skysight-inc/HackerNews huggingface dataset:
There are many things that are “relevant”.

If you have an interest in retro Casio watch collecting, showing you review videos for retro Casio watches would be relevant.

But … would it get you “engaged” as much as showing you biased political videos with outrage inducing clickbait titles?

Facebook’s algorithm is like an orchestra conductor. By its choice of content it chooses to show Facebook users, it guides the actions of its users. It’s main goal is to guide its users into sticking around for as long as possible - which while is somewhat manipulative, most people aren’t too bothered by that.

Unfortunately their algorithm’s choice of content has been discovered to have other more unpleasant side effects … and Facebook isn’t willing to sacrifice profit by having its algorithm suggest stuff that’s just as relevant to a user, without the unpleasant side effects, but less “engaging”.

In the shorten 60 minutes interview, I believe the whistleblower mentioned that Facebook leading up to the 2020 election actually clamp down on its algorithm fearing things could going south but lifted the measures after the election was over … then we got 6th Jan 2021.
the average phone has software with virtually every existing oss-license within and noone cares.
Using a statically typed language and an IDE is about a billion times better than grep.
Ask HN: Cybersecurity-wise, what do you think of an MFA-sharing application?
I am getting in touch with you in order to retrieve some feedback on the security aspect of a project that I have released. The objective of this question is to challenge the concept of the project and eventually retrieve constructive improvement tips you might see appropriate. The project is named GetMyMfa.io and it aims to provide Just-In-Time and nominative access to virtual phone numbers SMS MFA codes for testing and approval processes for organizations.

Where the idea came from:

I am currently working with multiple customers in the FSI domain (Financial Services Industry) and I am often required to perform tests in production environments with multiple accounts with different attributes. As production accounts, these accounts are generally required to have at least an SMS 2FA system in place. When performing tests in such sensitive accounts, a single individual usually owns all phone numbers linked to these accounts and shares received MFA codes via a phone call with the various people performing tests in these accounts. I believe this represents a security concern and a bypass of the Multi-Factor Authentication principles.

In addition, when submitting iOS applications to the App Store, Apple performs a human review process in which they need to login to the application. When MFA is enforced for all production accounts, Apple rejects the application unless a way is implemented to allow them to login. This often leaves developers with two options: Develop a front-end only demonstration mode, or bypass the MFA mechanism for a specific account.

Therefore, the project aims to:

Allow organizations to rent virtual phone numbers and have their SMS MFA codes be displayed in a private web interface;
Organizations have a fine-grained access control system that allows them to control who can access their virtual phone numbers MFA Codes;
Access granting can be time-based.

With this project, I aim to help businesses to:

Avoid spending time in building a security login "bypass" (and all the security issues that often come with it);
Avoid building a "demonstration" mode exclusively for Apple on their mobile applications;
Avoid using public websites with public phone numbers accessible to anyone.
What do you think? Would you use such product for your business in order to safely manage SMS Multi-Factor-Authentication sharing in production accounts? If not, what would be your recomendations?

Thank you very much in advance!
I'm only having my first coffee of the morning, but I read that as Rocky from Andy Weir's excellent Project Hail Mary would have phrased it... "Anyone have a link to the PR, question?"
Fond memories myself of writing a texture rotator/zoom demo and squeezing every clock cycle out of it.
I see they got Mike Hawk, too. But Mike Litoris is still free to use his/their own name.
Fantastic, C99, min requirement 16Mhz! Makes me want tinker with esp32. Great lib, congrats and thank you.
Kotlin is strictly worse if you value language features above all else. In that, there are several (several!) features it doesn't have.
Why wouldn’t Zig be applicable anywhere where c is applicable? Afaik it can also compile to C as a target other than the many architectures it supports.
Looking at games, Minecraft (before being sold) and Terraria would be up there.

WhatsApp is probably the best example from recent history.

