skysight-inc/HackerNews huggingface dataset:
Semi-related, one of my favorite posts on UTC. Seems simple to use until it’s not.

https://zachholman.com/talk/utc-is-enough-for-everyone-right
Yes, now add: MSX, Sinclair ZX Spectrum, Atari 8-bit computers, Amstrad CPC, Acorn BBC Micro, Tandy Color Computer, Tandy TRS-80.
Why? We are talking about a specific case.

Don’t get me wrong, I love generality, but it’s clear that the trees don’t let you see the forest here.

Sellers were as greedy before the price rise, so greed is not the cause.

The difference here is that:
1) Supply difficulties mean there’s less in offer.
2) crypto miners have strong demand, since they can make money on those gpus.

I would argue that the market is working fairly well, since gpus are being allocated for their best use. Gaming is great, but people seem to really love their eth.
Instrument noise, background radiation, and measurement accuracy are three different completely different things.
These calculators never account for portfolio volatility.
This is wonderful in simultaneously helping to explicate Wittgenstein, Rust, and 2-D graphics. Thank you.
Right - but that's been resolved, PHP and others now store the unique salt used with the password together, so every password has its own salt.

That didn't need client-side hashing to fix it.
Shameless plug my Hacker News TUI app [1] here. I recently released a new version `v0.9.0` [2].

[1]: https://github.com/aome510/hackernews-TUI

[2]: https://github.com/aome510/hackernews-TUI/releases/tag/v0.9....
I’m working on this. One of the projects part if this journey is https://www.syncedstore.org which was recently on HN (https://news.ycombinator.com/item?id=29483913). Shoot me a message to collaborate on this or similar stuff!
I mean I saw a lot of people saying they can use FTP and this and that but people moved on from FTP to hosting files on other sites back then like RapidShare, MegaUpload and so on. I know I used to share code and projects on RapidShare before it disappeared.

I do agree there are biases and sometimes people miss that they are commenting not from the perspective of the general population. Its nice you can setup ftp and this and that, but the common man has no time or interest for that. They want easy to use. Look at Facebook, the top way to share family photos and even holiday cards. I can only imagine without Facebook we would see way more holiday cards.
https://news.ycombinator.com/item?id=29691039

make half a million dollars per year total comp, duh.
> I think the main place I've seen where the mental model of "commits are diffs" breaks down and actually leads to significant confusion and/or mistakes, is when the tree ends up in a weird state, such as in the middle of resolving a merge conflict.

Not really?

With git you just keep track of three things:

1. The actual committed code
2. Code that's in the staging area
3. Code on disk right now

(git has official names for these but I forget)

Then during a rebase, if there a conflict, the base comes from the parent of the commit (in 1) you are applying the new commit on top of and the conflict is basically how the new commit makes changes w.r.t to the latest commit in 1. This conflict is written to 3 for files that are in conflict (and to 2 for files that aren't) and then you can resolve the conflict in 3, move the new code to 2 and commit that to 1. You can think of all of it in terms of diffs.
It does work best on a well calibrated screen. I can get 0 on a good desktop display, but on this phone with the brightness down and colour temp adjusted to match the ambient light I got a 4, and I can see that those sections of the colour wheel are getting crushed by the screen adjustment.
It wouldn't be safe against an someone who actively tries to hide code, but the classloader requires the class files to be appropriately named, so if unzip -l doesn't show any suspect class names that should be enough in practice.

A Linux VPS running a Node app is unlikely to even have Java installed. It's a pretty big dependency and you couldn't miss it.
It only supports a single user/pass pair for each site. There are many cases where you would want to use multiple identifies and switch between them.
2022 and draggable is still a mess.
I'm not so sure this would work. Yes, SQLite will do its best to synchronize the requests, but that's all built on the assumption the file exists on a normal file system with locks, consistency, etc. However, this is not the case here.

At the very least, you'd have to emulate file locks on the HTTP layer - and deal with the problem of requests being delayed, getting losts, clients suddenly vanishing, etc.

> though i do need to ensure i'm writing from a single thread.

But how would you do that? This being a web app, it's hard to ensure you're even writing from a single machine.
Your exposure to inflation is limited to cash balances, and therefore shouldn't a big concern. A bigger problem is, in my opinion, the low interest rates, because that means you'll be forced to take on risk (e.g. invest in stocks, rather than treasuries) if you want to get any meaningful return on you investments.
Ugh
So many this.

Looks like most news are just thermal noise from the wires leading to the (apparently missing) sensors that is then ran through the google translate or somthing.

+/- a couple hundred or uRh? Pfew. You can have like 1-2Rh and never even notice it.
Seems like a great idea, what exactly is the MVP? I've thought about doing the same from time to time, doing as shell script seems like a nifty idea but possibly a little more work for the author. Curious if there are multiple steps adding to the same file how you would approach that.
> Accidental logging?

