skysight-inc/HackerNews huggingface dataset:
Indeed, I remember at my very first mushroom hunt I picked up some morels. After I went home and consulted my mushroom book there was no mistaken that what I had picked were indeed false morels. This autumn was third season, and I have yet to find a authentic morels though.
I’ve never heard Knots used on land. Sea and Air yes!
When They Warn of Rare Disorders, These Prenatal Tests Are Usually Wrong
I used to use Basic Auth for small personal/internal services, but these days I prefer a proxy like Traefik/NGINX with a simple authentication service like Authelia or Traefik Forward Auth.

It’s a little more work to setup but not much and there are a bunch of benefits: SSO across multiple services, control over session expiration, works better with password managers, 2FA, etc.
Agree with not disparaging, but disagree with having to know about the topics. Then again, that may be a sex based difference (assuming you're male): Women might be allowed more leeway about not knowing things, particularly when it comes to things like sports.

Admitting you don't know is fine, as long as you don't insinuate that you don't know because their interests are beneath you. There are lots of things I don't know, it doesn't mean those things are unimportant.
That's true, but I don't think it being illegal will have any bearing on whether it later becomes a threat to the ruling establishment.
> This bug was initially reported on August 10th

They had plenty of time. You did the right thing by disclosing.
This is cool but I hope they don't become too popular, otherwise we'll start getting a bunch of HN listicles started by buzzfeed staff that they can retread on their site.
No bullshit != janky.

Janky is 50MB of Javascript that doesn't load all at once so things jump around ocnstantly at the start, only to display 1/3 of the text of an article before you insert 3 ads but I won't know that until I click past the cookie warning and the "Please subscribe" popup that happens when I scroll more than 100 pixels.
I am very happy with the this caddy extension: https://github.com/greenpau/caddy-auth-portal.

Sorts this precise use case for me, need for common login provider. Without the banality of basic auth.
Correct. This was likely a flaps 15° (or maybe 20°) departure (being a heavy departure).
Trademarking the name can work out great for consumers if it keeps poorly grown apples out of stores.
Unfortunately, these calculators usually only do work for US citizen. I‘m from Europe (or Germany rather) where there are a lot of different factors needed to take into account in order to get a realistic number (legal pension fund etc.)
Given that they need to be sterile and dust-free when you use them... I don't think so. Otherwise you are just causing more problems for your eyes.
Versioning microservices in Gitlab monorepos and polyrepos
The furries can and do write Winnie the Pooh stories today. Nobody will stop them because those stories didn't have any sizable income potential to begin with. They live on furry web sites that don't catch the attention of IP lawyers.

What public domain enables is for-profit adaptations of Winnie the Pooh.
Past discussions over the years:

Does Visual Studio Rot the Mind? (2005) - https://news.ycombinator.com/item?id=22258198 - Feb 2020 (118 comments)

Does Visual Studio rot the mind? - https://news.ycombinator.com/item?id=3386102 - Dec 2011 (2 comments)

Do modern IDEs make us dumber? - https://news.ycombinator.com/item?id=387495 - Dec 2008 (37 comments)
Escapism is a helluva time.

If I find myself repeatedly checking the same app, I uninstall whatever app I check for a while to give me some space to figure out why. I always end up recovering, re-installing and continuing as normal. I wouldn’t say it’s a sign of weakness, it’s space that you need to figure out why you have the need to spend so much time on it.

Also, remember that these apps are actively designed to keep your attention for as long as possible. Algorithmic feeds, infinite scrolling.
Oops! Thank you, I lost track of the thread while scrolling back up! Please disregard, as I'd love to know what that bug is too
I love his attitude that people talk in the same kind of compulsive way that a squirrel stores nuts for the winter. Not to say it is mindless but that it isn’t rooted in philosophical consistency. Asking again and again “why” like Socrates doesn’t get to the truth it just gets us caught in circles.

