skysight-inc/HackerNews huggingface dataset:
While I encourage everyone eligible to protect themselves by getting vaccinated, the virus will be around forever. Any talk of "prolonging" is absurd.

https://www.medpagetoday.com/opinion/vinay-prasad/94646

You obviously can't expect people to continue wearing masks indefinitely. That would be ridiculous.
Visual Voicemail and voicemail transcriptions are the greatest inventions ever. I love it that Apple also finally added the option to force all calls not in your contacts to Voicemail too.

Nomorobo used to be awesome, but even though they are not as effective as they used to be for the stuff they do detect I have it set to just discard the calls and that's better still. Keeps voicemail from filling up with junk. Now if I could just get Nomorobo's SMS filtering to actually work - not sure if it's them, Apple or some combination; really need to pursue that though because SMS junk is getting totally out of hand :p
Credential stuffing is a thing. So it’s pretty good if a compromised website just cannot leak your password.

But as the other comment pointed out the current situation with web form login is that password is sent to server so it wouldn’t be worse than the the status quo.
This is potentially off-topic, but I know that a lot of engineers also make music, so here goes. I run an electronic bass music label called [UUeird](https://uueird.com/) which focuses on experimental dubstep, drum & bass, and halftime. We also have a sister label called [Swampstep](https://swampstep.bandcamp.com/) that focuses on 140 BPM dubstep. We have over a quarter-milliion plays on Soundcloud, and can distribute music to all major storefronts. submissions [at] uueird [dot] com.
That's a good idea. Of course, sharing your screen at all would be optional in the "Let's have some company while we're working on stuff" friendly circle of folks.
I'm not sure what you think is FUD in the post. All the statements about radiation and health are approximately correct. They don't attempt to spread fear, uncertainty, and doubt- quite the opposite, they attempt to avoid doing so.

Could you be clearer about what you think the actual problem is? Is it just that his readings are in the noise of the sensor? Or his health claims? Something else?
My thought on this, what's the difference to an agent between a real world an a simulated one? Why aren't all worlds effectively simulated?
This may be a stupid question but what happens when two users update data in the same block? Also, does every update send an entire block over the wire?
I like basic auth (Header of `Authorization: Basic username:password`) but for persistent session auth I prefer the Bearer tokens[1][2] (Header of `Authorization: Bearer my_token_here`).

It's easy to generate a hash after the user logs in and then just store it in a cookie. The user doesn't have to store their password locally and I can delete the token from the database to force them to re-login. You can reuse the same token generation infra for APIs too so its pretty dynamic.

I've basically moved away from JWTs in favor of this simpler approach.

[1]: (list of auth schemes) https://developer.mozilla.org/en-US/docs/Web/HTTP/Authentica...
[2]: (Bearer auth spec) https://datatracker.ietf.org/doc/html/rfc6750
That's actually a gripe I have with Bitwarden, because you can't turn that feature off. If an attacker can take over a single endpoint, Bitwarden will happily send your credentials to an iframe from a malvertiser without ever telling you.

It's a fine feature and the WebExtension API won't let them solve basic auth in any other way, but it's a security risk in my opinion. I'd much rather see browsers provide an API to HTTP Basic auth prompts instead so the user can select an identity from the list if they've got a saved username/password combo that matches a given set of requirements.
Rights of parties in a lease are also governed by property rights.
Let's be realistic: If people were really concerned with some issues with Vim9Script, they could address them in nearly infinite ways. Yet they choose neovim, again, and as some standard of truth or excellence (where else is neovim a standard of excellence for anything?).

Every Vim discussion has neovim people finding ways to attack Vim. The signal is always negative which makes the signal meaningless - the source is just tuned to transmit negative.

It's a major reason I don't consider neovim. Who wants to be involved in that community, defined it seems by hating someone else's hard work - which they are giving to the public for free - and being parasites on the other's reputation. Just do your own thing, in your own way, and do something wonderful - don't worry about criticizing others. Ugh.
Short summary of arguments and conclusion here:

- https://www.livelaw.in/news-updates/cci-directs-investigatio...

