skysight-inc/HackerNews huggingface dataset:
Copyright law in the US has a preemption clause specifically intended to prohibit people from constructing copyright-shaped legal claims out of things that aren't actually copyrightable[0]. So you probably couldn't sue someone for trademark infringement purely because they stuck a hypothetically public domain Mickey Mouse in an otherwise unrelated book, or remixed the crap out of Steamboat Willie. As long as you avoided implying that your work was an official Disney product, they probably wouldn't have a claim.

What you would have to worry about is the split between public-domain Mickey and copyrighted Mickey. The minimum standard for copyright infringement is access plus substantial similarity, so you'd have to make sure to either...

1. Only ever watch public-domain Mickey Mouse shorts, and hope nobody can argue access to the still-copyrighted works. This sort of sequestration would be rather difficult to pull off; though fortunately the whole "inverse ratio" nonsense that got Katy Perry in trouble has been overturned.

2. Intentionally watch all of the copyrighted shorts and use that knowledge as a guide of "what not to do". What actually constitutes substantial similarity is rather difficult; it's typically something juries decide on a case-by-case basis.

You'd be best protected if you were doing something entirely different to what Disney was doing with his[1] own characters. The idea behind substantial similarity is that if I can squint at your copy a little and see the copyrighted original, then you're not legally distant enough to be a separate work. So you want to make sure to keep novelty in mind when reusing old Disney works. Things that would be "obvious to try" likely have already been tried and are thus still under copyright[2].

[0] The intended target of copyright preemption was actually state law; pre-1973 states had their own legal regimes for sound recordings which didn't get struck down until just today. Interestingly enough these common-law sound recording regimes also sidestepped the whole "for limited times" things and were actually perpetual in some states. That's why so much music is hitting the public domain today.

[1] Historians of early American animation would probably argue that Disney did not create Mickey Mouse, but that Ub Iwerks did. This is correct; but you must also remember Walt Disney's villain origin story of having Ub's prior work on Oswald taken from him. Disney insisted on copyright assignment or work-for-hire status for everything afterwards, and that's what actually matters legally.

[2] This is the same reason why it's legally perilous to use public-domain Sherlock Holmes as a character; the stories where Arthur Conan Doyle decided to let Sherlock emote are still under copyright, so the character's emotions are copyrighted, too. This is an absolutely silly legal argument that the Doyle estate has actively pursued in court.
Shameless plug to my own version of this: http://mngo.org/fire
Actually visual JavaScript which you can find at yazz.com has done this for over two years where you can save a full html backed SQLite database app as a single page html file
One measure is the number of stars on github and active contributors 49.7k vs 25.7k and 737 vs 79. The other measure can be the number of new extensions being written for each of them (particularly extremely high quality ones like telescope). Searching `nvim` on github yields many plugins which are advertising the Neovim editor by having it in their name, some of these are even ones which support vim e.g. Shougo/denite.nvim all of which point to the fact that neovim is a huge success and is on tract to overtake vim. It would not be an exaggeration to say that a lot if this is due to first class lua support in Neovim. By adding nice features like treesitter and LSP it has become an improved version of vim, an editor that actually understands the code being edited beyond simple text objects (e.g. https://youtu.be/E4uaPs9e9UU?t=68)
How we Lost the Future
On the other hand if crypto is "too slow" applications will more often decide to use a non-cryptographic primative instead. If it turns out that they actually did need cryptographic security, or something later starts relying on some "random" value that turns out to not be securely random then you end up with a vulnerability.

If you make cryptography "fast enough" to be used by default and without much worry than you remove the need to make this decision.

This use case is a perfect example. If you make the kernel RNG fast enough that people just use it instead of trying to make their own decision about what algorithm to use you end up with software that is more secure overall.

Plus since the kernel RNG isn't specified to use a specific algorithm so it could potentially be tuned based on your paranoia level and patched if the current algorithms are found to be insecure. If it is "too slow" less software use it and these features will be less useful.
According to the latest Stack Overflow developer survey, neovim is used by almost as many people as Emacs is[1].