Another unrelated Wittgenstein-ian point that I found enlightening in college is that in PL design you can’t design a language that stops people from writing incorrect programs. Statements can’t be correct as an inherent quality of their structure, they can only be correct in context of a goal.
As many people pointed out in the comments here, there are different expectations in this field - there is no common unwritten law about how it should work. If some people make wrong assumptions about it despite having access to the necessary information, it is really their fault. They are not the victims to be saved. If I run a deposit box, I do not offer it for free and I will empty it the moment payment stops. If I run a service with a free plan, I will keep the data as long as possible and will delete it only after economically justified period of inactivity. Contrary to the trials of paid subscriptions, free plans are not meant to be auto-deleted quickly, but since nobody pays for storage, business also cannot take obligation to keep the data of inactive accounts forever.
That said, read the T&Cs and do not assume that your understanding of „morality“ is right.
But we can still set a significance threshold. Your point applies equally to radiation exposure flying on an airplane but we don't worry about the cancer odds from a single flight since it's lower than the (already miniscule) odds of crashing.
The scenario that tends to be omitted from the deliberations is the scenario where 100 % of cars get an alco-lock, even though 95 % of the drivers have never driven drunk, but the manufacturer of the alco-lock has a nice racket producing them. Even more if some kind of certification is needed and only the Senator's cousin's firm was somehow able to be certificated in Sleepy Hollow state.

The quest for security is potentially endless and endlessly expensive.
The default sleep budget on my Dell is 30%. It's willing to spend 30% of the battery doing absolutely nothing useful with the lid closed. Who designed this...
Reclaiming Responsibility from Best Practices in Software Development
Skiing costs be really brutal, I grew up doing it but stopped because of the expense which is unfortunate
Misleading implies intent, no?
Apologies. Try this one:

https://www.newscientist.com/article/2294250-how-much-less-l...
I looked on my hard drive to see what I saved and there were two, other than the usual technical saves:

Why Hacker News Thinks PHP Won Something (2009)

https://news.ycombinator.com/item?id=438871

Unfortunately the article appears to have been scrubbed from gilesbowkett.blogspot.com and is not on the Wayback machine. Basically, the article trashes PHP and Hacker News, which I thought was interesting.

and

The company that has a monopoly on ice cream truck music (2020)

https://news.ycombinator.com/item?id=24744879
If “should” were a word that meant what people thinks it means, we wouldn’t need security at all.
2064: Read Only Memories
Sounds interesting! Maybe extend/improve/integrate desmos (used in khan academy by many), gnu octave, etc? Not sure if desmos has an offline version though.
There's a fair number of international members who speak English as a second (third, fourth) language. I try hard to be as unambiguous as possible to account for that.

Though I certainly don't always get it right.
Someone sarcastically asked if he'd won a difficult math competition due to his self-grandourous parent comment.

His response was, yes, yes he had won the difficult competition they referenced.
Hmmm, during your decade with subversion, did you ever try working with branches?
I have to say that I love vim, and super respect Bram and all the other contributors for everything that they have done for vim.

There just happens to be some technical choices in vim that I don't agree with / don't find appealing, where neovim happens to have made an alternate technical choice that I do agree with / find appealing. vim9script is one of them, which is highly relevant to the submission. I apologize if I came across as hating someone else's hard work.

My point isn't about being concerned about a specific issue with vim9script per say, it's vim9script itself. If Bram and a bunch of core vim devs were spending time on their _extremely_ valuable time on anything, the last thing I'd want it to be would be a vimscript offspring. That is just my opinion, and that is truly the extent of my opinion. Again, I apologize to Bram and the core devs if that came across as anything else.

I have used vim for more than 10 years now (neovim for just 2 of those years), and I expect to be using vim / neovim for the rest of my life. And having written some useful but niche plugins for vim, I felt like expressing my opinion here about the direction of vim / vimscript / vim9script wasn't unreasonable.
I don't see text messages/calling in the skills/features list, or using any other messaging apps. Are there any particular plans to build skills for these sorts of applications?

