skysight-inc/HackerNews huggingface dataset:
My personal experience is that there are two kinds of forms one where both read and write models are the same and one where they are not.
Most form apps diverge in their read and write models as they grow bigger so it's always a good idea to make separate.

For validation again there's two kinds of validations, one is static like age should be integer and greater than 0, and one dynamic like this date should be between these two dates from some table.

You want to make simple validations be done for you by just specifying the types which some library can use to perform the validation.

More complex validation that cannot be expressed via types should be in your domain models constructor.

So usually there's a form struct and a separate domain struct. The form struct is filled from request and then you use that to build up ur domain object.
You always want to be thinking about parsing form data and not merely validating it, that is collecting form data and constructing a proven valid domain model/entity from it before using it for any business logic
Yeah I’m deeply tired of every single human endeavor’s existence being solely judged on its ability to provide returns to shareholders. Wish we could just nationalize stuff that people like which doesn’t generate profit. I sort of used to think that was the point of the state but I live in the US where the government is just a entity to provide contracts to corporations.
Counterpoint that might get some attention:

"The Governor is in possession of software on his personal computer that allows him to decrypt the personal details of thousands of constituents who may have voted for or against him."

The "software" being a web browser, of course.
Not if everyone constantly shifts the analogy so their argument still works ;)
It's a disgrace the agency who produced this website is not liable for this substandard quality.

How crazy is it that code like this is deployed to production and then the customer has to pay 50 million to get it up to standards? The senator should be ashamed they are being scammed like this.
I'll leave this here:

https://en.wikipedia.org/wiki/Censorship_in_the_United_State...
I have no idea if Zerodium would pay out that much for this bug (probably not) or anyone else (maybe?) but Apple in general has a poor track record of paying out bug bounties. They do sometimes, but it seems like it is far rarer than their website says they should.
It's the other way around. People with iPhones look at professional photography and will say "I want that too", and they're disappointed if their iPhone can't do it, so Apple makes sure it can.
In my native state of Indiana, cornfields are being converted into subdivisions and parking lots for Lowe's and Walmart. Progress!
I think angular velocities are precisely the bivectors (which I take to be the grade-2 elements of an exterior algebra or Geometric Algebra). The change of basis is indeed different than for ordinary vectors. The exponential map (the obvious generalisation of e^x) then takes bivectors to the "rotors", which represent rotation operators.

In terms of Lie theory, the rotors are a Lie group and the bivectors are the corresponding Lie algebra.
If you use btrfs, which Ubuntu defaults to, you can simply take a snapshot of your system before upgrading and roll it back if there's an issue.

That said, I use Ubuntu on many machines and VMs, and I haven't had issues with upgrading them at all.
:) Not a problem! Your experience hangs a lantern on one of the problems in academia.

The authors of that paper did not intend to mislead -- this paper was published in 2011, likely written in 2010, only a handful of years after Michelin's unveiling of their gen 1 tweel design. To me, having been in the authors' position, I can easily tell what the true purpose of the paper actually was (the analytical procedure). But the authors had a secondary purpose driven by 'hype', almost, you could even call it click-bait: they wanted to make the tweel exciting so that other researchers would get interested in it and continue the work. One way to do that is by showing, from a materials perspective, that it is theoretically possible to design a tweel with a low rolling resistance, and given that, it's possible that tweels will be better for the environment over the full-lifecycle, including manufacturing and materials. And sure, this absolutely did/does deserve more research. However, the other issues with tweels, like NVH/comfort/etc, were 'out-of-scope' for that paper, and so they ignored those. Solving for those issues is what makes that 5.5 kg/T figure difficult/possibly impossible to attain.

When these papers are confined to academia, it all works out, because most of the people who read your paper are other people who are writing papers, and they get it. But once these types of papers are picked up by the press/media/general populous, they can be very quickly misinterpreted!

(To be clear, you didn't do anything wrong here, I'm just griping a bit about academia and pretending like I'm 'adding context' ;)
First Ever Image of a Multi-Planet System Around a Sun-Like Star (2020)
I have all notifications from FB turned off. Also, that would not be a complex AI model...
Is this a joke or is there some interesting tidbit here? Both?
Forgot the band link: https://ottertune.bandcamp.com/music
> I wonder why Ubuntu/Canonical can never get their upgrade game to work properly.

Ubuntu developer here. Sounds like you have a really hacked up system there, and that it's your existing system that has issues. Under these circumstances, I don't think it's reasonable to expect an upgrade to be able to work smoothly. Scripts that handle upgrade paths necessarily need to make assumptions that what they are upgrading from is what the distribution put there. If you hack it up, then those scripts aren't going to work.