By your own definition, Emacs is a “huge success”, therefore I’d expect you to extend that description to nvim, too.

[1]: https://insights.stackoverflow.com/survey/2021#section-most-...
I wish there was a nicer way to integrate multiple languages together. Like if you could somehow transpile perfectly (or pick a really neat abstraction w/o optimizations) that preserves a general implementation.

Seems impossible but I wish there was a nice solution so people can use a variety of languages seamlessly without worrying about refactors and semantics. Almost like picking database views in Notion but for languages itself.
The problem is not with small projects. Who cares if it gets hacked. The problem is with real life SSO. If you used a 100 apps and 1 gets hacked then you have to change the other 99 passwords. Sound bad right? That is why you should not use basic auth and use openid connect or similar tech.

Sometimes it is a bank, and no SSO involved. It is not well understood but SSL has termination points. E.g. the gateway and each gateway all thru the last layers. SSL becomes vulnerable at these termination points. If basic auth is used, then you just lost a whole lot of cash. Otherwise use challenge response, encrypted passwords within the SSL, and all kind of out of this world tech for risk assessment. Basic auth? Really?
Brutal attitude, also wrong. 2 degrees warming is probably inevitable at this point. Not great. But 3 degrees is much worse than 2, and 4 is much worse than 3, etc. There’s no concept of losing, just how bad it will get for future generations.
I’ve been staring at this for a couple hours, trying to understand it, finally the stack denotation made sense to me, it is fascinating! But then he completely lost me at “This is not a Functor morphism!”, maybe I’ll come back another day to try to make sense of it
Their Thelio hardware is off the shelf, mine has a regular Gigabyte board.
How the science of motivation helps with New Year’s resolutions
https://archive.is/JUh1D
I am looking to collect databases from real businesses and business-like entities, including those that have failed or otherwise become "past-tense". Read on if you or someone you know might have access to such things.

Background:
I'm a data engineer with about 16 years in the industry under my belt. Something that's always frustrated me about the way that we design and build systems, is the way that knowledge fails to diffuse through the industry, because we don't study what we do, and especially we don't study our failures.

As an example, the 2010s witnessed the full hype cycle (rise and fall) of "NoSQL" databases, such as MongoDB, Cassandra, DynamoDB, Riak, Aerospike, and many others. Did they turn out to be any good? Individually, in local circumstances, some engineers know the answer, or at least an answer. Collectively, we have no idea. This knowledge only spreads as the primary sources write blog posts (mostly terrible), or move on to new jobs and tell stories (distorted by all sorts of biases). What we should be doing is studying what was actually built, out in the open, where everyone can see it if they're interested.

Additionally, I find it very difficult to teach other engineers about data systems, in a scalable way, without open example material. There are many online courses in SQL and things of that nature, but they always deal with trivially small, trivially clean data sets, without any of the richness or messiness of Real World Data. Many years ago, my own skill in dealing with data grew by leaps and bounds the instant I was exposed to real business data and asked to solve real business problems with it.

To these ends, I am looking to collect real business data sets. I use the term "business" loosely, in the same sense that engineers often say "business logic". Non-profits, community efforts, personal side projects, these things all count. The key thing I'm after are custom-built databases, meaning they either started from a blank MySQL/Postgres/MongoDB/etc, or heavily customized an off-the-shelf system like Wordpress or Salesforce.

I recognize there are thorny issues here with respect to intellectual property and personal data privacy. I do not expect anyone to just hand over a database and wish me well. We would have to work something out, whether that's an NDA, or thorough anonymization, or whatever.

In any event, if you possess a data set like this, and might be willing to share it for research purposes, please reply here and we can figure out how to connect and discuss.
Biodynamic, more or less.