Yes, it happens all the time that passwords get logged.

> I mean, I guess, but then just set up your logs correctly instead of breaking login for anyone without JavaScript.

I have no idea what "set up your logs correctly" is supposed to mean but clearly no one's doing it. What is a "clean log" ?

> If I was a hacker, I can add JavaScript to send plaintext somewhere. If I was a hacker, I could change the login form to stop hashing them client-side and instead send them over to the server for hashing and inspection.

This assumes you have full control over the client page. But that's not necessarily (or often? most people don't serve JS from the same code that serves their auth API) the case.

1. The JS could be loaded from a CDN, not the same service that has access to the password. You may have absolutely no control over the JS on the page.

2. Every point between the browser and the password DB is a point where the password is in cleartext. So a compromise of any of those, including any logging paths, is a compromise of the password.

3. I don't think anyone cares about breaking login for users who don't use JS, nor should they.

What's more, ZKP means that if your password database is owned the impact is far less. If you're doing things right for password storage on top of ZKP you can practically make your password db public.

Even if we're talking about a basic client side hashing approach you're significantly improving security, but to be clear, the parent poster is talking about ZKPs, which involve more than that.
They could revoke the land line companies authorizations too.

The problem is it's a complex issue affecting millions if not billions of what is now legacy phone equipment that would have to probably be replaced. And for land lines that's a dying market - no one in their right mind would want to modernize infrastructure that's more than likely on it's way out. Might be able to get cell phone providers attention far easier.

Both groups have significant lobbying presences, I'm sure, so it will continue to be a pitched battle - but if it's ever going to be a traceable/solvable problem the fundamental protocols used between phone exchanges are going to have to be beefed up with spoofing in mind. Before VOIP and the number porting rules others have referenced in this thread it was nigh impossible to spoof numbers because each phone company owned their own block and that was that. Now any number can be held by any phone provider - the horse is out of the barn :p
It is frustrating on Safari as well.
There’s also those studies that indicate prolonged sleep deprivation might help reduce depression. Maybe after a long stint of wakefulness, in the wee hours the depressed shift back to being non-depressed!
Picked up a color gradient jigsaw puzzle a few years back. I recommend it, just because the experience is so interesting.
Loggy McLogface

Like the other Google project, Bloaty McBloatface.

https://github.com/google/bloaty
Would you say more? What that suggests to me is the authority responsible for setting the max allowed said “Well let’s keep it below the threshold linked to cancer, reduce it by half for safety factor, and call it a day”. IE they chose one of the simplest possible approaches- doesn’t seem surprising, but I am probably missing your point.
Majority of the illusions seem to be 2D object projected as 3D object, they still get me every-time though. Definitely would recommend a game called Superliminal if this kind of stuff gets you.
PAKE isn't theoretical at all and the post you're responding to didn't say client side hashing it said zero knowledge proofs.
It’s actually why I’m reluctant to stay in an Airbnb. Fake smoke detectors and alarm clocks, for example, can house a small camera and oftentimes there’s unmonitored residential WiFi where the camera can freely upload 24/7.

https://www.independent.co.uk/travel/news-and-advice/airbnb-...
I don't understand it but it looks like an extension for 64k hugepages?
One non-technical advantage is prototyping.

Going this route says to the consulting client: this is NOT the full solution. This is only work-in-progress. If you treat this as the final delivery and deploy this to prod, you're making a big mistake.

Not that I've ever seen that happen, mind you.
They could also just do a reverse DNS lookup on the IP (and then forward lookup to confirm it).

This would be less effective for sites run through CDNs (ex Cloudflare) though.
Newly added to F-Droid: https://f-droid.org/en/packages/org.dicio.dicio_android/

To choose Dicio as your default digital assistant on Android (replacing Google Assistant), go to Settings > Apps & notifications > Default apps > Digital assistant app > Default digital assistant app. On Android 10+, this lets you activate Dicio by swiping from the bottom left/right corner toward the center of the screen.
I've been building iOS apps as a solo builder for nine years and definitely agree that it gets lonely, both in the development of it and then waiting for users to stumble across it.

Maybe its time to focus on marketing and product fit ;-)
> So you should definitely pretend to find the latest reality show as interesting as the most recent ball game because otherwise you "have no social skills."

This is not true. You are actually fine saying "I had not seen it" or "I did not liked it". People who are not interested in sport navigate these conversations without pretending. If you bluff, you will come across as weird, because you will say something clearly wrong.
Amazon cognito?
One of the sources of value for money is the fact that you can pay your taxes with it. Why accept a random symbol in exchange for goods? Today we put emphasis on value tax and income tax, but if those become unreasonable hard to collect, taxing observable properties would be the solution.

