skysight-inc/HackerNews huggingface dataset:
It shouldn't be hard for a dev to update a dependency which should trigger an auto build and roll your pipeline. Shouldn't be hard for an upstream vendor to patch and have that pulled to kick off a new build.

IDK where this idea that no one can know what's in a dependency tree is coming from but is not ops best practice for more than a decade.
/r/bestof is a hit-and-miss but I discover some new subreddits there.

/r/askhistorians, /r/askscience, /r/whatisthisthing, /r/legaladvice (or rather the one specific to my country), /r/manufacturingporn

For anything tech related I stay on HN
Don't forget F#'s units of measure! Which by the way are pretty cool, as the compiler automatically infers new units of measure for you:

> [<Measure>] type km;
> [<Measure>] type hour;
> let distance = 60.0<km>;
> let time = 0.5<hour>;
> let avgSpeed = distance / time ;;
val avgSpeed : float<km/hour> = 100.0

(And of course forbids physically illegal stuff such as adding values with different dimensions)
I remember "playing" BoxCar2D[1] for hours as a kid, unfortunately Flash has done away with it. Looks like there have been some JS-based spiritual successors though[2].

1. http://boxcar2d.com/

2. https://rednuht.org/genetic_cars_2/
> If you're in North America, you can usually buy some kind of hardwood

That's the thing, I'm not in NA, so pretty much any hardwoods available here are "exotic" imports.
> but the anti-NFT crowd doesn't seem to get it and that is just as frustrating

I don't hate on NFT themselves, but the artificial scarcity bizzaro ponzi pump-and-dump cult aura around them.
Remember what Victor Chaos said about NFT - you don't make money with them, you earn money by making people to invest in them.

I think it's stupid by really not much different to people spending money on hats in TF2 or whatever.

People used to lose their shit over virtual items in Diablo and MMOs. It's the same thing. Plenty of suckers out there
That's great! You might enjoy Ernest Hancock's work at freedomsphoenix.com and pirateswithoutborders.com
I think starting small is fine, the main thing is to do it!
Ask HN: What is this user doing?
Between Nov 20 and Dec 14, someone with the IP address 34.66.115.47 has submitted 16 requests to join my email newsletter on my website form with nonsense email accounts like mphtnarrwqrs@gmail.com and qrzqoiakkubp@gmail.com. In one instance they used a real email address, so I have their name and know the company they work for (which is in my industry and we actually have mutual colleagues). What could this person possibly be doing with all these weird form submissions? I have a very basic, static website, do no A/B testing, and haven't made any updates to it in months. What do you think?
I highly recommend the new south park post covid special for anyone who still doesn’t understand what an NFT is or who just thinks the whole thing is kind of silly.
TFA reminded me to go register my own bike, which I had forgotten to do. I also registered at bikeregister.com which is linked from the UK police.
It's actually fairly similar to the Apple bug, in that it was also a library with unnecessarily complex functionality that wasn't needed for the use case but just came along for the ride and ended up exploitable.
Would it even matter? What percentage of people who’ve bought into the cryptocurrency/NFT craze without even know how to verify something that?
Remember the lab leak conspiracy theory, that got people banned on the spot? Every fact checker would tell you there's no scientific basis for it, every scientist worth of their name is opposing to it and it's a complete fabrication spread around by conspiracy nuts. Except it turned out not only it is not so, but people who said it knew it wasn't so and were lying because of vested interests, which they failed to disclose and hoped to keep hidden, but "conspiracy nuts" revealed it and the house of cards collapsed. For example:

https://www.politifact.com/li-meng-yan-fact-check/

Note they didn't say with scientific humility "we do not know if that scenario actually happened, more data is needed, it's too early to make the conclusion". They say "it's ridiculous and debunked" and rate it "pants on fire" (i.e. an obvious outrageous lie). They act as if they are the ultimate authority with absolute knowledge of the facts and expertise to make such calls - while they don't have neither the facts nor the expertise. And this happens again and again.
National Space-Based Positioning, Nav, Timing Advisory Meeting Presentations
> This article is like suggesting the signature on art is what matters, but what matters is the actual provenance.

