skysight-inc/HackerNews huggingface dataset:
When I first heard of Bitcoin I thought "cool idea but will never take off". Then with the ICO madness I thought "ok, people are idiots".

Now with DeFi, "Web3" and all these articles I'm starting to think the cliché "First they ignore you, then they laugh at you, then they fight you, then you win" may actually be true. Why are people spending so much time arguing against it if it wasn't significant? We see all these rational arguments and yet the industry keeps growing exponentially.

What is actually going on? Is this a pivotal moment unfolding right in front of our eyes without us seeing it?
A very similar thing happens with “democracy.” In America it’s basically just anything that calls itself democracy and vaguely follows some notion of Western democracy is just accepted as the obvious best way to organize society.

You’ll get a lot of head scratching if you ask questions like “What if it turns out that the correlation between government policies and the policy preferences of the population is stronger in some supposedly ‘undemocratic’ countries than in major Western democracies?” After the head-scratching you’ll usually get some kind of argument that strips the former population of agency, like “oh well they’re just brainwashed.” Kinda ironic for supposed proponents of democracy to strip people of their agency.
This struck me as I was visiting Munich, momentarily agog at the guy in front of me walking down the street drinking beer like it was no thing. Meanwhile Americans were protesting that mask mandates were an infringement on their freedom (Germans too).

Many, many things are an infringement on our individual freedom, but it's revealing what people actually choose to rally around, and when. It points to how certain issues have become politicized and have organized, well-funded opposition.

To all the people up in arms about masks -- why now? Why this easy thing? Why weren't you protesting restrictions on voting age, driving age, drinking age, restrictions on gay marriage rights? Those are all very consequential restrictions, as opposed to wearing a bit of fabric on your face. Something that snow-sports enthusiasts routinely do without complaint or consequence.
Yes and no. SOC2 doesn't say you need to install an agent, and may not be explicitly prescriptive about whether computers that have access to production data or systems need encrypted drives, screenlocks, etc. But a non-hack SOC2 auditor is going to expect you to have some reasonable policy and controls in that area. So yeah, the main thrust of SOC2 is "are you following your own internal policies", but the auditors are also expected to hold you to some minimal standards on your policies (or ask you to provide a good explanation why they shouldn't apply in your case). You definitely would't want to tie yourself to a particular agent in your policy, but the auditors will want to see some kind of policy and then require evidence for that, either from something like an agent or screenshots/etc.
The version of Defrag from DOS 6.22 I remember differentiated between unused, partially used, and used (full) blocks. When you'd see a lot of partially used blocks get condensed into a few full blocks, it felt like your disk was getting SO tidy!
Sure, but the same inflation that was driving up mortgage rates was also reducing the real value of the balance of the loan. You can't just look at rates here.
Maybe NPR thought it was newsworthy enough. Or click worthy enough for its readers that might want $20. I doubt Kraft paid NPR but there is money changing hands!
See also https://twitter.com/dodgepong/status/1471528656199692292 and https://twitter.com/dodgepong/status/1471524716477300737

too twitter; didn't read: there's apparently OBS code evident in the decompiled app, and other GPL code as well, and OBS found out independently and are working to resolve it
> I’m not talking about just Asia

Neither am I either, I am using Asia as an example because the financial system has similar features to those you mention you desire in a system. There is an entire world out there with many countries (contrary to the world series of baseball), and many of them have different needs and services.

I am a westerner, I grew up having to go into banks to make transactions and I have seen the technical advancements which banks have made over many decades. I moved to Asia, and the financial system here is different. It functions different, many people do not have bank accounts let alone id to open one.

What I am suggesting is that the issues you may have have grown from a market with different drivers. The banks aren't just difficult because they want to be, they need to be. Legislation and regulation has made them that way.

> It doesn’t matter what banking or remittance services are available, crypto not just works, but works in a way that lets you send more money, cheaper, with zero paperwork’s or middlemen. Really frictionless.

You are describing part of the system, not its entirety. It is easy to send money, you could send me 10,000 USD now for an example (feel free to :)), I cannot access it easily. To access it I would have to sell it on Binance, then have the proceeds sent to a virtual wallet. I am fortunate, I have these accounts setup, many people in Asia and other places in the world don't have bank accounts, they don't have id's, they don't even have smart phones. All you are doing is moving blocks on a block chain it's not really moving, while people in other parts of the world still use money as a functional part of their daily lives.

> Like handing cash to someone in real life (which I guess in your world wouldn’t be allowed because you might not get it back)

It's not like that at all. I live in a real cash based economy, one where shops cannot even take credit cards in almost all but the minority of cases. I would not hesitate to say that 99% of transactions in the country which I am currently in are cashed based, real cash, not swiping your credit card, real paper. I would be lucky to find a store which could sell me a banana for a full bitcoin.