- https://www.barandbench.com/news/cci-orders-investigation-in...
Those are the only calls I get on my work phone and we can't get the IT people to either activate the free call screening from the phone carrier or whitelist at least one call filtering app. So freaking annoying!
AGPL, multi-platform, beautiful UI, non-trivial network monitor and firewall... haven't used it but congrats!
No Code web app builder, with a focus on simplicity in building web apps for SMBs backed by their own spreadsheets.

Yes, there are countless solutions out there, but it's a growing industry with a lot of room for different niche/providers.

I run SheetUI, and I've seen what my customers do with it. Sometimes they just want to bring their own data (google sheet/CSV/etc), and have a nice UI slapped on top of it with search and filters, often for internal use.

For internal tools, people care only about usability, not how it looks, so WYSIWYG editor is pointless. I plan to focus on ease/speed of onboarding/creation of a web app (less friction to seeing immediate value), give fewer customization choices (less cognitive load), and dive deeper into each customer's domain (we help them do the cognitive mapping from their domain to software).
Obliterating the Natural World
Interledger doesn't support trustless/noncustodial transactions, and the "mainnet" is like 3 companies without open peering.
> I imagine we'll get more efficiency as procedural and generative techniques become more powerful: characters, worlds, mechanics, etc. are all programmatically generated with little-to-no intervention.

This absolutely has to happen because humans are really crap at some things, like animating human beings. When I was developing a 3D game in the mid-90s I watched our character animator trying to do the animations by hand and you can almost never get it to look remotely realistic; even now with mo-cap and bones and all the tech, it still looks totally fake (a big recent example for me is Thanos in the MCU who moves like a wooden puppet). It needs that ML layer to sit above everything and fix all the little details that make humans look human and move human.
I'm curious, what everyone considers far enough in the future for your code. Eg. are you willing to write code that puts nanoseconds in a 64 but number? That is "only" 584 years after epoch. Would you consider that ok?
> You can retire in -14.1 years at age 40

I'm very interested, where can I sign up for -14.1 years?
I read through a few pages and didn't get the most important question I have answered. How does this system avoid my identity being the private key itself, a thing which can be taken away?
Not to join in the lynching, but nvim is stable and healthy in terms of development velocity.

It's not as popular as vim per say, but it's definitely catching up. It's kinda silly to suggest otherwise.
It doesn't need to, its just a backend. Postfix lists 8 webmail options, but you could use any interface you can find.

http://www.postfix.org/addon.html#web
Hey looks like something that I am planning on building. Is there an email I can reach out to?
Where do you get your data from? Do bus riders provide the information after getting on the bus?
For calls that Nomorobo detects, you can have it just terminate them - it's the only reason I still happily pay for their annual sub. Sadly they aren't nearly as effective as they were a few years ago, but they still get probably 70% of the junk which still makes it worth it.
Can someone with RISC-V and CPU background do an ELI5 and why this is interesting/important?
You can do this for specific endpoints in Caddy, or whole domains/sites.

If you create a matcher like

@wp-admin {

path /wp-admin\*

path /wp-login\*

}

Then you can just service up that handler's endpoints:

handle @wp-admin {

basicauth {

username pwhash_goes_here

username2 pwhash2

}

# reverse proxy config etc, e.g.

reverse_proxy http://127.0.0.1:8080

}

And now only the wp-admin and wp-login endpoints are protected, but the rest of the site is unaffected.
I used vouch-proxy with nginx for something like this.

The nginx auth_request module authenticates each request against vouch-proxy before it executes the proxy_pass. Vouch-proxy can be configured to authenticate users against google apps or other oauth/iodc providers. And there are some options to pass along username, groups or other data as headers to the proxied service.
I got 0 on an OLED display at maximum brightness.