Which is a funny group of people. Their rules sound kooky, but their results aren't at all what I would expect from kooks. The best strawberry jam I can get here comes from from a farm where they (I learned when I asked about why it's so good) turns their compost according to the phases of the moon. Weird. The same farm was also raided by the police. 130 police officers searched the place at dawn one morning, and apparently the only reason for suspicion was that those weirdos had money to spare for a succession of new greenhouses even in years when all their conventional neighbours had no money to spare for anything.
I did something similar with docker. I ran both OpenVPN client and SSH client inside a docker, so only the SSH client would be affected by the OpenVPN controlling the container network. And by telling the SSH client to port forward, and by exposing the same port forward from the docker to the local computer, I could use it to travel through the VPN while all other ports on the local computer were unaffected.

Here is my code for reference: https://github.com/yonixw/ssh-vpn-docker
you mean with gui? It was ported as a terminal application a while ago.
Ask HN: What are your contingency plans for if you died suddenly?
Probably due to a combination of the pandemic and getting older I've started thinking about what would happen to all my digital information should I suddenly die or become otherwise incapacitated for a long period.
I'm the only person I know nearby that has more than just the basic technical skills, and I'd like to have my family prepared.
I'm not too worried about financial assets that's what solicitors are for there's a whole business around dealing with that. I'm concerned with self hosted software, domains, emails etc. Managing email with a custom domain is no trivial task for someone that doesn't even know what a domain is.
So what do other HN readers have in place for such scenarios?
Bloaty McBloatface
I believe so. I want traffic from one application to go over a VPN and other traffic to go over the public internet.
The CityHawk Air Taxi
Yes! Really nice topic. Adds to the entrepeneurial / inventor spirit of HN!
I‘m neither pro nor against VIM or NeoVIM, but your comment is imo completely negative and not helpful at all.

I for one are glad for NeoVIM improving upon VIM and pointing out some weaknesses.

Since NeoVIM was released, Bram has been improving VIM much faster than before and even added features like async I/O support, that he previously rejected.
I'm surprised to see morels aren't on the list. Anyone who confuses a morel for a false morel is _really_ not paying attention. On the other hand, there are toxic (not deadly) boletes that can more easily be confused for porcini mushrooms. ¯\_(ツ)_/¯
Nowhere does “vaccines, masks, and lockdowns became a wedge issue picked up by large groups of people largely associated with hate” and “anyone who is anti-vax must be a part of that group.”

You absolutely can clump unrelated issues together when they’re specifically adopted by people who organize under a common banner or label. You don’t think that issues that make up “the liberal agenda” are reasonably well defined? Does it mean that literally every single liberal cares about all of them with the same fervor? Hell no, but it strongly predicts the views of someone who uses the label and the issues are cut so cleanly you can even make statements like “the typical person who cares strongly about native peoples identifies as a liberal.”
> Any test with a cycle threshold above 35 is too sensitive, agreed Juliet Morrison, a virologist at the University of California, Riverside. “I’m shocked that people would think that 40 could represent a positive,” she said.

I'm a bit confused by this article. AFAIK PCR tests are only reporting a positive at 35 cycles. The author of the article is correct that it is run for 40 cycles often, but this is only because a positive between 36-40 cycles indicates "unclear result" and the test is repeated with a different assay targeting a different component of the virus. Positive is only reported at 35 cycles max.

This should not pick up any "dead cells", it will pick up viral mRNA. There is a concern over picking up low loads, but the mRNA is still there.
Please do not add logo customization. This will end with prompts asking you for your Apple and Microsoft passwords which are difficult to differentiate from official prompts (at least for end users).
The problem is that all these tech companies profit off "engagement" and medicine-related skepticism, misinformation and the resulting arguing and anger creates much more engagement than if everyone just agreed with any single opinion.
Just a guess, is that the target altitude? Meaning they set it to zero during landing approach?
Yes, I noticed that as well. I assume that this was because it was so big and I was seeing it from quite a long way away (it was in the mountains, and the atmosphere was very clear). Though I have no idea how fast it actually is.