And blockchains can't guarantee provenance either, although they can help ensure that the claimed provenance (probably) hasn't changed since the data was first added.
I see plenty of comments about security teams that should be doing this or that.

I do not know about your security teams, but my security teams are now sitting 9 days straight trying to stop that shitshow. With teams complaining that they have to patch instead of doing Great Things.

After that these security teams will be back to invisible work and forgotten again. Until the next issue.

If your company has a truly different approach to security, tell it here - you may get really talented people knocking in because they are fed up with the security theater at their current job.
He said without a blockchain ! :P

While Git is arguably...

https://medium.com/@shemnon/is-a-git-repository-a-blockchain...

P.S.: This is of course a joke - pretty sure that the GP had a more rather than less restrictive definition of "blockchain" in mind ? (So I agree with you.)
What you miss out on is anything to do with your geographic community. Try looking for sources of local journalism like alt weeklies and zines based in your area. These tend to be published less often and curate for long-running issues rather than attention-grabbing headlines
> Right but which chain and which NFT?

whichever them who you want to recognize your status know about.
A good example, but unfortunately harder to follow than it should be because you accidentally wrote "3 * a + c" when you meant "3 * a + b". Unless you are making some very subtle point about uninitialized values?

To make this a slightly more useful comment, I'll mention that I confirmed that even with -Wall neither clang-6.0 nor gcc-9 gives a warning about the second assignment to "a" being unused. This would often be a nice thing.
Glad you like it! Email me directly at parham@synth.app so I make sure I don't miss it :)
My proposal saves money for the artist creating the token. Investors can pay as much as they like - with no middle-man.
>> In seattle, the brand new hockey team is only available through Root Sports, a smallish production company owned by Warner media and the baseball team. You can only watch the new hockey team if you subscribe to a cable package or online cable package (YouTube tv etc).

It's actually worse than that. I've looked into it, because I'd like to watch Mariners and Kraken games in Portland (blacked out here too). Root Sportsis only available through cable providers and FuboTV or Directv Stream. No other streaming services offer it and there is no way to subscribe directly. It's a mess, so I generally don't watch the games or pirate them.
I had the same experience with a couple food delivery services.

At first I figured it was a bug, after a couple more rounds I wondered if they counted on me deciding “whatever I’m hungry”.

Had similar issues with coupon codes from other non food services too…
> How would you gain consensus on which git repo is the original?

That is a problem with blockchain just as much. The only way to know what the original is, is to listen to the central authority here, which is the artist.
I had such a hard time deciding whether to vouch this comment. But if the knowyourmeme page is on topic, then surely linking to this video (which that page links to) is also on topic.

It's also interesting that such an influential brand is now owned by a random rich person. I never thought that my childhood hideout would become a punchline. The only way to make it better would be to add a little intro to the video like "At RadioShack, garages are important to us. That's why we've decided to invest in 47 new lambos that we bought with our RADIO tokens..."

What a sad ending for the only electronics shop in town. My friend and I used to hang out there after school and try to build logic gates and simple counters.

Uno reverse card: Tai Lopez uses the funds from this to rebuild electronics shops across the world, and becomes a household hero for nerds everywhere. Since this outcome is so weird, that outcome suddenly seems not-impossible.
That’s not really relevant for status signalling as long as John Doe can somehow be pointed to an easily accessible website showing Greg Moneybucket paid $10k for an image of a turd, regardless of what chain it is.
> How would you gain consensus on which git repo is the original? How do you distinguish between the original repo and a fork?

the one with the most commits? (perhaps, more accurately, the most commits all of which pass all tests)

> Crypto is git + a way to determine who is a for

agreed. also, in order to commit, (let's say) the commited changes have to pass all tests
Democrats and Republicans appear to be different when you listen to their speeches... but in the end, when you look at their actions or inactions, they are very similar on many topics.
This is the only thing about the pandemic that almost everybody agrees on - working from home has been great and extreamly beneficial to a lot of people who never understood the value of it before.
Which is exactly the point made in the article and why the solution presented there meets the same criteria.
They don’t. All of the delivery companies are massively (as in billions) unprofitable with no reasonable path to profitability due to competition from other equally unprofitable VC funded companies.
Pretty tough. And your guy Trump did 0 as well.
It's the 1990s during the New York Yankees heyday. Performance enhancing drugs now enable lesser teams to end their dynasty.