I think I did this test before on worse screens and didn't get 0...
A handful of prehistoric geniuses launched humanity's technological revoluti
This logic kind of reminds me one I heard where someone argumented why he needs a gun. It was because if his child is sick he thinks he should have his gun so he can hijack the plane to fly his kid to the place where he can be treated.
CDK + Fargate.
that sounds like a cool idea, and I'd love to hear more about it/potentially contribute -- how can I get in touch with you?
I can only hope so. This is a problem that has been on my mind for well over two decades.

I want to create a technology that will directly assist in the overthrow of every existing nation state. I would see each replaced with a smaller coalitions of independent states. Repeat until we get down to relatively local government. Any larger state should exist only as an emergent property of said local governments.

Ideally, this transition would be orderly and peaceful, but that’s not strictly necessary at this point. I would gladly suffer a period of violent anarchy than continue to suffer the global tyranny that currently defines human existence.

Unfortunately, I expect this comment does not reflect the majority view and will summarily be downvoted here. The governments of the world continue to provide either enough “bread and circuses” to placate those populations capable of such an uprising, or they already have implemented sufficiently overbearing authoritarian polices (e.g. gun confiscation, restrictions on speech) that it will never be an issue.
It can be used for either. Depends what you'd like to do. Maybe the domain is admin.mysite.com and so you want to wall the whole thing off. I've used it for specific endpoints as well though, like to protect certain folders of a file server.
You can do either. To Caddy, "entire domain" or "specific endpoints" are all the same thanks to request matchers. You can precisely customize which requests have basic auth applied to them: https://caddyserver.com/docs/caddyfile/matchers
I live in Montana. After a wildfire burned part of our house last year, my wife and I were living in our basement during renovations. It was terrible for some unknown reason… headaches, sharp dry skin. Couldn’t sleep. We had had a radon system installed the year previous, so we ruled that out for a while. Until, we finally re-tested and saw it was at 27 pCi/l. Apparently the installer had inadvertently added a p-trap to the outake and so nothing was exhausting. Anyways we got that fixed and now we feel fine down there.

My point being that radiation can be felt. I’d describe it as a high-pitched sound ringing beneath your skin…
What do you think of Gravenstein, ravenstine?
I've been in Portland the past month and have managed pretty fine on the public transit here. Its also quite affordable.

They could do more for sure, but all the bridges and roads that are now public transit only are quite the breath of fresh air.
> I like honey and nuclear weapons

I eat enough honey that I AM a nuclear weapon.
What if we took the unused school buses sitting around at night and had a school bus at every bar to take everyone home?
I could be missing something but they are not suggesting to use a javascript version but the version where the zero knowledge algorithm is used at the browser level. the password would never be outside the secure context of the browser and nothing other than the algorithm bits would be sent.
They'd have to get a law passed, control of the White House wouldn't be enough. I don't think they could get a copyright extension through again because the issues are better understood now and it couldn't be done quietly.
The article was doing okay until it used the word "just" in this sentence:

"even if we grossly inflated the death rate by using reported cases as a crude metric, it would still be just 1.4 percent"
Why do you think specifically this has to do with corporate interests?

Doesn’t Occam’s razor say that it’s just the fact the pandemic is destroying society and there is immense pressure from everywhere to accelerate usually very slow and bureaucratic processes because the risk reward ratio is completely different than the one for a vaccine for more contained diseases?
Hey, thanks for reaching out! I'd love to get in touch. Some of her work is pretty darn cool!

There's one caveat, which I should have made more clear. Since the game is based on a grid (i.e. tiles), the art will need to be sprite based, which is essentially pixel art. In my experience, this isn't every one's cup of tea, so Im making that clear now for her and everyone else!
That would be fine, sqlite takes care of correctly updating the db file, though i do need to ensure i'm writing from a single thread. And yes every update sends the whole block over, which is 1/4 of a MB (could've made it smaller but i felt that was small enough).
They said "huge success". Huge successes in text editors are Vim, Emacs and maybe Sublime. And do you have anything to backup your claims about neovim's popularity?
Somewhere like the Golden Gai, I'd absolutely expect that a Westerner would be waved away from some places. Some may even have signs up although I don't specifically remember.
Vim's Lua interface is through the remote plugins, so you could look for that.