Your Arch system, being rolling release based, I assume isn't as hacked up with newer versions of things because you get them straight from your distribution? The equivalent on Ubuntu would be to run the six-monthly releases, which I assume you choose not to do. If you do that and then you hack up your system, then I don't think it's fair to compare to an Arch system where you (presumably) don't do that.

If you want to run an Ubuntu LTS system then I suggest that you do your hacking inside containers (whether system containers like lxd, or app containers like Docker). Then you won't need to hack up your system itself, and then upgrades will generally work fine.
> After I shopped a few other companies to see how our plans compared...

You might have missed this part. I did, too, on first reading. They did sift around.
> Accessing data that you are not authorized to view is still wrong.

So if a piece of paper flies in my face and has company secrets and I manage to look at, I'm at fault here ?

> I might forget to lock my front door one day, but that doesn't make it ok

Sorry but if you're not going to secure your belongings, then expect to be robbed.

Being 'ok' has nothing to do with it.
This was not an "unlocked door".

This was going to the doctor's office, and while sitting in the room with your files, seeing a bunch of other patient files just left on the desk in eyesight.

Not in an unlocked filing cabinet, not in an envelope, but in the open.

Changing a URL is not "malicious use" nor is it considered doing something you're not supposed to.

As a web client, I should be able to change or manipulate the URL to my heart's content, it is 100% the server's job to restrict my access and make sure that I cannot access resources I shouldn't.

This is entirely the fault of the operators, not the user, and they were mad at them because they _allowed_ the user to access things they should not.
The reason I run desktop Linux isn't because it has a particular feature I want. It's to get away from all the Windows features I don't want — bloat, bundleware, ads, telemetry, forced AV, forced cloud features, forced reboots...

So WSL doesn't help me, really.
A pastebin, please.
And I'll bet even the governor has access to this decryption software - he's got it installed on his phone, even! He must be hacking on the go.
He used the basic reading skills that are taught in ever public and private education system in the country to hack us!
similarly how eskimos have a bunch of words for "snow", and new yorkers have a bunch of words for "pizza", japanese have a bunch of words for "suicide"
Turns out a bunch of other systems rely on this bug to fetch information, and no-one's entirely sure where they are, who's responsible for them, or what they do. Also the page is auto-generated though some arcane CMS such that it's really hard to figure out how to get the data off that page while keeping it other places where it needs to be, without restructuring the whole thing. Also deployment is manual and you'll need to go back and forth with some unrelated department for months to make it happen. Also there's no testing environment, no information about how to get it running—let alone any useful scripts or config/deployment management—is in the repo or otherwise available at all, and there are no tests. And it's all written in an unholy combination of ASP.NET and Java server pages. And the "database" is a standards-nonconforming CSV.

(pure speculation)
It utilizes https://github.com/inconshreveable/go-update, which updates itself by replacing its executable file with the new version downloaded from Keygen's API (which handles checking if an upgrade is available). The new version will then be available after a restart of the executable.

Since Go apps are distributed as a single binary file, it makes it pretty painless to update them compared to e.g. a typical desktop app.
What this doesn't take into account is the degree to which introducing such requirements can more easily be exploited in future to introduce barriers to voting. We've already seen how far some people are willing to go to undermine the integrity of elections.

This means the real question is, to what extent does the current system contribute to integrity issues? So far, there doesn't seem to be much evidence that it does. So, what is the rationale for introducing additional ID requirements, beyond what already exists via voter registration, matching at the polls, etc.?
Doesn’t matter, all that counts is if you are a “US Person”:

https://www.irs.gov/individuals/international-taxpayers/clas...

Whether the bank finds out or not is maybe another thing, but in principle what matters is if you count as a US Person.
But this is assuming that the server has more agency than it does. Servers don't have minds and they don't make authorization decisions. This is more like someone giving you key to a filing cabinet in order to retrieve some documents and while you're there you snoop on the ones next to yours.

Is this system more trusting of people than it should be? Probably. Does that mean you're allowed to snoop on other people's documents -- nope.
Up and Down scroll the page up and down for me (1920x1080 screen with 125% scaling), which makes attempting to play difficult.
> Many, many institutions in the USA are built on it being a high-trust society. Now that it's falling into a low-trust state, we can expect those institutions to fail, and perhaps the state to as well.

Not enough people understand this, but I'm encouraged whenever I hear from those who do.
Why is there an assumption that citizenship should extend to people living outside of a country as citizens of another country?

There's a lot of complaints here about annoying and costly taxation of "expats" but there's no discussion of why it should be valid to have citizenship but not reside in that country's borders?

What is citizenship for except to actually be a citizen? And what does that mean, living in another place and being a citizen there? Or should it mean actually contributing to the country you are a citizen of by living and working there, building the "community" you claim to be a part of? Should it not come with obligations to pay taxes to the country you are a citizen of?