You also have private companies like You Need A Budget (YNAB) which are highly successful, but fairly static and not targeting hyper growth.
Terraform is a better interface to AWS than CloudFormation. State is a crucial feature imo.
Same reason we had issues with toilet paper last year. Real shortages can fuel panic induced purchasing which have massive ripple effects.

People aren’t buying what they need for the next month, they are trying to get a year or 18 months of supply.
Regardless of what language you use to write your cdk stacks, the cdk cli application which transpiles your cdk stacks into cloudformation requires nodejs. So in reality cdk requires nodejs — always — and then whatever language you are writing the stacks in as well. It becomes a pain in the ass when you have a python application which is defined in a python cdk stack, but you still need nodejs to transpile your python cdk stack into cloudformation.

My main gripe is that the cdk cli should be distributed as a standalone binary so I don’t need to install nodejs to deploy my project.
All the git stuff, .gitignore, initial commit, github remote setup, etc.

Its so much better than backing up to ZIP files on floppy disks. 8)
Cole's Law was formulated by the 1960's, as shown by its inclusion in a verse in Westerfilk, attributed to Jordin Kare.
I’ve noticed this, too. I think HN karma is updated in some asynchronous fashion.
Fair point, my previous organization also used IAM extensively and I don't know how we could have fulfilled our compliance requirements without it.

That being said, in that case you pay what you get for. S3 is not just storage, it's integrated with the rest of the AWS ecosystem.

But if you write a small service/product that just needs to store and transfer a lot of data 1) IAM is not needed and almost more a burden but 2) you can have it cheaper elsewhere e.g. R2 now
Employees have said that its amazing to work with very smart people there.

That being said, I'd be a bit worried that the ultimate owner of the AI work done there is Google.

THAT being said, Google has been very open-sourcy about their research, unlike some... ahem Open ahem AI companies
I love Shatner… interesting guy. And I’m not even a Trekkie.

90 is a great age to go. Long life fulfilled. If something goes wrong, well maybe it’s a fitting end.

If everything works out, we’ll that’s a fabulous thing for Captain Kirk to do.

Presumably Jeff said he’d go for free.
> So what happens in a year or two if, however unlikely it may seem now, bad medium-to-long term effects of the vaccines start to show up?

I am not going to say that's impossible.

I am going to suggest that there would be Nobel prize in medicine waiting for the people who can explain the novel mechanism for _how_ those supposed much delayed side effects are possible.

Vaccine side effects occur shortly afterwards (1). They do not surface a year later - and it would have to be a year later, not 6 months, given when mass vaccination programs started & what we haven't seen happen in the real world. And vaccine side effect also do not surface 6 months later, FWIW.

Why do you feel invested in fantasising about "vindication, propaganda, cover-up". Is this heathy? You're nearly there with "could not ever afford to admit being wrong"

1) "In virtually all cases, vaccine side effects are seen within the first two months after rollout."

https://www.uab.edu/news/health/item/12143-three-things-to-k...
> This choke point would leave you similarly locked out.

Would it? People are willing to exchange USD for BTC. You can't control everything.
On WHAT pages?

Another shit headline.
Curious on why you'd use the word "launder" here. Exchanging currency privately with someone is not laundering.
Treating "net negative" as equivalent to "cannot see any positive" is disingenuous.
Smaller states do tend to be better behaved. Can’t make as many mistakes.
Curious Ways to Solve Tests Equality Problems in Swift
I’m not saying that there aren’t big green statues on Ellis Island, but the really really big green one is on the next island over.
I feel like you could make an interesting game out of this. Given these rules, find the best "false negative," a realistic and inoffensive, but banned username. My best so far are "brownie_gurl" and "Megasthenes."
I have a bus ticket from Stockholm with the serial of F4CK. Totally made my day back then to be honest.
I was concerned it might have been the quiet start of WWIII, a cyberattack aimed at a chunk of US infrastructure... I was worried Google and the rest would quickly follow in going offline.

I gave it about a 5% chance of it being that, and 95% of a clusterf*ck at Facebook.
I was in the UK recently and - if you can believe it - there was a car on the block I stayed whose plates contained 666.