Also, doe sit use whichever speech engine you have installed for tts? I'm interested in using this primarily because I only use FOSS and up until now I've been going without a voice assistant, but I do use flite tts.
Please do not take HN threads into flamewar hell. This is way over the top.

We detached this subthread from https://news.ycombinator.com/item?id=29758807.
According to your README you require NET_ADMIN permissions and you are mapping the host /dev/net/tun into the container. Doesn’t this mean you are affecting the host network as well? Sorry not super familiar with Docker’s security model
Looks like the COVID vaccination policy of Canada[1]. Can’t really follow a rational discussion about it on social media.

Further comment:
"The policy that's being implemented is one in which no discussion of the risks is allowed...

But that's the backbone of informed consent...

Informed consent is not only not happening, it's being actively blocked."

- Dr. Robert Malone

[1] https://westernstandardonline.com/2021/12/trudeau-calls-the-...
Perhaps someone will make this point better (or point out my error) but I wanted to make a pithy observation:

Elizabeth Holmes is being prosecuted for hurting investors, these companies should be prosecuted for hurting people. They won’t be.
But I haven't stated my preference, one way or another :-)

The "bottom" judgement in "race to the bottom" was quoted from the OP.

For what it's worth, I personally contribute or have contributed to open source in all three forms that I identified. And exactly for the incentives listed.
Note that Python was already almost two decades when v3 got out and is now three decades old.
For those that don't know and were born after 2K Cowboy Neal is (was?) a moderator(owner?) over at slashdot.com. His name usually appears(ed?) with some snarky option on slashdot polls.
I don’t think he understands salts or really hashing at all and this is messing up the logic in his posts.
I love a few miles from the Hawarden airport and see these things fly over ever couple of days.
I love to watch them slowly fly over, they are beautiful and ugly at the same time
It was only ever approximately accurate anyway, a NM is no longer an arc minute because that is inconsistent even along lines of latitude, so it had to be pinned to 1.852km.

Aviation, broadly speaking, inherited all of its navigation techniques from the maritime world. In particular, prior to radio methods and to some extent today aviation navigation is based primarily on dead reckoning periodically corrected by observations, which is a technique that was pioneered in marine navigation. Since early pilots learned to navigate from seafarers, their units and conventions became strongly embedded in the field. It is, after all, still not unusual to refer to an aircraft as a ship, especially informally.
I’d wager sanj@ is a sibling of Ravi Vakil, from a quick LinkedIn search. Still, a little perplexing appeal to authority there.
Now we can make money on our Wittgenstein fanfic.
> Both can occur but the first one is more problematic: I want to take out the rubbish but it feels like torture to force myself to start the task. It's not something easy to explain if you haven't experienced it, but it feels something like there's an invisible wall that prevents me from starting.

I have had that experience and I know others who have it too. From my point of view that wall is me not wanting to do the task. The idea that I want to is not the same as actually wanting to. If I stop thinking that I want to do the task, and just do what I actually want to, then I will do a lot of different things, one of which will be taking out the trash.

The same goes for to-do lists. If I put things on a to-do list, it is almost impossible for me to make myself do any of them, let alone in order.

If instead I write them down on the list, but then just let myself do whatever is in front of me that feels like I can easily do, then things will simply chain together and I’ll find that I’ve done the things on the to-do list along with a l bunch of other turns that turn out to have been worth doing to.

> On meds there is almost no wall. I simply choose to do something and start doing it. It feels miraculous to me. Society has nothing to do with it.

In my view society has everything to do with thinking we need to do things in a linear fashion. I don’t dispute that meds will help you do that, nor do I dispute that work may require that you do it.

I do dispute that we need to operate that way.
“Backend” can refer to a lot of different things. What specific kinds of problems are you wanting to learn more about?

Without more details, you’ll probably get folks recommending whatever language they prefer - to do whatever it is they’re doing on the backend. It’s not necessarily what you care about.

And to be a “senior” developer implies you’re wanting to make use of this at some company.