I don't get the mindset that views it as some right and not a privilege that comes with responsibilities.. I think it's even perfectly valid for nations to ban dual citizenship itself.

People like the OP who produce dozens of posts documenting the supposed injustice following her own decision to move to another country are the epitome of the term "rootless cosmopolitan". What interest of a nation does it serve to cater to these people that have left for greener pastures?
Must be Comic Sans, surely.
pdf: https://www.nber.org/system/files/working_papers/w25522/w255...
Part of this is because America is like three or four different countries compressed into a single uncohesive whole
Does anyone else miss PCMCIA? I do!

Some Dell laptops used to have these plastic cages around their hard drives, so you could take out a single screw and cold-swap drives in 10 seconds, no need to open the case. Same to pop in a sound card, ethernet card, USB card, SD card reader, etc. Still my favorite "hacker laptop". Lost it somewhere in Vegas during a bender at DEFCON. Thank goodness for hard drive encryption.
It depends on the workload (OLTP vs. OLAP, read-heavy vs. write-heavy). In our original research paper (https://db.cs.cmu.edu/papers/2017/p1009-van-aken.pdf), we came up with an automated way of determining which knobs have the most impact on performance. We've tested up to Postgres v13 in the commercial version of OtterTune.

For most workloads, shared_buffers and work_mem have the most impact. For write-heavy OLTP workloads, tuning the WAL (max_wal_size) and autovacuum knobs (e.g., autovacuum_vacuum_scale_factor) have the most benefit. For read-mostly OLAP workloads, Postgres' parallel knobs (max_parallel_workers_per_gather) provide the most improvement.

But you need to also tune all the other knobs to get the last 15-40% of potential performance improvement. This is what OtterTune can do.

More info about how we select knobs: https://ottertune.com/blog/prevent-machine-learning-from-wre...
> The statement near the end of the abstract - "Finally, strict ID requirements have no effect on fraud, actual or perceived." - seems surprising to me, and I'd like to see how they arrived at that conclusion.

If I had to take a guess, I'd say that voter fraud was already very low to begin with, and the rare occurrences that do happen wouldn't be helped with ID laws.
You let me in knowing exactly who I was. You showed me some stuff I wanted to see, but sitting right next to it, out in the open, was stuff you didn't want me to see. All I had to do was look somewhere other than where you were pointing, and I did that. And then you got mad at me for looking at the stuff and called the police.
The one thing that I don't like about Ubuntu is that you don't have a taskbar.

It is such a productivity boost to see a list of all windows and their titles.

And it let's me organize my work much better when I can organize this list by changing the order of the buttons.

Is anybody here using Ubuntu with a taskbar?
Summary: Designing Digital Institutions for Participatory Change
For most banks it is fine. They say "Click this link" I click it, then click "Login" and everything is fine.

Other banks purposely break my password manager so I have a high chance of pasting my password into a phishing site because I am in a habit of pasting my password for that bank.
I love Ubuntu but maybe not snaps so much.
Honestly, that my bad, I didn't check before suggesting it and had it in my head it was cross platform.
Doom rendered via Windows task manager:
https://youtu.be/hSoCmAoIMOU
Texas school admin: balance Holocaust books with 'opposing' views
They call it ‘recharging’ on this page. They even propose converting between summer/winter by reprinting the tread.
Current headline: "The Most Important Global Meeting You’ve Never Heard of Is Now"

Gee, why is that? It only takes "paper of record" NYT 11 paragraphs to first mention what the meeting is and its mighty inconvenient host country--and the fact that the US is the only major country not party to the UN Convention on Biological Diversity.

Politics over life.
The Julian Assange fiasco predates Trump's rise to power, and was (at least in my opinion) a very clear anti-press action on the part of the US.
Still can't tell if this is good or bad.
> The people who I hear complaining about this aren't the regular users, they're the companies who aren't making the maximum profit they feel they're entitled to.

The people I hear complaining about this are generally normal users who have given up. If I mention google's tracking or apple's walled garden they say that they dislike it, they would prefer something else but there is no other choice.
Apart from FATCA, there is also the Expatriation Tax, introduced after Facebook cofounder Eduardo Saverin took his money out of the country by renouncing citizenship [0,1,2]. This often referred to as Exit Tax.

It also applies to Greencard holders for more then 8 years, defined as long term permanent residents.

The Exit Tax is a huge tax penalty (37%) on anyone owning more than $2 million [3].

[0] https://taxfoundation.org/outraged-facebook-expatriate-sens-...

[1] https://www.politico.com/story/2012/05/ex-patriot-act-would-...

