skysight-inc/HackerNews huggingface dataset:
I use code reviews in interviews for a similar reason.

If they're not able to critique the code and explain what it's doing, why it's changing, and what a better option might be they're going to struggle working in our environment where code reviews are emphasized as a huge part of the SDLC and not just the rubber stamp at the end.
I know you weren't saying this at all but that first sentence is dangerously close to "we've reached a permanently high plateau".

https://en.wikipedia.org/wiki/Irving_Fisher
I've been a reader of this gemlog and a fan of Gemini, I have been looking at minimal featured Gemini servers (everyone seems to be building one) and looking for one specifically that offers an http mirror, text and maybe inline images only. Particularly I'd like to do everything in markdown, does anyone know of a good one?
But why do you have to curry to inject your dependencies? Dependency injection is satisfied by moving internal constructs in your function or method into parameters, no?
It entirely depends on your threat model but if yours is similar to most people, holes that let anybody on your network hijack your system via `tcp.sys` RCE's might be a showstopper...
If you are talking of hypotheticals, there are a substantial number of ex-hippies who'd let ten people set up ten yurts in the back/unused parts of their property. Which is to say that you are correct that zoning is a force that keeps the cost of housing high.
People's opinions about the net may well be changing, and things like logging on to the hot freedom-preserving tool to be presented in short order with child sexual abuse may be part of that.

Other things that have changed my opinions about the nature of speech on the internet are what's happening with american politics, anti-vaccination conspiracies and a bunch of other instances in which our wonderful tools of mass communication cause negative outcomes, either through directed propaganda or through simply connecting hoards of morons together.

Tech utopianism seems to be waning.
The latest US plan aims for a 95% carbon free grid by 2035. They could have aimed for 100%, but it's cheaper to start electrifying more things at that point, as 95% carbon free electricity powering a heat pump is better than burning gas for heat. They therefore get the eqivalent of 105% carbon reduction for the same cost, more than they'd get by focusing on the final 5% of carbon on the grid.
Not compared to everything else. Move was $60 with 10% down on a $350k condo. Total monthly payment was amosr $2100 per month including the HOA
I think most people just don't want to see their effort lost to time.

Patching a binary is impressive, sure, but it's the polar opposite of sustainable. You don't have a good way to document your fix, it's dependent on one exact source tree and how the compiler was feeling that morning, and even minor changes from upstream can completely change the way a binary patch would need to work.

It's great for a one-off hack, but part of the appeal of open source for many people is how easy it is for your changes to become part of the "permanent record" of that piece of software.
We just had printernightmare (CVE-2021-34527) a few months ago.

That's a remote authenticated code execution...
https://archive.is/WGEtj
The author’s point is that labeling someone as “lazy” is intellectually lazy. Every person, throughout their lives, exhibits behaviors ranging the full spectrum from lazy to diligent. They might be lazy about one thing but diligent about another, all at different times, for reasons others may never find out about. Labeling a person as lazy ignores all of that, and lays judgement based on a specific things the labeler wish the labeled was more diligent about, and at the time of their choosing. It’s entirely subjective, and rarely constructive. Laziness, as a description of a person’s measurable, inherent attributes, is inherently vindictive, intellectually lazy, and generally unhelpful. It’s a way of saying “I give up on you, I don’t want to know your story, and I think you can’t change” without acknowledging your part in that judgement.
Thats my preferred explanation of how windows went downhill so quickly after win7.

It used to coexist with linux, now basically everyone of "google engineer" quality single boots linux.
I'm not really sure the "dollar worth less" framing is super helpful, but maybe I'm wrong. I think it's a little better to specify in what context we're talking about.

Actual inflation is generally low aside from short-term issues, but "asset inflation" if you want to call it that is high. I think the most important thing in terms of day-to-day existence is CPI-type measures that reflect your ability to consume things with money. If you can't do that anymore, then it becomes a real problem for everyday life, as people are unable to afford things they need. But that's not that situation we're in.

