skysight-inc/HackerNews huggingface dataset:
Each cert was begotten from a specific signer. That’s all that is meant by “parent”. And the distinction between a tree and a graph is irrelevant for purposes of TLS cert validation. Each “Certificates” message should contain a linear chain, and each thing in the chain has another thing in the chain that signed it (which I am referring to as its parent). Walk that chain and verify that all of the certs in it are valid and eventually end in a valid cert that you trust a priori (and in many stacks, this MUST be a self-signed cert). If a particular platform chooses to continue trusting expired roots, that’s peculiar to that platform. I get it in the case of embedded stuff that may or may not ever get updated, but it’s strange nonetheless.
Is there a fundamental difference between Iran having nuclear weapons compared to Pakistan? If the government of Pakistan hasn't used them so far, then why would Iran?
Not the OP nor the post's author. We have a similar stack (React + NextJS + TypeScript + Mobx) but use a traditional REST API using Django Rest Framework. There are some interesting topics in the post and in these comments that I figured I could expand on:

1. The primary reason we chose NextJS (with SSR) was to be able to write a declarative React component that is run on the server and the client. For example a button to follow or unfollow a page (think: like/unlike in social media). In the previous generation of our application, we wrote the button in PHP that rendered HTML and toggled UI state on the front end using JS/jQuery. That meant writing the button logic (and HTML/CSS) in two places instead of one. Now, we have a single React component that renders itself based on state; it's the same component on the server and client.

2. I don't understand the extra work to avoid SSR. SSR is great and can be used behind authentication--there's no actual need to work around it. Additionally, in a NextJS application, SSR is only used on the first page load. When you click from page to page, it's all client-side transitions.

3. @yashap said "The FE stack at my current co. is React, MobX and TypeScript, powered by REST APIs that are well documented via OAS. It’s a very nice, easy to learn and maintain stack." Agreed. Same here. It's wonderful. In particular Mobx. A lot of the comments seem to say "I expected the article to talk about how to maintain state in a React application"--that's how. Use Mobx. No matter what reactive JS framework you're using, use Mobx to maintain "global" state.

4. The discussion of "why move to NextJS when my Webpack config from 6 years ago works just fine" is a good one. Two big reasons we moved to NextJS (away from a Webpack config from 7 years ago) were: the handoff from server -> client is more seamless and the developer experience with hot module reload for server + client sides was worth it. Any JS application these days is going to be a tooling nightmare: Webpack, Babel, TypeScript, ESlint, React, polyfills, plugins, and then dependencies. That's awful no matter what JS framework you choose. Create React App doesn't fix that, it just hides it for the first step of creating a react application. You still have to maintain all that nonsense.
The number has to corroborate whats on the picture of the passport.

Beyond what you asked though:

Most financial institutions are just covering their own ass and do not care. They just want the record in order to say they checked the box, and be able to look at that record when the government comes looking. Investigations rarely are high profile enough get stonewalled by a customer account that was fictional in order to ensnare the financial institution about how good/bad their KYC processes are. Money mule accounts are extremely prevalent, but this is limited to the actual person being tricked into using their own account for a ridiculous and shady purpose.
There are many types of remote work:

- Remote Only

- Remote First

- Remote Optional, Office First

- No Remote, Office Only

Companies (especially large ones) are not gonna just go from No Remote or Remote Optional to Remote Only. Change takes time even in the face of a shock to the system like COVID-19.
“I could refresh my browser page, or I could write a bunch of stuff about it on Twitter!”
Doesn't sound like you scrolled down. The heat maps clearly show net in-migration of younger high-earners.
That seems a bit judgmental of a society that seems a fair bit more orderly than ours. It would probably not work in the US, or the rest of the Anglosphere, but we should not suppose ourselves better or more moral. The purpose of morals is to establish mores for societal function. Theirs works quite well for them.
Probably will work out too
On one hand guns on drones are less destructive than bombs and missiles we are already using. So his wife in the car survived where a US drone strike would have killed them both.

On the other more surgical strikes may promote use.
I used Logo while taking Algebra II in high school. I remember seeing this issue of Byte at the time and I realized hey, I can plot functions! Our CS club had Logo for the Apple II machines they had and away I went! I learned very quickly not to plot every single point, how to determine how much to plot based off of display resolution, and get an idea for what your dx should be. I also explored lots of polynomial graphs we'd never get to see in class. It was fun!
I didn't actually see anything overtly homophobic/transphobic, though there's some border control posts he liked/retweeted that go a bit into the racist side. Not someone I'd want to hang out with, but I don't see anything like what was being said.

Still, what could possibly make anyone think posting a personal twitter handle for this was a good idea. That alone makes me question that he should have the role he does at GitHub.
Comcast will soon launch smart TVs under its new XClass TV brand
It's slightly less surprising when you remember that one of the most recent directors of the CIA & Secretary of State has stated that politics is “a never-ending struggle ... until the rapture.”