Again, what is the expectation of the role? Writing services in Go or Java to handle FANG scale traffic is different than building a backend workflow that migrates data from one system into another at some recurring cadence.

One book that I think has a lot of value for different backend problems is “Designing Data Intensive Applications” by Martin Kleppman. It’ll help you build a foundation of the different varieties of architecture and problem spaces in this area and a toolkit on how to think about them.
Brown dwarf? Some sputtering early attempts at fusion, but not enough to become self-sustaining.

13 Mj is on the low side of the definition. It's not a definitive number and goes as high as 80 Mj, depending who you ask.
It depends if you have pretrained models or not.

Huggingface offers a few models that are pre-trained [0], OpenNMT is a good framework [1] as is MarianMT [2]. Many of the best MarianMT models have been ported to HuggingFace.

If you don't want to self host, huggingface offers these APIs at a cost.

[0]: https://huggingface.co/models?pipeline_tag=translation
[1]: https://opennmt.net/
[2]: https://marian-nmt.github.io/
>"mass detention of minorities". It's Saddam-has-WMDs-and-is-allied-with-al-Qaeda

These aren't equivalent. We have plenty of evidence of the Uyghur genocide from 3rd party journalists and satellite imagery. The only evidence for WMDs came directly from a new government agency (named "Office of Special Plans") created by Dick Cheney and not independently verified by any 3rd parties.
Gee, it’s almost like on the internet there are computers between you and the destination.
I used to want to retire early and ASAP, firmly in the "lean fire" category.

Then I found a job which pays significantly under market but that I actually enjoy doing. My priorities have changed a lot.

Unfortunately said job is highly unstable and provides little opportunity for transferrable skills, so I still aim for a 50% savings rate, for peace of mind.
And now you are coming to the understanding that the first amendment is being weaponized against us. They're hacking our minds through emotions (especially anger) and imagery to further their funders corporate goals. I see no solution but having some regulation. They can be sued in the legal system for defamation, why not start with that as the bare minimum of conduct when reporting the news?
It doesn't.. tested on Windows (WSL) and MacOS.
The part that matters is that 'run of the mill' monocrystalline solar panels, not exotic ones such as triple junction and other very expensive cells have been roughly steady over the last decade or so at 20% give or take, with their polycrystalline brethren doing a slightly worse.

There are prototypes and special application cells that do much better than that, but they are typically priced in such a way that you would never use them in a regular domestic application. But for a satellite or something else where price isn't your first consideration (but for instance weight is) they may well make good sense.

FWIW I have been following the renewables scene very closely for two decades, have built a house on solar and wind power in Canada and am in the process of converting a house here in NL to as close to self sufficient as I can make it without rebuilding it from the ground up.
The Stupid Pattern I encounter most is getting e-mail about some account, with a link in it to some completely-other domain that looks most like a phishing site.

Often these e-mails are not actual phishing attempts, they are just things made by absolutely phenomenally clueless hacks.

So there is this company that does e-mail list services called mailchimp. Apparently, by default all e-mail from their customers comes with links to a site something like "mandrill.com".

If mailchimp is that clueless about security, do you really want to let them manage your password login setups?

There is a stock-market accounts company, Carta, that uses mailchimp.

Do you really want your stock market holdings managed by a company clueless enough to let someone as clueless as mailchimp to manage their password login setup?
> I don't think passengers would have noticed this as anything other than a regular takeoff

It looks like the aircraft didn't leave the runway until the runway safety area at the end. That is something any passenger looking out the window could notice. A normal takeoff has the aircraft leaving the runway well before the end.
> No, none of the connectivity is because of Facebook. They didn't build the connectivity; they're a parasite on it.

That doesn't make sense.

If Facebook was purely parasitic in these deals, people would just buy regular internet subscriptions (yes, there are counter-arguments to that, but the general principle holds). The fact that they don't implies that there are large swathes of people who can't afford internet subscriptions, and therefore would not get any of the benefits of one without Facebook.
I don't know why people are assuming the attacker:

A) Controls the code running the auth API

B) Controls the javascript

As if that's the common attack.