Of course I would be worried if I sent 10,000 USD to the wrong person and could not get it back. Now in saying that I am not an opponent to the idea of crypto in fact I have some, I am not sure even if I am proponent of regulation of the crypto industry. But I did need to point out that the problems you mention are because of the attributes of the banking system, in some ways crypto lacks attributes which makes it worse in other areas. If USDT crashes one day, we can compare why the regulation of the banking sector made that industry a better one for example.
>I would compare Tiananmen Square with the Tulsa race massacre.

The issue with that comparison is Americans can easily search about Tulsa and find a bunch of information about it. People in China are restricted from getting information about Tienanmen Square.

While a lot of people in China know bad stuff happened in Tienanmen Square, they can't so easily confirm their suspicions. They can't hear people's take on it and fully understand what happened.

>How many Americans don't know about it?

Just because Americans don't know about a topic doesn't really matter. Americans don't know about a lot of historical events, especially ones that happened 100 years ago.

I would guess a lot of Americans don't know Harding was President during Tulsa. Does that mean Harding is like Tienanmen Square?

I would go as far as saying people don't even know about Tulsa shows people aren't really moving on, but just forgot about it. On the other hand, everybody knows slavery occurred.
The Infinite Game of Software Development
Or they reimburse the consultant when they procure their own dedicated laptop for the client's work.
Is it somehow better that the government of the United States doesn’t even need to try to suppress the information?
> A number of districts and law enforcement divisions say they’ve looked into it and don’t view the threats as credible or even real.

It's possible that districts can have very different views of credibility based on recent events, in which TikTok "challenges" caused theft of teacher property, assaults on teachers, and damage to school property. This has happened across the country, but the effects have been unevenly distributed.

https://www.cbsnews.com/news/tik-tok-challenge-slap-a-teache...

This kind of casual terrorism is something to watch very closely. Kids are learning the power of collective action and for the first time ever have a means to organize themselves at scale. Schools and teachers are learning the consequences.
Correction, it was Asimov's, title is "The secret sense":

https://en.wikipedia.org/wiki/The_Secret_Sense
I want every drug to be on the shelf at the store, but depending on what it is you may have to show your ID to prove you are at the age of majority or emancipated. A pharmacist may still exist to answer questions but nobody is filling pill bottles. Every bottle has the factory safety seal. Scan the label with your phone to locally validate what risks are specific to you without the use of a cloud.
Good point. If you are realtively young in certain parts of the country you are going to hear a lot more stories about pharma killing people (opioids) than saving them.

Opioids killed most of my childhood friend group. Left many others passed out every day in their parents basement now into their 30s with no propects.

All the pretentious late night comedian jokes and Twitter clapbacks in the world won't be able to turn that around, you need some empathy to reach people where they are.
Load the client in a virtual machine.
Ah, so “you have to look at the code” is a feature, not a bug. That makes some sense, I suppose.

> finding a block means that the hash256() operation (sha256(sha256(block))) returns an hash with at least D (either left or right most, can't recall right now) bits set to 0, where D is the current difficult, which is adjusted by the network to make the 10min/block average time

This is a lies-to-children explanation. Bitcoin actually uses less-than a certain value (source: [0]). The tricky part is that a SHA-256 digest is a 256-bit number, and the SHA-256 function's input is a sequence of bits; the SHA-256 specification explicitly declines to specify a canonical representation of that 256-bit number, so it can't be used as the input to SHA-256 without explaining how it's being used. I can't find anywhere what this intermediate function (the one I called f) actually is. There are only half a dozen obvious possibilities (bits from most→least, or least→most, and the four normal ways of doing ASCII hex digests) so it's not that hard to guess, given an example… but still. It's the principle of the matter; it's all under-documented.

(Thanks for the rest of the info by the way. You've given me leads I wouldn't otherwise have been able to easily find.)

[0]: https://en.bitcoin.it/wiki/Difficulty
> should be only one remedy: imediate expulsion of any agent of repression of the Chinese state

There should be the same remedy that is provided to any other bully. These are still kids. There is a learning opportunity. If they refuse to learn, yes, expulsion should be in the cards.
Michael Keaton at his best.
Name a single one
Within the EU itself, GDPR is rarely enforced. A paper tiger of sorts. Its main meaning is to scare some people straight, but the resources for actual enforcement of its provisions are rather limited.

For example, I still receive a lot of commercial spam that advertises in-EU businesses.
Damn two big names stealing from OBS in one year! It is great software, though; I can see why companies would go that route.
Crypto exchanges keep getting hacked, and there's little anyone can do
> In America, we discuss and debate and try to incrementally learn from our experience.