Imagine going to a restaurant and paying with untraceable bitcoin, the owner however has to pay a tax proportional to the number of chairs. In order to pay they have convert bitcoin to something the state accepts.
> About your score: A lower score is better, with ZERO being a perfect score.
I think there is some concern among some people in the rust community that amazon will gain more influence over the steering of rust to guide it towards it's own walled garden.

I don't share that sentiment and I personally think that as amazon adopts rust it will gain rust community principles. But I'm probably wrong.
So there’s a server which accepts arbitrary writes to the database? And maps HTTP ranges to arbitrary database chunks?

Are we just completely relying on the client for security here? (i.e. no security at all?) Is this only for use cases where you have a whole database per user, and effectively a single security domain for the whole db? Because otherwise it smells very insecure to me…
Have used Fastmail for many years, recommend it and consider a good reason to not use Gmail is increased privacy. Also Google searches are `tailored' so that they may be financially advantaged by your choice.
Firefox and brave worked fine for me on my phone. Maybe you're the victim of a bad device?
> Apple can’t do it. You probably can’t do it much better.

This made me laugh out loud. I’m genuinely curious what compels someone to write an article like this. People write C/C++ because they’re either paid to do so or it brings them joy. Just like literally every language that has ever existed or will ever exist.
If you haven't already, check out the "Projection method" drop down. If that isn't accounting for portfolio volatility, can you explain how it should do so?
> About your score: A lower score is better, with ZERO being a perfect score.

I got a 2 as well.
On a coffee tour, will get back to you later.

Jk, its the freedom from having to be present that makes retirement worthwhile. I still love tech and I still want to blog, read and talk about tech. I just don't want to waste my life on bullshit meetings and work that is meant to impress some management.
Yup, illegal grave robbing in the south pacific is destroying many ships that were lost with hands onboard. https://www.theguardian.com/world/ng-interactive/2017/nov/03...
>Only a handful of people have died from nuclear.

I accept that statement only when it's followed by ' so far as you know.'

[https://www.atomicheritage.org/history/atomic-veterans-1946-...]

[https://www.nytimes.com/1994/08/25/us/us-nuclear-accident-in...]
> but that's all built on the assumption the file exists on a normal file system with locks, consistency, etc. However, this is not the case here.

It is the case here. Writes are happening on a normal linux VPS, and subsequently copied to S3. The read-only queries are using the HTTP VFS. It would be incredibly bad to enable direct writes to a db from arbitrary clients.
> What is bad faith is to tell people not to look at the contradictory results. If you choose not to look at results that don’t confirm your view, then of course you will think there is a consensus.

The only person who has told anyone not to look at anything is you. If you can find somewhere where I am telling people not to look at things, then you might have a point.

> My primary goal here is to demonstrate publicly that you're an uninformed crank who doesn't know the subject,

Inspector Javert enters stage right!

> so that parents don't deny potentially life-changing medication to their kids.

Noble, but you haven’t demonstrated that. You’ve made some unsubstantiated claims to your own expertise on the subject but otherwise you are just another commenter on the internet, who is a strong advocate for medications.

You say, ‘potentially life changing’, and of course there are people who have that experience. But you say potentially, because it would be a lie to claim certainty.

> lower rates of substance abuse in adulthood, higher rates of academic achievement (as in graduation rates/highest level of degree attained), visible normalization of volume in areas of the prefrontal cortex associated with executive functioning compared to healthy controls.

None of which can be attributed directly to the effects of medication. Substance abuse and lower executive function are well established sequelae of adverse childhood experiences.

It’s fairly easy to see that if drugs make kids easier for schools and families to manage, then they will have fewer adverse experiences, so there is a causal pathway that supports this outcome.

And frankly if you as a family can’t handle an ADHD kid, or find suitable education for them, such that you won’t end up problematizing them, then indeed medications will be a benefit.

Nobody is questioning that.

However a singleminded focus on medication, a denial of the trade-offs, and a refusal to consider the context, means we can only look at it from this dismal perspective, and renders us incapable of recognizing that medication is not in fact positive for everyone with ADHD.

We know that there is a wide range of different relationships to medication use chosen by diagnosed adults. By no means all of them choose to use it as their only tool, or even at all.

I know you are focused on defending medication, but I think you’re doing so to the exclusion of every other consideration, and it’s not clear why.
I think the intensity matters: my Irish ancestors weren’t considered white when they got here but there wasn’t a mass exodus from cities rather than sharing infrastructure, and they were allowed into whiteness over time (especially when large numbers of cops were needed to police black populations). The ones who served in the military weren’t restricted to certain units and duties, etc. When white people moved to the suburbs, the neighborhoods which were razed to make highways had a very uneven distribution.

That’s definitely not perfect (and it’s like, say, Chinatowns weren’t raided or sacked) but that option of coexistence wasn’t on offer in much of the country.
I have a very common name, and was lucky(?) enough to have gotten a gmail account with it back in the days you had to have an invite from a Google employee to get a gmail account.