Still, it made the whole thing surreal.
My top filesharing utility is WhatsApp, or maybe Telegram, both for sending stuff to others and myself. Sure I know how to use an FTP server, operate multiple HTTP servers I can upload to, and have accounts at Dropbox, Google Drive and OneDrive. But for low-risk one-to-one communication the quick solution wins. Back then that might have been Dropbox.
777 has a takeoff configuration warning system, so unlikely. Far more likely is the pilots simply failed to command sufficient pitch up (higher pitch gives a lower airspeed and higher climb rate [at least in the airspeed and pitch regime we’re talking about here]).

Takeoff configuration warning can be silenced, but is an abort before the 80 knot callout.
I'm guessing it's done on approach so that the autopilot won't keep the plane from landing -- which would beg the question of why the autopilot would even be on during takeoff or landing.

As one would guess, it shouldn't have been on. Insight comes from a comment in TFA:

"I’m a captain at a U.S. major airline with a lot of time in 777s. Something this doesn’t mention is the that even if ground level was set into the mode control panel, the aircraft wouldn’t have descended if it was being hand flown. That means that the flying pilot here selected the autopilot on immediately after takeoff. This is unusual at Western carriers as we like to hand fly. To me this indicates a lack of experience or confidence or both."
> Could you list some tangible benefits that have been accomplished already in the crypto scene?

The partnership between Moneygram and Stellar. [0] Using the USDC stablecoin on the stellar network for near-instant settlements and transfers.

Stellar pilot into CBDCs in Ukraine, [1] and Ripple used for CBDCs for Bhutan. [2]

[0] https://ir.moneygram.com/news-releases/news-release-details/...

[1] https://www.coindesk.com/policy/2021/12/14/ukraine-commercia...

[2] https://ripple.com/insights/bhutan-advances-financial-inclus...
Some of these are actual science, such as Fitt’s law. Some are humorous simplifications that point to observed phenomena that are good to know. And then there’s bullshit like “Dilbert’s law”: information-free inside jokes technical people come up with to disparage other disciplines.
Plenty of very simple web apps terminate TLS at the edge ie: at something like API Gateway. So if you then turn on request logging... voila. Hardly a complex scenario, happens all the time. Or at the application layer:

@path("/login")
def login(request):
print("I have a bug, I'll just log the whole request real quick to see wtf is up!", request)

It's actually very hard to ensure that the password doesn't get logged. It requires constant discipline and maintenance. Any bug or change could expose it.

> I would hope that you would use a single-sign-on system with a centralized login page rather than exposing passwords to every web app within it

Implementing SSO is a great idea. Not everyone wants to use SSO though. If I were hosting a porn site I wouldn't expect my users to happily "sign in with Facebook". It's also much more work than a basic client hash.

> This is what I meant by clean logs - anywhere the password is used, ensure there is no record. How much code and how many layers does a password need to go through?

You underestimate the places logs can be generated or passwords can be accidentally persisted.

1. Your proxy

2. Crashes, stack traces, segfaults, core dumps, thread dumps, VM snapshots, free'd memory

3. Firewalls, both network and host

4. Audit logs for security, such as via ebpf or other auditing frameworks

5. The application, at any layer. In Python, did you know I can get a reference to the calling function? I've done this for logging purposes before, in fact. So even if your caller is super careful not to pass the password in, saving me from accidentally logging it, I can crawl back up the stack and get it anyway.

6. Your database logs

7. Services/ RPCs that sit between your auth API and your database

And as your business grows and your code changes you'll have to track all of that.

Orrrrrrrrr, you can just hash your password on the client side and significantly reduce the damage of a leak. Or put the extra work in to implement OPAQUE. Or use webauthn, that's cool too.
The author makes an incorrect assessment without considering the appropriate context for China.

The gaping hole in his assessment of "Chinese cultural exports" is the failure to account for China's population and GDP per capita, which currently is only about $17k PPP. This is no position to be exporting culture to the globe from; that would just be a waste of resources. Culture is a result of being rich, not a cause of being rich.

