the germans as barbaric/unloyal (they rescue a german pilot that ends stabbing one of them) missed a lot of what made WWI, WWI. The images are beautiful but WWI seems to only provide a backdrop for a save-private-ryan story.
I recommend the not very well known Kubrick's Paths of Glory (with Kirk Douglas!) instead
Borb is pure python.
MuPDF is C with bindings.
Reportlab is pure python.

I use reportlab combined with PyPDF2 and pdf-redactor. It would be nice to see a comparison with the existing tools.
“Not Exactly”
I've seen several systems that wrap the ssh binary to allow different agents to be forwarded to different hosts. Personally I think this is unwieldy -- it really should be something which is built into ssh directly.

Running multiple agents is also a bit ugly, especially if you are trying to consolidate your keys with an agent integrated with your desktop environment, which I think is the most common use case.

FWIW my proposal for fixing it is https://github.com/openssh/openssh-portable/pull/233 but it isn't the most elegant solution either I guess. It doesn't seem to have picked up much interest so I don't think it's likely to ever be merged (at least in its current form) which is fine. Hopefully some tamed version of agent forwarding appears directly in openssh someday, either as a simple key filter or something more complicated like guardian-agent
Congrats Brad & team!

I've had a ton of fun participating in prior tournaments, and I look forward to seeing where you guys take it moving forward!
It's not good. It's better than awful. What a horrible way to decide how to structure society. Landlords are parasites that expect their tenants to pay >100% of their mortgage costs every month or they'll be heartlessly ejected into the street.
Ask HN: How did Dagger transition from Square to Google?
Curious about the details but can't find them anywhere. E.g. did the authors worked at Square and then Google hired the whole team or ... ?
I meant more than just criminal prosecution. For example, federal gun control checks are prohibited from being automated and there’s a fixed time limit the FBI needs to respond within or the gun can be sold. Effectively this neuters federal background checks. Similarly, there’s ways of skirting even that trivial thing through private sale and firearm shows.

The entire system is a farce and I’m surprised there’s anyone who thinks it’s not. I would have though pro gun advocates would at least know enough to acknowledge the Swiss cheese nature of the systems in place around gun ownership in America.
If we are talking commercialization, then DoE awarded more than $1 BN to NuScale to develop small modular nuclear reactors [1] . They could go live sometime this decade.

This thorium experimental reactor in China, is just that, an experimental one. If everything goes well, they'll have a commercial version in 2030, but it's way to early to estimate how likely this is.

[1] https://www.forbes.com/sites/arielcohen/2020/10/29/the-futur...
I don't know. Large automatically routing network is pretty good and useful thing... It just became horrible idea...
Hm. This is a US-centric website discussing a piece of news from Berlin. Which country are you speaking about?
From man ssh-add:

-c Indicates that added identities should be subject to confirmation be‐
fore being used for authentication. Confirmation is performed by
ssh-askpass(1). Successful confirmation is signaled by a zero exit
status from ssh-askpass(1), rather than text entered into the re‐
quester.

I'm a bit surprised that this is not mention in the article, as this seems very useful to make exploits more difficult.
> I don't know how it holds up to weather, though.

It does very well. The main terminal of Denver International Airport has an enormous PTFE-coated fiberglass fabric roof. It's decades old now and has weathered hail, high winds, and Colorado sun without any significant wear that I know of.

EDIT:

The same product has since been used in a bunch of other stadiums and other large structures, including the Georgia Dome where it survived a near-miss by a tornado with only minor tears:

https://spinoff.nasa.gov/Spinoff2009/ip_2.html

> "The material is pound-for-pound stronger than steel while weighing less than 5 ounces per square foot. It offers up to 24 percent solar translucency while providing as much as 75 percent solar reflectance"
Cooling in the UK – government research into one impact of climate change [pdf]