Also, have a feelin you meant to do 1312. What’s the issue with 4444, though?
I'm working with what I think is a similar problem-space, trying to create a Node.js program that produces code to be run on the browser. The code runs in Node.js at "build time" which essentially means constructing the static web-site, which means some JavaScript must be somehow "deployed" to the website to be then later run at "run time".

So deploying to an AWS etc. Lambda seems conceptually similar to deploying from static-site-generator to a static web-site source-code, which is then what the browser will execute. Or is it?
You said the medieval equivalent of an index fund, which tracks the economy. The economy grew faster than gold.

Obviously there was no index fund, but no one in medieval times tried to get rich by buying gold and sitting on it. They used other methods.
Discovering AWS IAM Accounts
I dunno if this the O.P. but it's very similar.

https://www.youtube.com/watch?v=r7g-27AXFEg
Shopscribe (YC S21) Is Hiring a Full Stack Hacker
The problem with both is that you quickly accumulate weeks/months of accumulated coding time that costs a pretty penny at market freelance rates. Spending a few hundred K on devops is routine for a lot of companies.

My main issue with this is that a lot of that coding is just reinventing the same wheels over and over again. Jumping through many hoops along the way like a trained poodle.

It's stupid. Why is this so hard & tedious. I've seen enough infrastructure as code projects over the last fifteen years to know that actually very little has changed in terms of the type of thing people build with these tools. There's always a vpc with a bunch of subnets for the different AZs. Inside those go vms that run whatever (typically dockerized these days) with a load balancer in front of it and some cruft on the side for managed services like databases, queues, etc. The LB needs a certificate. I've seen some minor variations of this setup but it basically boils down to that plus maybe some misc cruft in the form of lambdas, buckets, etc.

So why is it so hard to get all of that orchestrated? Why do we have to boil the oceans to get some sane defaults for all of this. Why do we need to micromanage absolutely everything here? Monitoring, health checks, logging systems, backups, security & permissions. All of this needs to be micromanaged. All of it is disaster waiting to happen if you get it wrong. All of it is bespoke cruft that every project is reinventing from scratch.

All I want is "hey AWS, Google, MS, ... go run this thing over there and tell me when its done. This is the domain it needs to run over. It's a bog standard web server expecting to serve traffic via http/websockets. Give me something with sane defaults. Not a disassembled jig saw puzzle with thousands of pieces. This stuff should not be this hard in 2021.
I've been toying with similar idea, also for JS/TS, but I'm struggling to come up with a search term syntax that'd feel even somewhat intuitive. Maybe "function foo" would match all functions named foo, including those defined with

const foo = () =>

and "var foo" would just match all values named foo, including functions? I don't know, I feel like there's lots of edge cases that might make this approach fall apart
This is making a mountain out of a molehill. There's nothing to suggest any pre-conditions for deleting an account have to be removed, simply that it must be possible to "initiate deletion" from within the app.
> Whereas virtually 100% of all money invested into crypto has been burned by miners. This is pretty easy to model.

People like Bitcoin's provable global ledger and this is where the value lies. The value is not burned, it's embedded into this ledger.
Why not just automatically create/delete the account? What's the purpose of manually transcribing their information to an admin panel? Also, does this mean you have humans copying over and potentially looking at (even if only on accident) people's passwords?
If he knew one of their suspects names and decided to fuck with them and throw them off the trail, yes, he would use someone else's name. Your leap to judgement of "it must be Gary" is just as much of a leap as "it might not be" - both rely on "knowing" the Zodiac's motives, which no one does, because he's not been identified.
… and now the bitcoin pushers have censored HN again
The ad blocking still works properly, instead of having been deliberately crippled as in Blink.
You do realise digital assets have to be created right?

Your entire statement is wrong. I'm surprised you managed to write so much without realising how wrong it is.

Sounds like you don't know what digital assets are, or what a ponzi scheme is.