Along with the fact that he and others of his political affiliation tout “good versus evil” battles, particularly centered over the “Holy Land” of the Middle East, are signs that the longed-for end may be at hand.

For some of these people, ending humanity actually seems to be the goal. I'm mostly convinced at this point that they're letting corporations cause climate change so they can call it the rapture.
Ask HN: Why is opening Mac Os's file dialog so slow?
It seems like this hasn't been fixed for years.
I think you are forgetting that, at least in principle, the government is just some folks we decide should handle the laws & stuff in the country so that we can go about our lives. Your comment makes it sound like those pesky 'people' shouldn't interfere with the almighty government. OR ELSE!

Protesting is one of the few ways of disagreeing with the actions of the government, i.e. the people WE put in charge.
I really do prefer local filtering, via lists I supply or create. A decade ago, I used OpenDNS's filtering but my wariness of surveillance capitalism has grown. I try to keep as much as I can in-house now.

That said, I use Cloudflare for DDNS because I needed it for LetsEncrypt cert autorenew.
I see what you mean.

By way of clarification, I see route validation and pageload validation as potentially separate. For example, a given route parameter may govern a whole scope of pages in the app, so it makes sense to centralize that route validation logic rather than duplicate it in each page’s validation hook. In a more traditional server (like Express), we can just handle requests which contain that route parameter with a particular middleware function that validates the route. However, if we’re just using Next.js’ filesystem router, we have to add validation in the component tree, in a wrapping component. You’re right that we could make a HOC, but then we would either need to apply it to each page file in that directory or just put it in the App render as a wrapping component, which is what we elected to do.

On the other hand, an individual page may need to run some specific logic to validate that particular load. That’s where the page validation hook comes in. We have a centralized permissions spec in the runtime which contains fallback rules for each page, so we can just update the “abort” callback with each route change so that the page can just bail out of the pageload and redirect the client appropriately.
Reading code in one language in one codebase often doesn't even necessarily transfer to other codebases in the same language.

I find this particularly true in academic python codebases and C++ for some reason where single letter variables and cryptic contractions in identifiers is the norm. It's truly a shame that overly verbose java-isms spawned widespread disdain for descriptive variable names - I think one of the easiest low-hanging-fruit to most codebases is just using proper descriptive names for variables and functions, and other updating them accordingly when their meaning or purpose changes.
Google purchased the port authority building in NY for 1.8B on 2010 [1]. They also made a ton of real estate investments in CA and UK.

I imagined that with the pandemic and prospects of less employees in the office things would slow down.

But someone at Google is betting on a rebound after covid of office space demand, company growth or just real estate appreciation.

1: https://www.nytimes.com/2010/12/03/nyregion/03building.html
I loved Byte magazine. I vaguely remember that cover, though I never worked with Logo.

OT: This issue brought back some good memories as I saved most of my summer job pay and bought my first PC - a SuperBrain II, which is advertised on page 12. I mostly wrote programs on it using Turbo Pascal.
Ok, let's now compare the price of a medical procedure...
If people are looking for a real meta-analysis, currently the best one is from Cochrane. They recently put out an author interview[1] putting it into context.

I find this whole topic fascinating, first the actual science, then the patterns of why people believe what they do.

[1]: https://www.cochrane.org/news/ivermectin-cochranes-most-talk...
Is there any evidence teaching either will develop their thinking capabilities?
Right, and vaccines also reduce the odds that you will become infected in the first place, which is a big factor in spread.
> Properly statically typed languages do not need run-time checks

Well, what's a properly compiled language these days? Golang e.g. uses run-time dispatching due to the way interfaces work and, of course, garbage collection. Even C++ needs to do run-time dispatching of virtual methods. So the only languages left these days that do not use run-time checks are probably C and Fortran.
What are your top digital marketing newsletters?
Hey, y'all!

We recently launched a free live course for marketers who want to land a job in the crypto space. Although the number of applicants so far is fantastic, we would love to reach as many marketers that might be interested in upskilling their career as possible.

I thought of marketing newsletters as a great channel to sponsor our service and introduce it to marketers. Which newsletters do you think are must-to-submit ones?

Thanks in advance, hacker buddies!
On Chinese Worldview
I've mostly used the Relay examples as a starting point, though they've generally need to be fixed up to avoid some bugs. In the olden days of getInitialProps (still available as an API, but its use isn't actively encouraged) things were easier and more elegant, getServerSideProps and getStaticProps both force things to be a little uglier.

For my older (getInitialProps) approach, you can see a rough example here: https://gist.github.com/AndrewIngram/e974f63160af9df292fc39e...