Really not sure why you would want to though
If someone gets a copy of the encrypted traffic - and we know that 'full take' is being done routinely for some parts of the internet - the credential in the plaintext means that if they are ever able to decrypt it even weeks later, they can make fresh connections using the valid credential afterwards.

If the server issues a different challenge each time, decrypting one response doesn't buy you anything.
> If I was a hacker, I can add JavaScript to send plaintext somewhere. If I was a hacker, I could change the login form to stop hashing them client-side and instead send them over to the server for hashing and inspection.

If a zero knowledge (ZK) system combined with HTTP Basic was used, then account entry would come from the browser itself and not a web form that could be intercepted by JavaScript.

Further, a ZK system would help with the silliness of folks using bad algorithms (straight MD-5 / SHA-1) to store passwords, or even storing them in plain-text.
I encourage everyone eligible to protect themselves by getting vaccinated, but moving on is an entirely separate issue. We can move on as soon as people stop panicking and decide to accept the risks. In fact that's already happening in some states.

Strong circumstantial evidence indicates that another coronavirus HCoV-OC43 caused another worldwide pandemic starting in 1889. It killed a lot of people. There were no vaccines or effective treatments. The same virus is still endemic today; the only reason it doesn't kill many people today is that most of us get infected as youths and the resulting immunity protects us later in life. People moved on.

https://www.ncbi.nlm.nih.gov/pmc/articles/PMC7252012/

https://www.ncbi.nlm.nih.gov/pmc/articles/PMC544107/
> 64-bit solves so many perf and user-perceived reliability issues

I love how in tech everything is always evil one day and the next one nearly the panacea. Now I understand the timing component is actually not to get rid of entirely, in the sense that maybe a 64-bit VS would have been a bad idea the year AMD released x64, but among the stated reasons to stick to 32-bits not so long ago, and even one of the main, there was: performance.

I suspect the cold reality was that the code base was not ready and the migration just took some time :)
My project supports African founders to take their start-up to the next level. All the companies are in the agricultural and food sector, have a launched product and first revenue. By giving them customized support, we aim to make them invest them ready. The idea behind the whole project is that start-ups can solve real world issues. In our case, make small scale farming, value chains etc. more effective and thus increase the income of small hold farmers.
Since brain drain in Africa is a very real thing, our companies are always looking for experts who would could support them - could be just couple of hours per week or month.
Seems strange that there is only a factor of 2 between maximum allowed dose and lowest dose linked to cancer.
This kind of thing comes back once a while. You know what? Japan has extremely low birth rate! And very high suicide rate! No. It’s not a pleasant place to live. Not any big city, for a family with 2+ kids.
Interesting idea - but like some other posts here I'm wondering how exactly writes and concurrency would work - after all, a good amount of the complexity in traditional RDBMS stem from handling concurrent reads and writes.

Also of course data validation - the main reason why there is usually a layer between browser and DB is to restrict what a user can see and do. This seems difficult to implement here.

Also, if we're already exposing the DB directly to the world, why take the detour through SQLite and a custom file system layer?

Why not just use a traditional DB like MySQL or Postgres on the backend and a WASM SQL client on the frontend?
when I saw that post a year ago, i thought that you can postpone scale issues with a cdn for a good long while if you could find a mechanism to update the sqlite chunks in a predictable user-friendly way. it’s quite an innovation.

after some meditation, i opted to do something simpler. if i was going to delay the the write consistency anyway, it’s just easier for the user to just download a lagging html file. this definitely depends on the use case, but i avoid a lot of this wasm js complexity by just having the browser download a static eventually updated html file
I don't have an answer, I just wanted to share how foreign the idea seems to me. Not that it's necessarily unreasonable but it has never occurred to me to do this.
I think you're making the point.