Trading cards are ponzi schemes too. From an entertainment point of view, they are created for the purpose of being fun to trade. From a monetary point of view, they are a ponzi scheme.

Bitcoin is neither fun, nor solves a problem, nor has any use beyond monetary.
I’m not one who values languages based on number of features alone (otherwise C++ or C# would be my all go), but based on the synergy of them. I think in this case, Scala is a really elegant language with many features that all come from some simple to understand primitives, for example everything is an object, that creates a highly coherent language.

This is in contrast with Kotlin, that tries to gain popularity by including many features, but always feeling “just sugar syntax over Java” to me.
It is but it's just one of them, hence why I think it's a bit of a stretch.
Stablecoins have counter-party risk. USDT is run by folks under investigation by the DOJ for bank fraud and was at various times not actually backed (sometimes by anything). And the scuttlebutt is USDC is currently under investigation by the SEC. [1]

[1] https://ca.finance.yahoo.com/news/public-filing-from-crypto-...
“If you’re bored, you’re not paying attention.” - Sam Harris
Maybe someone can correct me here, but I think we're moving into the future where most components won't be marked at all. These days I'm seeing ever more often even basic things like SMT resistors without any label.

Most device vendors actually don't want the markings on components: they make reverse engineering of their designs easier (you commonly see markings on key chips scraped away because of this).

For vast majority of electronics, component-level repair is not done anymore. Even for expensive devices it's cheaper to replace the whole failed assembly than pay someone to hunt down the failed component. So there's no benefit for service engineers either. Manufacturing is all done by machines where you only need to identify reels, not individual components.

In this view, markings on components are just an unnecessary cost for all parties. I'm not happy about it because it makes electronic things even more unserviceable after they are no longer supported by the manufacturer, but I think all incentives are in this direction.
https://rally.mozilla.org
I think you have hit on a very important point. When you break down a "task" into very many constituent parts, its "perceived" complexity and difficulty goes up. Many "tasks" are intuitively simple and do not need to be reduced further. Doing so only hampers the performance of the "task" itself. The 80/20 rule applies here.

This "Artificial Complexity" is man-made and is the reason for our out-of-control Consumerism and its detrimental fall-outs.
I found this which has some screen shots : https://www.youtube.com/watch?v=Jo_WgbUfNxc
> In France, you can't store a metro card on your iPhone, because Apple won't open up NFC. You can do it on Android.

Which metro cards? Navigo have been supported all year.

Apple's hardware doesn't allow for arbitrary card emulation - the logic has to run inside the Secure Enclave, and AFAIK that is an atomic block of firmware shipped along with the OS. No third party code allowed.

But they have added that secure enclave support for the various metro card networks, including "express pay" where NFC functions like metro cards will work even with the phone powered down due to low battery.
While I agree with you that it is a didactic problem, I also think it is an optimisation heuristic. When working with engineers, it is expected that they know what, for example, git/version control is, hence such jargon will be sprinkled in conversation freely. That's how we compress the communication bandwidth. It is enormously costly if we document everything in a context free manner that anyone newly into the topic can understand, and people still won't understand.

It is also why learning from/teaching to users seem futile and why adhering to common UX patterns help adoption. We basically don't know our user and our user don't know us. So users commonly assume whatever product they use is omnipotent (having all features) while we, as product owner, need our product passing the Mom Test.

One would only spend so much effort on bridging the understanding gap. On internet, not so much, hence the copious amount of flame war. In a compassionate working environment, better. In family setting, ideally infinite.
"There's a reason emotions exist and to lobotomise yourself won't make you a better business person."

This. If the other party has identified you as a mark for their scheme, non-emotional professional haggling will result in the worst case in profit for the hostile party, and even at best will be a total waste of time for you and exhausting.

I.e. it's
"Excuse me sir I notice an acidic liquid flowing from your direction. I would appreciate if you could either maneuver yourself or stop the said liquid flow as the volume of fluid gets in contact with my countenance."
v.s.
"Stop peeing on my face you **hole!"