Look at the last file (PostDetail.jsx) to see what it's like using GraphQL as part of a page (PostLayout isn't defined here, but assume it's just a regular React component using Relay's useFragment hook).
Of course it makes sense to act on low quality evidence, it’s called a risk benefit discussion and it’s done everyday in doctors offices. Risk of ivermectin is low. Possible benefit is high. Calling something contrarian doesn’t make it any less true. It’s nuts how the basics of medicine have also been thrown out the window. Get the vaccine. And do your best to stay safe, including staying up to date on potential treatments.
Thank HN: A customer found us on Hacker News and wrote our first angel check
A very good article trying to answer the question "How efficient is it to assasinate nuclear scientists?":

https://thebulletin.org/premium/2020-11/overview-nuclear-sci...
If I was still in my 20s and single; I'd likely strongly consider working in a Manhattan Google office building. That just sounds awesome. X years past that phase - I'd rather not. That it doesn't fit me (anymore) doesn't mean it's not enticing to others though.
Zoetis donates Covid-19 vaccines to support zoo animals
I haven't made any moves away from Apple yet, but I'm cautious about upgrading because it isn't clear to me where the code for the scanning is in the current releases. They announced they were going to start scanning one day before the planned rollout, but it wasn't mentioned that an update was necessary so it seemed like it could've already been in iOS 14.x. I am willing to update to the newest version so long as there's still an opt out option by not upgrading to whatever version will include the on-device scanning. But if the code is bundled in already and is just dormant until some undetermined date then I'll be moving on. I'm not sure how I'll even know if it's safe to upgrade, but I'm hoping if there's any concern there'll be some news about it in the coming weeks.
Well, when someone says "see Doom running on this architecture", they usually do mean that Doom is running on the architecture. So "Rust for the MOS 6502" or something like that would have been better. But yeah, maybe I'm too nitpicky and unfair to a non-native speaker...
apparently adding this reference to Wikipedia article on Tel El Hammam is repeatedly reverted by some wikipedia "power user"
> Don’t most people

And the rest are Forth users happily running interactive, extensible compilers with built in assemblers, block IO, screen editors in a multiuser, multitasking environment.
Python Plotting for Exploratory Data Analysis
Iran in particular has stated repeatedly, unequivocally that their goal is to annihilate Israel.

So of course Israel wants to do what it can to prevent Iran from becoming a nuclear state. This would be in its top 3 foreign policy goals.
I lived in SF for a while. While there's a lot of potential, it wasn't as bad as I would have thought.
Apparently Castro in his own country wasn’t. That general was in a foreign conflict directing insurgent operations against us.

Do you think Iran would vacillate about liquidating a general from an inferior adversary if that adversary were inflicting loses upon it, in say, Syria?
$2 billion for google is a rounding error

>Why aren't the shareholders flagging this?

Look how well the stock has done since IPO. I think management knows what it is doing
Reading the article (its short) it's a one ton robotic apparatus + gun, mounted, or at least transported, by a pickup truck. The gun utilized satellites to calculate its shots. This particular one wasn't much of a remote weapon deployable anywhere, but rather a weapon that replaces the requirement for an actual sniper to be competent and have a clear LOS. On some level I'd expect this thing could, for example, shoot through opaque conditions like smoke, or walls if the ballistics don't threaten it too much . It seems like it fired several shots which would help in that regard. You still, practically for a device this heavy and presumably expensive, would want a human driving it around and setting it up.
Given that there are a few nuclear powers that could meet that criteria, I really don't see a reason why Iran is a special case, especially when comparing it to Pakistan, for example.
> the whole point is to maintain an imbalance of power and capability in one’s own favor

That’s one strategy. Another, once the nuclear cat is out of the bag, is mutual assured destruction (MAD). If that’s your strategy then it is hypocritical because then the point is that everyone has enough power to destroy everyone else so no one will make a move.

I personally think that both strategies are stupid. The former will just breed current and future resentment and the latter is vulnerable to one unstable person with authority to use the weapons.

But I don’t have any sort of alternative so it seems like preventing others from getting nukes and then falling back to MAD is just the way the world is working.
I'm thinking I'd much prefer a non-internet connected ebook reader. Something that might have wifi but only for transferring books. The problem with a reader that's essentially an android device is that it's much too easy to become distracted as you go off to look up something that's come up in the text - and then an hour later get back to actually reading the book.
For example, Ikea for product lists sends mini chunks of simple HTML. No JS involved.

Can you elaborate how? like some turbolinks thing?
I am simultaneously in awe of the tech that it would take to pull this off and in complete revulsion at what was done.

It was interesting when I was in college to see which degrees required ethics classes and which ones didn't. Computer Science required us to take ethics classes. I assume because of the effects technology can have.