My point was that I was a happier baseball fan before the steroid era, even if that meant the hated Yankees would remain dominant. That the Yankees would also have cheated if they'd caught on fast enough is irrelevant.
This raises a very interesting point. Much of the problems with blockchain's, i.e. proof-of-work, on-chain transactions needing everyone to know about them, are because there are no central authorities baked into the design that can behave in opaque ways.

Yet, centralized services still spring up to handle transactions: OpenSea for NFTs, Coinbase for cryptocoin transactions. These services in turn still rely on a sea of middlemen which take a cut, or "gas" fees for their work. If you are transfering coins among several services then there are fees for each transfer, etc.

So tying this back to present day, mainstream, finance: When you run a credit card there are several middlemen between the cardholder and the merchant. This diagram (https://merchantcostconsulting.com/lower-credit-card-process...) suggests 4 intermediaries, each taking a cut.

In theory each of these provides a service - but how many are required in modern times? Let's say that the cardholder just wants to pay the merchant, and the merchant wants to maximize their take. In cryptocoin-land you would have a direct transaction with the merchant. This works because you cannot double pay. In trad-finance land you need to have your issuing bank state that you have the funds. Credit cards provide a level of abstraction where the merchant gets paid now and the credit card provider collects later. This all happens live.

What if instead you had a system where:

- Card holder uses a computing device (say a smartphone with TPM) and that cryptographically signs transactions to say that the card holder requested this.

- Issuing bank gives the card holder a signed certificate each week saying: This is account holder #XXXXX. They can purchase up to $YYY at one time.

- Card holder provides the cert to merchant upon wanting to make a purchase along with a signed receipt indicating a transfer of money. You could add a pin to be entered on each transaction as 2FA.

- Merchant gets this crypto-receipt and has some reasonable amount of time to turn it in to the issuing bank (say 1 month) and collect payment.

- Issuing bank gives merchant money for receipt and charges account holder. Account holder does normal procedures of paying for things, complaining about charges, etc.

This scheme has a few advantages and feels very similar to how I sort of understand credit cards work in Europe.

- Issuing bank can get a larger take since there are less intermediaries.

- Merchant can get a larger take since there can be less fees.

- There is a reasonable assurance of lack of fraud due to 2FA, and TPM storing signing key.

- This does not require live internet access nor live responses.

Why is there nothing like this? What are the drawbacks? Tying back to the parent discussion, is this a reasonable optimization on top of crypocurrency as it exists today?
I wonder why wasn't PHP included? It is still very popular in websites... Is it somehow not comparable/not worth to compare?
blockchain should have been called timechain, it’s a timestamping service

To know who was first, you can just record timetables with git and have various mirrors - if you can trust them to be adversarial such that if one alters its history that mirror gets flagged and rejected, then you have a distributed timestamp you can trust - but at some level of distribution and automation you reinvent blockchain
Anybody experimenting with this for piano: I highly recommend the Google 'Onsets and Frames' algorithm as embodied in their demo:

https://piano-scribe.glitch.me/

I built something similar which is a lot faster but on a large scale test the google software handily outperforms my own (92% accuracy versus 87% or so, and that is a huge difference because it translates into ~30% fewer errors).
Launch firefox with the -p flag and you'll have a profile interface.
He argues just a few sentences further down that the same is true for on-chain NFTs.
Right but no need for a blockchain as CSGO skins or more disturbingly Roblox demonstrate.
> Without a verified on-chain transaction, there is a risk that either the buyer or the seller may be lying about the transaction price.