You should not aggravate situations beyond reasonable bounds, should not become a sosiopathic professional victim and so on - but for a person of healthy psychological state, your emotions definetly are a valuable guide.
I've developed cdk for about 6 months now and it seems to me like a great idea.

However, the implementation is quite lackluster.

- It's very slow. Deploying our app from scratch takes >30 minues. An update of a single lambda (implementation, not permissions) takes about 3-5 minutes.

- Bad error information. On an error, cdk usually just reports which component couldn't be created. Not why it couldn't be created. That information you 'might' find in the aws cloudformation console, or not.

- It's buggy. Some deployments randomly fail because cdk couldn't find your cli credentials. Sometimes resources can't be created. In each case it works if you deploy again...

I suspect that most shortcomings that I experience are due to cloudformation. I'd really be interested in a 2.0 version that is either highly optimized or polished, or works with a different intermediate abstraction entirely. Updating and validating a tree of resources and policies should not be that difficult, at least not for AWS.
Vivaldi's latest version disables Google Idle API by default
"Big update alert: Vivaldi says no to Google Idle API, improves Capture, Download Panel, Sync, adds 68 new languages to Translate, and more."
> you couldn't have a clearer example of a strictly worse language...

A language that does NOT have as many features and limits more what you can do is NOT a strictly worse language. You can never say a language is worse than another, anyway, in general: it's always relative to what usage you have in mind. Your apparent disdain for a language just on the basis of the language features shows that you have a lot to learn about language economics, mentioned in other threads here.
> What’s the issue with 4444, though?

https://en.wikipedia.org/wiki/Tetraphobia
> If it turns out that the world _was_ flat, then they were screaming the truth the whole time and nobody listened. Are you okay with all that?

If.

I mean, yes? It all depends on how plausible the original proposition is. So the proposition under test here is "are COVID vaccines preferable to COVID"? The data from the real world is here and it's not even close.
Thanks for the link, it is explained in the linked video:

https://www.youtube.com/watch?v=KXuZi9aeGTw They explain it around 15:01 - google added it's own syscall switchto_thread - that puts the current thread to sleep and is switching to the argument thread id. (and some other calls too). That one helps with cutting down latency in inter thread calls for m:n threading. The real effort is to make latency for individual application requests predictable, while keeping it low.
Getting people to like you is an ancient evolved skill, not a new fangled US created contraption. And it's a good way to develop long term quality bonds
> I struggle to think of any actual examples of a country where you could travel anywhere without risking getting robbed. "Most of the country's territory": sure, but "any part" whatsoever?

In modern, civilized democracies, citizens delegate their right to use vigilante justice and violence in general to the state (in form of police), in exchange for the state's guarantee to uphold the law on its territory.
Serverless Workflow Specification
Removing wovels would increase likelyhood of bad word combos, but removing consonants would have the desired effect.
How to easily make the right decisions, without overthinking it
'using' empathetic statements is the least empathetic thing ever as is "winning" people over. I claim, perhaps provocatively, that prioritizing being liked and "winning" is makes it very difficult to behave ethically. Ethical acts - things that cut through given knowledge - are not necessarily well liked.
I'm in a similar mindset but won't do ABA - my son is minimally verbal but has come along at a gentle pace since we started. I'm quietly confident that just engaging him and building his joint attention will do the right thing.
Yep worked for a pretty large company and they had a (capable), high ranking dev guy who was prone to add easter eggs in the UI. Konami code would cause something to fly across the screen etc. The live product was taken down twice due to these easter eggs.

There are no more easter eggs.
Yes, it is valid. Consider for example: If you are an embedded hardware company. You modify GCC to support a new target / platform. Then, you can compile C code and create binaries for your embedded hardware.

As long as GCC is not distributed, this is a perfectly valid use case for GPL'd software.

Less abstract: Facebook famously has massive internal patches for MySQL, which is GPL'd. And of course, Google has massive internal patches for Linux kernel, which is also GPL'd.