The situation we're in is that assets are over-valued across the board, including in the stock market and housing. I think the risk here is that once you're in this situation, getting out of it is really hard. If we allow housing prices to fall (by raising rates, for example), what happens to all the people who are now underwater on their mortgages? If value is erased from the stock market, a lot of people are going to be left holding the bag. Is there a plausible way we can get out of this situation?
It’s useful to point out pitfalls of lower precision too. I don’t usually see these articles go over that.

Operations on a few million rows of float32s can give strange results. For example when summing. Df[“colA”].sum() can be fairly different than df.sort_index()[“colA”].sum(). It’s a trap for the unwary.
Nobody uses roots to sign End Entity certificates. That's been prohibited for years, and it was always a stupid practice even before it was specifically prohibited.

But this is about root trust. Ultimately, why should your software trust this certificate, but not trust some random certificate I just made? If your system only trusts a Let's Encrypt certificate because of the DST Root CA X3 which is from like 2000, and then DST Root CA X3 expires, does your system no longer trust those certificates?

If you make actual trust decisions, presumably you've made a few new ones since before the war in Afghanistan started and hopefully you trusted ISRG Root X1, from the organisation running Let's Encrypt. It's been around for a few years, you had time.

More likely, you let your OS vendor make such decisions, don't worry all major OS vendors trusted ISRG Root X1 years ago. Apple, Microsoft, and (on behalf of the Free Unixes) Mozilla all OK'd this years and years back.

But, if your software is a bit long in the tooth and was poorly made back then, that might not help. OpenSSL 1.0.0 was exciting when it happened, but that was a long time ago too and it didn't know how to handle this correctly.

Old enough GnuTLS likewise.
Great, will I be able to register my kid for public school there after doing so? I'll put the yurt down as my primary residence; I hear Berkeley has good public schools. If so give me their contact information and I will take a serious look at getting set up.
>[moved] to their own root, ISRG Root X1, that expires on 4th June 2035, giving us quite a number of years.

This seems like it makes the problem even worse. If these certs expired every year or so, embedded/IoT vendors would not get away with fixing something that eventually expires since it would expire too quickly.
> If you jump through the hoops to get an ITIN

You make this sound way more complicated than it actually is to get an ITIN. There are very few hoops to jump through. Having an account with a US-based stock broker is usually sufficient, there are even companies that will handle the entire application for you for a fee.

> financial institutions usually have a database of private mailbox addresses. Technically these are called CMRAs

They get this list from the USPS, and anyone can use the USPS website to see if an address is on the CMRA list or not.

> The American credit cards that offer attractive rewards have the highest requirements in terms of credit score. If you have no credit history, you will not be approved for these.

Like I said above, once you get your foot in the door (if you have zero history, there are companies that will give you secured cards, against a deposit, that help you build history), your credit history only grows. You don't need "years" of credit history to get a good rewards card, it's pretty much two years.

> The average non-resident foreign national isn't spending enough every year on their credit cards to gain any meaningful benefit from a crappy American rewards credit card, or to spend years building up a credit history to get a better card.

The average non-resident foreign national probably buys more stuff online delivered from the US than you think. Two years of spending roughly $800/month on average would do it (this is not as much as it seems, because it includes all international travel spend -- and Canadians who are getting US cards are in the demographic that visits the US frequently).
Yeah, my "good" insurance is costing me $500 per month. And I'm considered one of the lucky ones! For anyone curious that's for a family, but still!
As a sibling comment pointed out this was a reference Homeland Security Presidential Directive 12 (HSPD-12). The results were that the vast majority of systems did not use passwords. You can check out the status over time by googling "HSPD-12 Status Report" (no quotes) and check for the various agencies that fall within the US Executive branch.

The DOD led the charge with the DOD Common Access Card (CAC), which became standardized (more or less; there was the GSC-IS which did specify the CAC) as the PIV in NIST SP 800-73, and this is what practically everyone uses today.