It is really subtle too. As one of my professors noted: "I'm sure none of you would write a 'BombJerusalem()' function, but you might write a 'Target(city)' function without realizing the implications."
Google is letting people work from home (in most orgs). But this isn't the majority of the company and Google is still hiring like crazy.
People pull kids and pets in cargo trailers a lot.
I don't regret doing WGU, it's an accredited school, it opened some doors for me, it's relatively cheap, it's a good investment.

I do have some issues with the curriculum; for example, there's two classes on "business of IT" stuff, but no classes on distributed/concurrent programming or (more worryingly) linear algebra. I think the latter is much more of an issue; a ton of jobs in the compsci world really necessitate a working knowledge of linear algebra (at least enough to call a CUDA library), so the fact that they don't teach any math after Discrete Math II is a bad thing (enough to where I wrote a letter to their staff complaining about it).

I do think that an issue with the competency-based systems is that they do kind of incentivize you to half-ass your way through the degree. An 80% is the same thing as a 100% in regards to your GPA, so I felt like I would very often learn just enough to pass a class and move on. For me, as someone with almost a decade of experience and a somewhat autodidactical nature, I don't think that's bad since I already have a fairly good understanding of compsci, but I do worry that a newbie might not leave with an great understanding of some fairly vital information.

I'm doing a masters degree in Data Analytics now from WGU, and since I know almost nothing about that subject, I've been fighting every urge to do "turbo mode" for it, since I actually want to learn the subject matter.
I've been using a 2nd gen Paperwhite for a long time. This might be the one I upgrade to (for the waterproofing and the warm light).

I really don't like Amazon though, so it's been a hard justification. Kindle is the only thing left I use that is Amazon.

I've thought about switching to Kobo, but I'm not sure it's worth it with how easy everything is on the Kindle.

I run a docker container with Calibre, and I use it to send all my books to the Kindle over e-mail. I would lose that functionality on the Kobo. I'd have to go back to manually syncing which would be a pain.
However, most cyclists seem to be riding for sport, few people ride at a sedate pace because you're on the bike to burn calories and improve your fitness, not to get somewhere in normal clothes without becoming sweaty.

This is quite the hasty generalization.
Between that and Musk's coming neural lace I'm ready to sign up for Contact baby!
Can probably take that a bit further and say it’s all for heat.
> We have NAT, and NAT works

Until it doesn't. NAT is fine for a home or company network, it'll soon be getting not fine for mobile and other networks. Using NAT you are not simply hiding the identity of individual devices you are sacrificing concurrent connections per device for fake extra address space, that will run out eventually with more and more devices being connected (you might say “my smart bulbs don't need to access the public network” but your smart bulb manufacturer appears to think differently!). IIRC Linux defaults to a range of 32768–60999 for port mapping so about 28,000 maximum concurrent connections per public IPv4 which seems a large number but if you have many users using P2P protocols (potentially hundreds of connections per host) or many many just web browsing (tens per host that is currently active) that can soon run out and connections start failing in a manner that is hard to diagnose at the client end (it just looks intermittent) and near impossible to diagnose at the far end.

And it is a pain for true P2P comms even at one level, never mind nested NAT if you and your ISP are both doing it.

NAT doesn't help for needing more publicly addressable addresses on the other side either, it only helps with your side of the problem. You will eventually have to move off IPv4 because services will start to be IPv6 only. Yes there are ways to essentially reverse-NAT around that (for instance HTTPS+SNI is now viable in most cases as you are only excluding really ancient devices) but those techniques also add complexity & latency and won't work for everything. Nor is the issue simple numbers: the distribution if IPv4 blocks is not at all smooth and working around that adds complexity to routing (yes large orgs have released some of the v4 allocations back for reuse, but that is far from as simple as just saying “hey, you over there, these are now available to use”.

If your reason for using NAT is security then be aware that what security/privacy you do get is only by accident and probably not as effective as you think anyway, certainly against meaningful tracking.
I agree with all of this.

The only reason why I've stuck with a Kindle paperwhite is because there's nothing out there that is as readable under so many conditions in that form factor. OLED/LED displays are garbage at the beach and weigh a ton. Similar displays (Kobo, Onyx) are bulky and heavier. The paperwhite is perfect hardware. It's just the ecosystem that eats ass.
If they are buying real estate now, I suppose it means they are not expecting rents to fall soon.

Right now, the city government seems very happy with the fucked up real estate market and the continued gutting of city centers, so maybe they are correct.

Reversing this trend is one of the most important things New Yorkers can do to ensure the long-term health of their city. It's already been bled out pretty badly by the real estate investment vampires.
> god I love tumblr.
it's one of the best social networks on the internet because it's just a complete fractal dumpster fire

Couldn't agree more. Everything is just so awful I can't even imagine the staff turning it into some boring Twitter like dumpster fire all about sucking up to celebrities. They have chronological post order by default, that makes it instantly better than nearly all other social networks.

It's unsalvageable and due to that, an accidental refuge from the current mess of the Internet.