I get misdirected emails like this at least multiple times a week.
Anyone know about issues with the log4net.dll? Last major version was 2.0.14, so it wouldn't have the fixes.
> It's all too easy to open a blocked tweet in Incognito Mode, take a screenshot, add negative comment, and hit post.

Which highlights just how confused Twitter is about what they want the "block" feature to be. As I like to say, Twitter is the only website where I get more permissions to view content if I log out.

Imagine if your copy of the daily newspaper came with some stories greyed out because the authors of those stories saw something you said online once and decided they didn't like you, so now your paper comes with their stories hidden. But have no fear! You can just log out and read those stores.

What a weird feature.
Nice! Looks pretty good as long as I stay here in Central-Eastern Europe and live a minimalist lifestyle. (Buy second-hand clothing, used gadgets, no car as long as possible etc.)

Actually promoting a materially minimalist life is very healthy, because - as long as it's voluntary - it lets one focus on maximizing happiness not coming from material possessions.
Widevinedump/Anystream-Exposed: How Anystream Sucked Discord Trolls to Target Me
At least simulated by our brain. Most would say filtered but what is the difference?
> So there’s a server which accepts arbitrary writes to the database?

No, all writes have to go through a normal POST endpoint, it does not accept arbitrary writes from clients.
Got a zero on a cheap kindle fire but when I wanted to check the gradients in each row I had to look at the display at a somewhat oblique angle.
If you are on iOS 13 or higher you can: https://support.apple.com/guide/iphone/avoid-unwanted-calls-...

Scroll down to the last section "Send unknown and spam callers to voicemail". You want to activate the Silence Unknown Callers feature.

Go to Settings > Phone, then tap any of the following:

Silence Unknown Callers: You get notifications for calls from people in your contacts, recent outgoing calls, and Siri Suggestions.

Call Blocking & Identification: Turn on Silence Junk Callers (available with certain carriers) to silence calls identified by your carrier as potential spam or fraud.
There are any number of substances where there’s little doubt that they can cause cancer even at minuscule doses, just at similarly low rates. Get enough data and you will find that a single whiff of tobacco smoke (or any other smoke) can cause cancer. The “lowest dose linked to cancer” is the result of our ability to measure such effects, not anything intrinsic to the harm these substances do.

That’s specific for cancer. For other forms of toxicity, the concept of “maximum safe dosage” does make sense when the dose/effect relationship is not linear. Pharmaceuticals, for example, can be entirely benign at small dosages yet lethal if you overdose.
I put stuff in config.py

Then I just `import` at will.

The need for a separate configuration format was what, again?
I think second party controls are probably the reason why browser intermediated login was never pursued until the present era of password management--the browser is a third party that can facilitate/intermediate communication between the first party (user) and second party (website). It would be foolish for a website operator to hand their users over to Microsoft back in the day, just as "social login" is a convenience/optimization trap today.
What is authentication for? What is it protecting?

Sometimes the effort and expense protecting a thing is more than the value of the thing protected. Often there is nothing really to protect, "authentication" is just administrative convenience.

So simple is best. Cheep and cheerful!
Those ports are commonly exposed when using a web hosting provider. Visiting above IP serves with TLS cert for Siteground, which is a popular provider.
I would like to hear more from people with experience living in Moscow. All of my impressions so far are negative: brutal winters, lawless driving, organized crime - but I think this is due to my relative ignorance. I'm genuinely interested as it's one of the top cities on my travel list
Intresting idea, this kind implementation would have prevented password leak from something like Cloudbleed[0]

[0] https://en.m.wikipedia.org/wiki/Cloudbleed
Is restricting passengers worth it?
I laugh also at the term "African-American". The biggest problem with that term is that Africa is a VERY LARGE continent, and has people of all different races, colors and physical characteristics.

Ferinstance, the Berbers of Morocco in north Africa are pale-skinned and blue-eyed. If their children end up in the US, would they also be called African-American? Similarly from South Africa at the other end of the African continent, the Boers are descendants of Dutch farmers. They also are pale-skinned and blue-eyed. Are they not African-Americans when they migrate to the US?

If people are black-skinned, or white-skinned, or rust-skinned it's not a problem with Political Correctness to state that fact.

There is a perfectly good word for people with black skin that has been made a derogatory term. It's time that word was reinstated. It is 'negro' which very simply means 'black' in Spanish and Portuguese. It is no more and no less derogatory than the English word 'white' to indicate white-skinned people.

It's time we grew up.
What is Wittgenstein on Rules and Private Language if not this?
There was a thread earlier about a user who built tools to download videos from various streaming services in 4k [0]. Apparently they are being targeted.

0: https://news.ycombinator.com/item?id=29718556
No. The JAR could be inside a WAR inside an EAR.