The PIV is just a smartcard, like your favorite chip-and-pin card (ISO 7816). Which is just a tiny computer you send datagrams/packets (APDUs) to request that it do work, and it sends you back responses. It has your private keys on it, as well as some certificates for you to present and that's pretty much it.

The vast majority of deployments people use this in combination with some other tools. For example with PKINIT with Kerberos, and then most authentication/authorization occurs using the Ticket Granting Ticket (TGT) you get with from Kerberos. Direct authentication using TLS Client Certificate Authentication is also used in some cases (since it requires less infrastructure). SAML IdPs are also used, usually in conjunction with Kerberos or TLS Client Certificate Authentication.
I just bought a house, and put 10% down on the house. What I learned:

- PMI is really not as expensive as you might think. I pay ~$150/mo extra and all told my mortgage is just over $2k/mo

- PMI rate depends on a LOT of factors, including your lender's terms, your own credit history, and even the amount you put down. Your PMI gets re-evaluated yearly and the closer you are to the 20% equity on the house, the less PMI you pay. You can actually even get PMI waived as early as 18% sometimes, if you remember to ask them.
Neat project, thanks for sharing.
I don't have firsthand experience, but everyone I know with second- (colleague) and third- (acquaintance) -hand experience says the performance promises hold up.
It's called "perlasm." First Google hit finds it, if you happen to want to see it again :)

(Though it's not header files, so I wonder if 'wbl was thinking of something else.)
Amazon Ring uses domestic violence to market doorbell cameras
Agreed -- the use of the word college (instead of university), high school (instead of secondary or cegep), and a few other cues suggest he probably didn't grow up in Canada.
I'm a bit annoyed with the lack of _some_ inline image support. but making a browser for gemini is really really easy at least.
I think that’s the point. There is no reason for a student to get an F twice in a course they paid for without turning in any work. They could at least get a W or Audit if they withdraw late, but most schools also provide refunds if you withdraw in the first weeks.

This means the individual couldn’t perform the basic unskilled task of withdrawing, something which usually just involves an email but in 2021 is usually done via button click. This doesn’t sound so much like laziness as depression.
Yet…9 years ago, a similar situation and due to a layoff I decided to forgo cobra for the final two months before my wife’s insurance was available (she had a new job). In that time I fell on slick steps and broke a shoulder, bruised a hip, and sprained my ankle.

But I was able to negotiate my ER bill. Basically I told them that I would likely default on the bill anyway if it was extremely expensive. I told them what I could provide them, and they just billed me that amount. Ultimately it was cheaper than two months of cobra. Granted I would have bought cobra for the whole family and that is really expensive.

Point is, if you don’t have insurance, you should always ask your provider for their “cash price”. If they know there is no insurance and a likely default there are sometimes options.

It’s also worth inquiring about a cash price if your insurance wants a test that might be quite expensive for your out of pocket co-pay.
> Wait a second are you sure about that?

I am not, as I didn't own the device (I did own a Nexus 4 around this time). I'm going by Google's available factory images [1].

[0] https://developers.google.com/android/images#hammerhead
If anyone is rewriting history, it’s the person making Russia an innocent victim of WWII. Russia wanted conquest of Poland and enabled the blitzkrieg.
Thanks for the input oblib! Will check it out
Just keep these comments handy in case you ever need them in court :P
> The author’s point is that labeling someone as “lazy” is intellectually lazy.

The author's directly stated point in the headline, their book, and the article is that laziness "does NOT" exist.
You’re welcome! I remember being confused by the concept as well, and now I feel more informed.
Those lower unhedged rates from energy trading startups should’ve never existed and were unsustainable (as proven by this tail risk). This is Griddy in Texas during the February 2021 freeze event all over again. It’s like auto insurance: it’s cheaper to go without up until the accident.

https://en.wikipedia.org/wiki/Griddy
Even if you trust Microsoft not to abuse its "secure (against the user) boot" scheme, despite the evidence[0], you should realise how eager governments are to remove apps from app stores and how quickly they would take advantage of a technology that allows them to limit desktops and laptops to running only "approved" applications too.