Well, some do. The anti-CRT brouhaha is a reaction against that. Do you suppose they'll be teaching about the Tulsa Race Massacre in Oklahoma high schools in the near future?

ETA I think people were taking me the wrong way. I added "anti-" above. The brouhaha is all the people trying to prevent their kids from hearing anything in history class that makes them feel bad. To the extent that they're putting the force of law behind suppressing the discussion of ugly events in US history, I would say this is pretty analogous to the policy of the CCP.
I can't stop reading them because they so accurately depict the attitude and MO of a few real life BOFH that I used to work with. These guys, one in particular, would do anything in his power to torture people while averting any blame due to his technical skills. And then openly laugh and make fun of them with the other sysadmins...who all pretty much allowed him to get away with it all or even encouraged it. These stories do not look like fiction to me in any way.
It's also one of the best high-performance ARM machines you can currently buy (unless you go for insanely expensive exotic servers). I consider buying one just to have a low power server.
I see this as another way to pull the ladder to success away from talented poor kids under the guise of somehow being more fair. This really only benefits rich kids who can pad their applications in other ways and makes admissions standards even more opaque.

Any kid can get a used copy of an SAT prep book for cheap and get similar results to a rich kid getting private test tutoring.
Does that work consistently with AliExpress or are there many scammers? I have read pretty bad stories, am curious.
I don't think Nim has anything that I'd call a "global namespace". By default importing a module will include its exported symbols into the local module, but that doesn't impact anything globally.

In my opinion, this is the correct default, at least for Nim. Operator overloading and UFCS (https://en.wikipedia.org/wiki/Uniform_Function_Call_Syntax) don't really work if I have to prefix everything with a module name, and the static nature of Nim means that I'll get a compiler error if there's any ambiguity. There are downsides as well, but language design is all about tradeoffs, and I think Nim got this one right.

Regarding the case insensitivity, I was initially put off by this as well, but in 2 years of using Nim as my primary language, I have never, ever, encountered a real-life issue with it. I've never seen a Nim code base that uses mixed casing, and never encountered or heard of a bug caused by this behaviour. However, it has allowed my own code bases to stay 100% consistent, regardless of the code style of my dependencies, even when those dependencies written in other languages. Contrast this with Python where the `logging` module uses different casing than everything else, so you're forced to use an inconsistent style if you want to consume it. This type of thing is a non-issue in Nim. I think a case sensitive Nim would still be a fine language, but in my experience the pros of being mostly insensitive outweigh the cons.

In the end you may still disagree with both of these decisions, which is fine. Just understand that it's a nuanced discussion, and there's some solid reasoning behind their choices.
"Seems the race condition exists in that POC also."

Not sure whether this was an intentional joke.
With rails, there are really only a handful conventions, and while they take a little time to learn (table names plural, model names singular, controllers plural, name view files based on controller/action, foreign keys names in the obvious way) and that's about it. Once you have that you can look at a URL and know exactly where the code is. That is really valuable and worth a little effort.

There isn't much magic in rails, and just stepping through the methods in a debugger makes everything pretty clear if you do want to know exactly how everything is wired up.
Studies have shown the same.
> Because if not, aren't you just adding another attack vector onto all your employee/contractor laptops when you use 'Drata' to check a policy box on your SOC2 application?

I have bad news: gaining security certifications mostly through pointless or even harmful measures is the norm.
In React 18 I believe this is handled via batching of state updates. If you update various pieces of state within a component before it has the chance to render, it will update all changes at once and render once.

There are exceptions I’ve forgotten but generally it solves this problem well.
If they have SOC 2 requirements your options are to install the client or find a different job. That will be completely non-negotiable. We have a division that has to be compliant and they are regularly audited and there are no exceptions allowed. The guys in that group complain daily about what a pain it is so I understand the concern/frustration.
Quick google search: https://www.congress.gov/bill/117th-congress/senate-bill/234...
"disable all brakes" is misleading. All the basic memory safety stays, static typing is still there, non-debug assertions are still checked.

Removing debugging features is reasonable for such benchmarks, especially if comparing with languages that don't have them.
idk if “the overwhelming response” is people dont like Redux. some people are very vocal about their dislike, yes. But 1/3 of survey respondents use Redux despite other choices existing. theres a reason it won the Flux wars.
This is a really nice implementation! Looks really simple to use. I think a lot of devs these days would love to not have to be responsible for sensitive data these days, especially with GDPR.
The difficulty to read is a misnomer.