North America is for the rich. There is no better place to be RICH (better than even Europe).

Western Europe is probably the best place in the world to be poor.

It seems that China is now the best place in the word to be middle class.

(I know very little about it, just basing it on the article and the other discussion here).

That the richest want to leave China for North America is not an indictment of China, it's an indictment of North America.
I don't know any school districts that have permanently been doing distance learning (though some, stupidly, are doing another round of it because of the omicron surge) and I have not heard of any restaurant capacity restrictions in my very blue, COVID conscious city.
I think he does not like to go with the flow, but instead implement things the way he thinks best suited and best performant with Vim. I don't think he cares about NeoVim.
As happenstance would have it, somehow I accidentally posted this part of my next post whilst still editing it. The fact that I cannot remove this error because of inane web policies illustrates the arcane nature of most forum software. (note: HN is not alone in this regard, it's typical of most.)

The relevant issue here is that the time of this post there is no other post in reply to this error and thus I ought to be able to remove it without disturbing any other part of the forum per se — ah but alas it's not possible as I've already exceeded some arbitrary time limit even though it has absolutely no relevance in this instance.

My full post further amplifies my reasons.
I use the Nomorobo app and I also add any spammers that manage to still get through to a contact I titled "DO NOT ANSWER". And as soon as Apple added the option I set that contact to go straight to voicemail. I must have a few thousand numbers in it now - freaking ridiculous.

Sadly with cheap VOIP numbers I rarely get more than one call from the same number - apparently it's too cheap and easy for them to buy new numbers to rotate through.
Twitter can be really useful for academia where the character limit forces you to condense the main points of your research into one or a couple of short bullet points. Together with a small gif and links to project page and arxiv, this makes it really easy to get attention for your work and follow that of others. Sometimes it is even possible yo start some meaningful discussions there.

You have to carefully curate who to follow though.
> including DNS requests

Don't be sure about that!

There's an additional setting to check to be sure dns goes through the proxy.

Can't recall the details now, but it's there!

Or maybe it was due to dns over tls not being proxied?
I hope you are kidding.

A compromised website that was well designed should not leak your password any more than a client-side hashing implementation. This is because the passwords are hashed in the database. Client-side hashing means that, yes, initially the website is not receiving plaintext passwords, but a few quick code edits to maybe add some logging JavaScript or disable the client-side hashing implementation will fix that.

And credential stuffing? Client-side hashing does absolutely nothing to prevent credential stuffing other than that you may need a GPU to do a lot of hashes quickly. Client-side hashing doesn't make a server handle more or less authentication requests.
> There's a reason the S&P went up almost 30% this year - a lot of it was an adjustment for the boost in money supply.

This is commonly repeated and feels like it doesn’t hold up to scrutiny.

2021 was the third time in a decade with ~30% returns.

https://www.macrotrends.net/2324/sp-500-historical-chart-dat...

Maybe it’s partly true but there’s no way that’s the whole explanation and if anything it’s probably just a better explanation for why last year wasn’t flat or negative.
I would love to change but neovin is just too useful for me.
I think those laws are designed for places with working emergency services. If there is an emergency, call an ambulance. Don't drive drunk.

Yes, sometimes ambulances are not very convenient - but if I had a choice of a person having to waste a few hours because ambulance took them to wrong hospital vs them driving quickly while drunk and nervous, I would choose former. I am sorry, your convinience is not worth the extra risks to bystanders.
"Faraday - the life" by James Hamilton, Harper Collins publishers, paperback 2003.
Prior to reading the book I knew Faraday was famous but this biography spelled out just how important his work was for humanity. Just 2 of his inventions are the electric generator and the electric motor. Imagine life without them.