People rightly foresaw the potential for scope-creep in Apple's latest device-side file scanning "feature", and we should be similarly cautious for any similar feature that makes it hard for Microsoft to oppose enforcing a government-maintained blacklist or whitelist of installable software.

[0] https://www.computerworld.com/article/2542952/aussies-rage-a...
Is there going to be a theme?
> This involves the basic parts of an OS: filesystem, program loader, whatever you're using to calculate the hash, etc; you have to trust those too.

No. This can be done with a ROM programmer. Trust is now reduced to hardware and people who checked the software. Assuming many people can check it, it can be considered safe. As I said, trust now depends on hardware and many people being compromised. Trusting software is no longer needed.

Type-in a bootloader is how it was done on old PDPs [0] and on the altair. I can't see how those bootloaders could be compromised except if the hardware was compromised too.

[0] https://www.youtube.com/watch?v=M94p5EIC9vQ
> Perhaps I misunderstood the idea of pronoun variables.

Their point is the same as the one in human language. You can't make them up on the spot -- they already exist, with predetermined reference logic that we learn as part of learning a language. All you can do is mention them. This means they often reduce both the reading and comprehension load in comparison with inventing a new name and binding it to some referent.

For example, in this sentence:

> I can't speak for Perl's general usefulness, but pronoun variables are just not terribly useful, because you can make them up on the spot.

Who's "I"? And "you"? What's "them"? These are all obvious. Compare that with:

> I = the person writing this. This = the writing you are reading. You = the person reading this. I can't speak for Perl's general usefulness, but pronoun variables are just not terribly useful, because you... [You = someone writing code] can make them [Them = pronoun variables (though, as noted, you can't make them)] up on the spot.

Consider what it would take to write code displaying the first 10 numbers in the fibonacci sequence in some PL.

Here it is in Raku using pronouns:

say .[^10] given 0, 1, *+* ... Inf # (0 1 1 2 3 5 8 13 21 34)

I grant that you have to learn this aspect of Raku to be able to read and write the above code. But it only takes a few seconds to learn that:

* `.foo` means applying `foo` to "it".

* `[^10]` means up to the 10th element. That's got nothing to do with pronouns, but whatever.

* The `*` in `*+*` is the pronoun "whatever" and, when used in combination with an unary or binary operator forms a lambda for that operation. So `*+*` reads as "whatever plus whatever" and represents a two argument lambda that adds its arguments.

* `...` is Raku's "sequence" operator, which uses the preceding function/lambda as the generator (which in turn uses the preceding N arguments per the generator's arity). Again, nothing to do with pronouns, and yet more you have to learn, but that's how PLs are.

It will no doubt look awfully weird, almost as weird as, say, Chinese (presuming you don't know Chinese). But that (it looking weird) is something completely distinct from whether it (using it) is extremely pleasant once you just accept it.

With a sufficiently open mind it (accepting using a "whatever" pronoun) can take literally a few seconds. (Thus kids tend to find this notion of "whatever" in Raku easy to grok, whereas adults sometimes struggle.)
Well, headlines be headlines. If you take them literally, they’ll disappoint you.
Do you really have 30 year fixed rates? They must be ridiculous?
One of the things that shocked me is after installing a fresh windows XP VM, I was able to use the built in IE to use google and it all just worked..

If this is something that actually should work is another question but it's quite impressive that it does work.
While I completely agree with you that any sane person _should_ want to know the final price and make decisions based on that, a lot of people actually don't and they only look at what they will pay per month/week for something.