Dt[rows, columns, groups]

Assuming your dplyr code is generally split apply combine, the dt version is shorter and easier to reason around.

https://atrebas.github.io/post/2019-03-03-datatable-dplyr/
> Doesn't change that if you don't violate GDPR you won't be fined.

For most companies figuring out if they violate a foreign privacy law like GDPR and remaining compliant with it isn't a technical question, it's a legal one.

Attempting to hand-wave this away is likely what led to the decision to geo-block in the first place (tech person says "there's no risk", board says "prove it", lawyer says "pay me", tech person blocks the EU).
The key points of The Programmer's Brain
In almost all cases, TikTok's offering would be considered a derived work because you cannot swap out the OBS part for another and still have it work. So they are likely in full violation unless they agree to open source all their code.

Seems like a pretty open and shut case to be honest - that is, if they intend to pursue legal action and the powers that be rule appropriately.
What I mean is that you're violating standard separation of concerns when you have components that themselves are capable of dispatching network calls and updating the state in an async way directly within the components. As a result, those components no longer have an instantaneous view of the universe, and that makes them harder to test, harder to reason about as isolated units of abstraction, and so on.

> Every possible API request also exists on its own outside of anything React

That's good, but I would take it once step further and disallow any React component from directly invoking those methods.

Of course you're always going to need to do something asynchronously when the user clicks a button or what have you. But in my opinion, it's a lot more maintainable to have that just be an event that the component fires, and then have something else listening for that event out-of-band (and then sending the network request / updating the state to say "connecting" or "request failed" and so on). What happens in async land is not really a pure component's business.

(I know I'm definitely out of lock step with the current React ethos on this, so permit a crusty neckbeard his pet gripes.)
As others have said this area of SOC2 is often about "are you actually following the policies you've set" rather than "you have to do things this way" – most of our staff have company owned devices with MDM and an agent which mainly tracks installed applications versions, that Disk Encryption is turned on, and the OS patch level.

But there are a couple of our contractors that rejected this for exactly this reason (they had other clients). For one of them, we just bought him a laptop that he does all our work on (it cost less than 1 day of his time, so it was a no brainer), and the other, we realized we didn't have to as long as he did periodic (documented) reporting of screenshots of his OS version being up to date, Disk Encryption enabled, and screen saver settings are appropriate. And they legally attest that they make a best faith effort to delete any sensitive data off their laptops (if they ever download it).

We've talked to a couple of auditors and that seems to be sufficient and pragmatic as it accomplishes the same goal.
Why does the right want to forget and move on from Tulsa massacre?
Which is stronger, our distaste for totalitarianism or our complete addiction to China’s market?

It’s a dichotomy that leaves me confounded and unsurprised.
You mentioning visual languages makes me think of DRAKON, which was good enough for the Russian copy of the space shuttle project: https://en.wikipedia.org/wiki/DRAKON
This one, for example:

> Tell me you don't understand memes without telling me you don't understand memes.

It was clever the first time, now it is absolutely everywhere, and often uttered by idiots who did not even read the comment they are responding to (not saying you are specifically, but it is what I observe generally). This one is a virus spreading to otherwise initially healthy discussions threads and turning them into brainless “wit” contests.

So yeah, memes are quite commonly used as rhetoric or harassment techniques, quite far from some supposed humour.
Follow-up on the moderation issue – Inside Rust Blog
> There are a large number of bills in US state legislatures aimed at suppressing honest and uncensored discussion of the Tulsa race massacre.

Which bills are those?
> The most erroneous was the company that would take credit cards in plain text, print them onto an order sheet for reception staff to put through their POS at the front desk, and then the order sheets just went into the bin near the entrance

Back in my younger days, I've implemented exactly such a system. Looking back, it seems like a "WTF where you thinking" but somehow it made sense back then. What is obvious practice now took 20+ years of internet evolution to reach.

I've also worked for companies that:

- Stored user passwords in plaintext so you can email the customer their password if they forgot
- Stored the CVV so "we could issue refunds"
- Accidentally created anonymous email relays using copy & paste code from some "how do I create a webform in PHP" site.
- Test data was simply a mirror of production
- Test servers would send real emails to real customers (because the test data was a prod mirror)

There are probably some other atrocities I've been exposed to but those are the highlights.

Oh yeah, forgot one:

- To "save money" on hard drives for "the server" we did a RAID0 array. Works great until one of the disks die and you loose everything. (This was my own dumb fault though).

Live and learn I guess!
If each society defines what murder is, China can sell body parts from Uyghurs and you've got nothing to say about it if you're outside China. And if you're inside China, the same is true: "you might want to look up what "murder" means. The real definition in use in our society, that is, not the one you wish were true."