The chain doesn't really guarantee this anyway because a wallet is not a person. There are already examples of big wash sales.
2017. Raised eyebrows for a moment because slatestarcodex moved to another url a year or so ago.
After seeing https://www.reddit.com/r/assholedesign/comments/rj0a19/made_..., I don’t think Uber Eats deserves the benefit of the doubt.
Does your newsletter have a "Welcome user number 1234"? or similar, like a number in the URL? Ages ago I used a similar approach to gain data on growth of a website. They would increase a number in the URL for every (shopping) checkout session, easy way to figure out if there was growth or not.
there is no difference, I put it in quotes because its newspeak.
First you’ll need a monopoly on violence or somebody’s going to find you with the $5 wrench
> until Snowden came along

What about Mark Klein?
Similar thing happened to me. Uber put a random charge on my card. I totaled up all my orders/invoices and made sure it didn't belong. Then fought with them for a month, every time they either refused to help or told me it must have been someone else in the family. Luckily Discover had my back and refunded the money immediately when I asked. Never used UberEats again.

Either way, just lay these transgressions on the heaping pile of Uber's toxic business practices. Stealing self driving secrets from Google, maliciously targeting politicians and police, and now just petty theft.
To transfer / scribe something that you have heard. Just like a “transcript” is the written record of spoken words, transcription is the act of transferring something heads into written form.

Transcription is a valued skill among musicians. The ability to hear a piece of music and write it down can be more than a little more difficult than transcribing speech.

Not sure if apocryphal, but Mozart is known an expert transcriber, able to hear an orchestral work and write down all the different instruments as they played their parts on just one listen.
Worse than yesterday, but better than tomorrow.
The space is in dire need of regulation. Sociopaths go for the lowest level of effort with the maximum level of rewards. Right now making a dumb crypto token and shilling it is likely the easiest immoral way to make money in this world.
GitCoin is already a platform for soliciting software bounties or funding & deploying hackathons:

https://gitcoin.co/
You add in a centralized service that enforces these rules and feature-wise it is equivalent, except the service is in control. The leading service is the company that is most well-funded, well-connected, innovative, etc.

Whereas with a proof-of-work blockchain, whoever has 51% of the network's mining hash rate is in control, which is effectively who is the most well-funded, well-connected, innovative, etc.

Or a proof-of-stake blockchain, where whoever has 51% of the network's stake, which is effectively who is the most well-funded, well-connected, innovative, etc.
Might get here sooner than you think.

https://hn.algolia.com/?q=four+day+week
Here is just one example https://www.portland.gov/code/14/b90

check out "14B.90.080 Reporting of Secondhand Dealer Transactions"

details differ by state and city, but the gist is "electronic records of serials are transmitted to law enforcement" etc. Also items are held for a while, not sold immediately.
Can we keep the political smears off hacker news please?

I’m all for hearing opposing points of view but name calling has no place here.
No one can decide the preferred usage but the public. Through these two decades I hardly ever saw the Fx abbreviation in use.
So whoever has a faster computer who can create new commits faster in their repo is the original?

That is basically how Bitcoin works right now.
Ding ding ding. These people have literally no idea what they are doing. You think the average tech VC is a clueless about NFTs? Wait to you talk to people in the art world.
So…art, you're talking about art…
Yeah it was never about the so called art, it's just the latest way to hype up and get people to fork over cash for something that's functionally the same as buying crypto anyway. Though you do get the bonus tax evasion, so that's neat.
The Russians are trying to censor censorship platforms. The censorship boomerang.
Since you're comparing Haskell and Rust, what do you think about functional style programming in Rust? Can you do similar things in Rust as you can in Haskell or is the lack of GC limiting here? (I suppose that Haskell has important reasons to have a GC).
Just because they don’t know how to verify it doesn’t mean it isn’t important to them. They just need someone to be able to. If you can’t verify a fork, then you aren’t going to be able to sell your coins, and everyone wants to be able to do that.
You can open chargebacks for years after the fact. Do it.
True, but it was taken on by the ruby community as a badge of pride after being used as a slur by the aforementioned other community, IIRC.
This is what crypto believers always miss. No way in hell will powerful people and organizations allow us little people to threaten their power in any way. That's why "Web3", if it happens, will only serve their interests. Or rather, it will only happen because it serves their interests.
I don’t think the piece is accurate.