I personally know multiple people that do this and like you I can't fathom why but they do. '"Need" a new couch? How much does it cost me per month? Oh yeah I can afford that.' Nevermind that the couch they don't really need (but want) costs them way more and they will very probably need/want a new one before this one is paid off. Same with cars and many many other items. Sellers perpetuate this, especially on bigger ticket items. I suppose it's a "natural progression". People can't afford the item they want. Sellers have no more buyers. But if you sell it to them with a loan and a small monthly payment, suddenly the buyers can afford it. How do you think 96 month car loans came about?
Does this get detected by the ad blocker blockers? My current iOS solution is burdened by that.
This is being discussed on the systemd-devel mailing list as well @ https://lists.freedesktop.org/archives/systemd-devel/2021-Se...
I can vouch for this. Ajay replies to my emails on a weekend. I'm nobody, not even a customer. He doesn't need to do that at all. I imagine he does it because he's a genuinely good and helpful type of person.
That's kind of a lazy response, since I wrote three places the author directly mentioned their point not just the headline.
There’s only so many dollars that can be spent on energy infrastructure. A dollar spent today on wind and solar gets you a megawatt next year. A dollar spent today on nuclear gets you 100 megawatts, but in a decade. Nobody wants to spend $2.
So expect to see a billion trivial security flaws that give RCE access to your computer.
Sure that's the less invasive indexing I mentioned, but they're also just not even in the same ballpark as Google

I'm not convinced that even if Google ported their indexing models to the device (like they did for the Pixel's voice recognition) they'd sink to the level of Apple's current implementation.
'nerd' culture powered through the pandemic
You are still way better off buying a house during high interest rates. While you can refinance a high interest rate away, the reverse has a lot more risky (overpay during low interest rates and try to recover cost via appreciation).
What do you think are the best books to recommend to people who don't have enough financial literacy? This is a common theme in this kind of HN thread but I haven't seen many recommendations or lists of books that can help people level up in their financial wisdom.

The bigger problem is that everyone wants to live in the same place (usually in urban centers, where the jobs are, and where you don't have to drive an hour and a half to work).

I'm hoping WFH greatly disrupts this, opening up rural areas to tech workers. It won't work for everybody, but it does work for SWEs and many kinds of technology employees and contractors.
I've not seen it above $100/month. More commonly ~$60-$90. I suppose it depends on what your definition of "significant" is.
I live in one of the serviced suburbs, you hear the drones go by most weekend mornings.

It’s a bit annoying I guess.
"Caching invalidation can be tricky, but for something like this it's actually easy"
Hedonic quality adjustments are necessary though. If people start buying smartphones instead of dumb flip phones, it's not a sign that there is massive inflation in telecom sector, it's a sign that they're getting a lot of value. The BLS's own example uses TVs [1]. When you went from a $200 20" CRT to a $1000 dollar 42 inch plasma, that 5x increase in price is not because your money was less valuable, it's because you're spending 5x the money and getting 5x the goods.

1: https://www.bls.gov/cpi/quality-adjustment/questions-and-ans...
FYI, if you're on Windows 10 or 11, you can use the Xbox Game Bar for screen recording. It's intended to capture game play, but it works with any running applications. It's often installed by default.

https://support.microsoft.com/en-us/windows/record-a-game-cl...
Care should probably be taken when externalizing the costs. For example, the noise of drones (something new) versus the noise of roads (something that already exists). The people who didn't order the coffee have to listen to the noise. One could argue that this is unfair.

I'm not sure how the externalities work out in this case, but it might be something to keep an eye on.
It's true there exists a "fat burn zone" where the ratio of fat burned to calories spent is higher. It's not true that's it's beneficial for people trying to lose weight to limit their calories burned to that zone, though. What governs weight loss is total calories in vs. total calories out:
https://www.whoop.com/thelocker/fat-burning-heart-rate-zone/
AFAIK, Reflections on trust supposes a compromised compiler. I do not see how a compiler whose source code is compromised can be compiled with the described steps. At least its hash would not match.
by this argument any new idea is automatically worse?
This is awesome. You’re making me update to iOS 15.

You should pay the guy who runs the Reddit AMP bot to include an advertisement for your app at the end of every comment.

Also you should hurry, because someone will make a free version of this soon.
You could create a client that uses a non-standard markup and be able to render inline images just fine... oops! I think I just broke the web again :)