[2] https://www.casey.senate.gov/news/releases/casey-schumer-ann...

[3] https://www.irs.gov/individuals/international-taxpayers/expa...
No one said anything about legality. I'm still going to yell at you to gtfo and never come back again, and I don't see why it would be surprising that I would.

Let's drop the metaphor. The original story was that someone accessed a number of documents they weren't supposed to but technically could, and the question was whether or not that it was reasonable that the owners of the documents were upset with that.

I argue there was good reason to be upset given the facts on the ground. In this particular situation, the original poster was there to access their own document. Having accessed someone else's document, that would be the point at which the behavior crosses from legitimate to illegitimate if it continues. Leaving at that point would be one appropriate response. But systematically going through a number of different documents goes beyond a mistake and into the realm of intentionally exploiting this security issue for unauthorized purposes. That's when it crosses from "honest mistake" to "dishonest exploitation".

I have no idea about the illegality of the issue. But the fact is plain that this person was not the intended recipient of the documents, they knew they weren't the intended recipient, and then after realizing the nature of the exploit, they continued to use it.

This is not the same as knocking on a door for a legitimate reason, being let in, and then the person inside being mad you're there. It's knocking on a door for no reason or a malicious reason, knowingly doing something inside the resident doesn't want you to do, and then wondering why they are mad at you.
> “hacker took the records of at least three educators, decoded the HTML source code, and viewed the social security number of those specific educators.”

There's so much wrong here - am I to understand that if the state sends you SSNs in plaintext and you read them, _you're_ at fault?
And even in that case you're still not allowed to look at other people's documents. Like it doesn't matter that they're right in front of you, you still haven't been given authorization.
TIL, thanks :) I've only ever had it used/explained in the manner my previous comment did. Always happy to be corrected there.
The urgency question is a big deal. Of course, some things theres a resounding yes -- the path of a tornado, for example, or even to know about a community board hearing about something you may feel strongly about.

But then of course, theres the other stuff. Stuff that you might want to know about over the course of the week. The great part of the Internet now is that there doesn't really have to be any delineation between the two; we don't have to go to press. We can post what we need to when we need to, and of course push notifications/etc for the really urgent stuff.
Irving Campus ? I was there for those years.
I love Ubuntu. But I wish their package manager supported "undo".
New Mac Event on 10/18 (most likely)
Asking the web server to give you information without lying or falsifying any of your request data should in no way equate to walking into random houses that are unlocked.
Gitlab was earlier/better at letting companies install a version on-prem.
I definitely agree that this is not a big ethical breach in terms of magnitude, but it is still better not to look. Apparently this is not intended to be public information. If this information is private, I guess the companies want to derive some (slight) competitive advantage from not sharing it. I think you could make a strong argument that companies should make their healthcare offerings public knowledge, but they aren't currently (I guess?). In any case, access should be granted on the basis of an even playing field.
What? I'm about the same height and drive a sedan just fine, and it's comfortable and safe. I don't know how small your wife's car is, but I've never been in one so small that I'm bumping my head in the ceiling, that would be weird.
I was thinking of following the book but with Bevy. How do you replace bracket-lib?
Personally, I find the "shitcoin" part of crypto the least interesting target for potential regulation. Some are outright scams (say 1 in 10), many just poor investments (about 8 in 10), but for the most part the crypto community willingly engages with these coins, knowing the risk.

What I find much more important in terms of consumer protection is exchange regulation. Mainstream use of crypto will overwhelmingly be via exchanges and wallet apps, and quite obviously, your money shouldn't just disappear because of incompetence, a hack, a bug or bad intent. Adding protection or regulation here may make crypto far less scary.

I extend this concern to DeFi, which largely means staking. Right now, it basically means giving up custody of your coin to others, whom in some cases may "lose" it.

I would consider both use cases, just parking a coin and staking it, absolutely critical for mainstream usage and as the amount of money exponentially increases, it becomes ever important that at least basic protection is in place. At the same time, you don't want to add so much regulation that it crumbles the entire space.
Come up with an actual proposal that isn't "deregulate it all because 1930s laws don't apply" and people might listen to you.

Until then, bona fide intentions to "evolve" regulation are virtually impossible to tell apart from fraudulent intentions and most of us can't be bothered to spend the time or effort to engage in such a fruitless exercise.
So they included the SSNs in the HTML source, and then said the reporter hacked and unencrypted the HTML by reading the non-displayed SSNs in the source. That's like taping the SSNs up to the inside of a tinted window and then saying the reporter committed breaking and entering by shining a flashlight on the window.
Trump literally called the press the enemy of the people.

Traditionally, that's the sort of rhetoric a leader uses when they're about to send out the hit squads.