An NFT is uniquely addressable by its contract address. Copying it would produce a new address, and it would be obvious the artist is trying to sell the same work again. This is why it is “non-fungible” and what makes it uniquely different from mere files, receipts and signatures.
>> They said it's no problem - just use a fixed version of the macOS Display Controller firmware of your choice.

Is that really an option? Can we drop in the binary blob at will, or will it break if Apple pushes an update?even if that's the case, dual booting may be impossible then. Unless that firmware is downloaded every boot.
Laymen programmers vastly overestimate systems work because they mythologize it.

It's just attitude & elbow grease at the end of the day, and Asahi Linux clearly had plenty of both of those! Cheers.
$10k for an image of a turd is so little I forgotten how to count that low!
And even though there may be tens of thousands of these search engines/registries built in the next two years, Google (for example, pick your poison) can step in any time and own this if NFTs turn into something more than pet rocks.
This sounds like you’ve bought baby-proof bowls [0] for your kid and have unfortunately failed.

[0] https://youtu.be/wfWMs_0wd_g
I am in the FSD Beta queue but I have not gotten access to it yet!

I wonder if the more aggressive monitoring and alerts turn on when you enter the queue for FSD Beta as a way to monitor your alertness before granting entry into the Beta?!
> maliciously targeting politicians and police

I hadn’t heard anything like this. Can you provide details?
Are you proposing that being rude does?
Truly enjoyable recreation and downtime.
Gitcoin is very much so already a thing: https://gitcoin.co/

It's used to fund public goods/open source projects.
> How could they be expected to? Reviewing all of the source code for log4j is not a walk in the park. Even if you thoroughly reviewed all the source code, would this specific exploit have crossed your mind?

Back a long time ago, companies were extremely wary of including any open source library (let alone thousands!) into their product. It took a very long time with audits, lawyers, etc to get a single library approved.

Yes, it was kind of a pain.

So the world has swung into the other extreme these days. Just pull in a couple thousand libraries from the internet, nobody knows what they even are or what's in them. All in the name of speed. So it has its benefits.

But the fundamental concerns of long ago are still there. Bringing in unreviewed third party code is a vector for vulnerabilities, supply chain attacks and all that joy.
And the YouTube tv interface is legit the worst possible interface to watch TV on TV. I’ve tried it in at least 3 different platforms and it’s a hot mess.
The DVR offering is unbeatable. But again, they remove the ability to skip ads after a few days and replace regular TV ads with targeted ads.

Pretty much the worst of all worlds.
I guess the one where the commits are signed by the author. If there are forks, good for the author since these then are backups.

Disclaimer: I have only a vague idea about the whole underlying tech but I've also been wondering if there isn't a simpler approach.
The NFT part is only the “I paid for this item” part. You can make a chain by making a further transaction with the ID of the last one (which arguably indicates you own the file hash indicated).

I don’t think the NFT actually does anything but identify a certain bunch of content? The important part is the transaction history.
The Apollo missions continue giving 50years on.
Another ongoing experiment is the Lunar Laser Ranging experiment
https://en.wikipedia.org/wiki/Lunar_Laser_Ranging_experiment
Rivian selects Georgia as site for its second EV factory
So just create your own NFT that claims you paid $10k, without actually paying $10k. That's the problem with this, there is no authority regulating which NFT's were created "correctly" and which aren't. For example, that person that sold an NFT claiming ownership over a tweet, anyone could make an NFT claiming ownership of the same tweet, none have more validity than others and the owners of these NFT's still don't actually own the tweet, since they have no control or copyright or anything over it.