The common attack is that the attacker has a read on the hash, either through injection vulnerabilities or other leaks.

Your attacker, as described, has remote code execution on a server that hosts the auth API and the Javascript in one place. That is a very specific, powerful attacker!

> but I just can't think of a threat model where this makes sense

1. An attacker has CSRF and can trick your code into sending the hash to them. This significantly reduces the harm of that attack.

2. An attacker has an injection vulnerability giving them read access to hashes ie: sql injection, perhaps the most significant and relevant attack to discuss with passwords.

3. An attacker takes advantage of a timing attack, bruteforcing the server and measuring response times to leak its value. They can now only leak the hashed value, which is going to take way longer to leak and doesn't expose their password.

And more!

This defense tackles what are very very arguably the major threats to consider with regards to password security (they're the big ones in OWASP top 10).

> It can make stealing passwords more difficult for criminals if every website uses their own bespoke password processing script, but that'll also add a huge attack surface to your code and it'll be a burden to maintain.

You can significantly reduce harm and attack surface with all of 3 lines in your frontend code.

salt = hash(username + static_salt)
password_hash = pbkdf2(plaintext_password, salt)

it's trivial to implement this.

I'll grant you that PAKEs may be more complex to implement today, but even if we talk about a very basic implementation of client side hashing I think there's obvious value.
Switched to Fastmail recently, and it is a 1000x better at search and speed than any other platform I've ever tried. Their filtering, sending identifies, multiple domain support (and not charging extra for it!), spam detection is insanely good.
> The goal of trademark is to protect one's reputation by preventing other people from attributing work to you that you did not authorize.

I wouldn't put it that way. Trademark [0]:

* Identifies the source of your goods or services.
* Provides legal protection for your brand.
* Helps you guard against counterfeiting and fraud.

> consumer confusion

Yes, preventing consumer confusion is an important reason for trademark laws to exist, as a protection against counterfeiting and fraud.

[0] https://www.uspto.gov/trademarks/basics/what-trademark
Please don't post flamewar comments like this. It just takes threads further into flamewar hell—exactly what we don't want here.

https://news.ycombinator.com/newsguidelines.html

(We detached this subthread from https://news.ycombinator.com/item?id=29758995.)
I think there's currently a pilot shortage, and that leads to scary thoughts...
So 90% does remove Covid as an ongoing concern? That's encouraging. If you live in Malta, my condolences on dealing with restrictions that, on face value, are overly fearful and internally inconsistent.
Too late to edit, I->It
I have set up a complex neovim configuration, but I don’t use it.

Why? Because there’s not a _single_ neovim client that is as good as MacVim.app. I paid for Oni2 (I regret that; it’s _not_ a vim replacement). I have contributed code and time to helping a couple of other GUIs fix their issues. But they are all crap compared to MacVim.app.

Until that is fixed, I don’t think that there’s a good reason to consider switching.
The part where you say "cash out" is hilarious. There is no cash in it. You only get to keep the bits. Any cash comes from buyers and if there is any attack all the buyers are scared away.
There's a lot more to that. A bank doesn't want the "back" button to work forever; they want to control the lifetime of your session, ideally on the server. Google wants to let you sign into multiple accounts on the same origin. Many others want to have seamless single sign-on across several of their web properties. Sometimes, you want the change of your password to invalidate other sessions (say, when recovering a compromised account); other times, you don't want to kick out your smart thermostat and have to set it up from scratch.

Admittedly, there are some simple use cases where HTTP auth is all you need, but it's just way too inflexible, unless you turn it into some mammoth spec that is never going to be as flexible and tempting as managing user identity yourself.

Especially since HTTP auth doesn't actually mean you can stop doing that anyway. You're still handling account creation, password checking, all the abuse / bot detection bits... all you're getting rid of is the sign-on and logout functionality, which is really not that complicated to begin with.
Yes, I do. It was merged to master a month ago.
You're forgetting that Japan is earthquake country.