In other words, China is not "culturally-stunted" than any other country with a similar GDP per capita PPP.

Chinese culture is also all in the Chinese language, and China has no strategic reason to make any effort to export it globally into English, a foreign language, where fitting translations would cost even more resources.
> Besides the medications, an ADHD diagnosis can also get you special academic privileges such as extra time on exams.

Not only ADHD: dyslexia too, and probably other diseases / disorders related to the mental and neurological sphere.

This is problematic, because on one hand it's not hard to fake a disease if you know the symptoms and on the other hand it's quite easy to be convinced that you have a disease if you read the symptoms online. And I honestly don't know if doctors are able to discern "fake" illnesses from "real" ones when the diagnosis is essentially 100% derived from patients reporting their symptoms.
Great! Will have a look.
Laws should always take into account a possibility of a non-standard situation. No one on Earth is exempt from hard to predict crises.

For example, even in places where emergency services are usually good, Covid peaks strained their capacities quite seriously.

The same can happen during a mass casualty event. If a plane crashes with a lot of survivors, there may not be an ambulance available for your spouse who just went down with a heart attack.
I can't agree, just because it works for tokyo and fits the culture doesn't mean it fits the culture everywhere.
Setting autopilot immediately on takeoff is very tempting because it massively reduces workload vs hand flying during a critical flight stage (high workload). So there’s a strong temptation to do this. But if you miss a few checklist items and don’t fully understand the systems, this is the result. The numbers seem to indicate they didn’t immediately recover the situation either I.e immediately switch to hand flying and adjust throttle. At 1000 ft they’re still 80 knots too fast.

I also wonder about the decision to continue on after overspeeding the flaps. Takeoff flaps with full load on the 777-300ER is 15 degrees. Max airspeed with that setting is 215. They hit 260 at 175ft.
Are you familiar with https://github.com/TechEmpower/FrameworkBenchmarks ?

It's not tutorial-style, but it does contain hundreds of sample web apps (that all do the same thing, but still)
China also has missiles that it has created to sink carriers[0]. My simpleton understanding of it, is that they get to an extremely high altitude and sink straight on the carrier at hypersonic speeds which prevent it from defending itself.

[0]: https://nationalinterest.org/blog/reboot/df-100-are-these-ch...
No problem, my bad, I should have read it slower before commenting. I think the Beijinger is what threw me off, I thought that was the complete reference and then the 'she' referring to the article writer, not cluing in that the Beijinger was the reference of the 'she'.
Apples don't breed true, all varieties are hybrids.

(orchards of a variety are grown from clones of a single tree that are grafted onto root stock)

I'm increasingly convinced that climate also matters quite a bit. There are some Honeycrisp that are a lot better than others.
My personal view, which is US-based, is that our government is filled with second-rate people from top to bottom. They have continually failed to communicate clearly about the virus, testing, masking, and vaccines throughout the past two years. They are still not providing good masks. They still talk about "washing your hands". They are not building better ventilation systems. They are not providing good rapid test kits. They are not passing laws that address our countless medical system inefficiencies. And so on, and so on. Anything they are doing feels imperceptible from doing nothing.

I think the sad reality is that we're going to have a lot more needless deaths in 2022. People with disabilities that are impacted by COVID will need to keep locking themselves up indefinitely - no government agency will help them, and their communities will ignore their problems. Vaccines will still not be taken by ~1/3 of the population. Is it even worth trying anymore with them? I guess yes, however frustrating, but only because it makes everyone else safer to do so. I do not see how 2022 is terribly different from 2021.
Is this a parody of a webdev?
Where are we making progress?
Planes taking off from Boston Logan can fly as low as 300 feet over the neighboring town of Winthrop--and average about 700. I've kayaked in the area and you basically have to stop talking every few minutes when a plane takes off. Arriving flights are even a bit lower (although not as loud).