skysight-inc/HackerNews huggingface dataset:
Wow, nice, i am front end developer, i would love to join you on this
There is no difference. It would only matter if you could wake up from the simulated one. Everything in this world seems real, and since I have not waken up to confirm that this is not even real, I might as well just consider it real and go on with my life.
Does it matter if the pw is stored salted and hashed?
Technically, LFS isn't part of git and was added by a third party to solve a problem they had.
More discussion (ostensibly by pilots) here: https://www.pprune.org/rumours-news/644395-ek-231-20-decembe...
Not a fan of illusions that only work from 1 camera angle. But the others are great.
The point isn't about the external world. It's about deduction vs induction, the point is about axioms. Axioms are arbitrary, thus deductive reasoning is ultimately arbitrary.

If there is a hand then everything else falls out deductively. Using induction, it's trivially true that there is a hand.

Using deductive reasoning to prove an inductive proposition is ultimately a waste of time, using inductive reasoning to create a correct framework for deductive reasoning is ultimately unknowable. Both of these together is how we live our lives and create our standard model, which is ultimately imprecise at best, and wrong at second best.

This is Moore's point, that we are wasting our time trying to deductively prove the existence of an external world when it's trivially provable. We may not get accurate axiomatic framework, but we can never get that anyway.

Much of the point of philosophy is properly delineating between these two methods of reasoning. Much of analytic philosophy is finding areas where language blurs the two.
Double yikes:

"The aircraft performed the return flight EK-232 on schedule"
> It doesn't matter was in system. You run your checklists and configure for your own flight / your own departure etc.

I am not a pilot, but that's exactly what I thought when I read the memo too. They should be putting responsibility for the next flight on the next flight's crew, not the prior flight's crew. Train each crew to assume the plane they're prepping for their next flight is FUBAR in every way, checklist everything, fix it as necessary, and go from there. Don't rely on the prior crew for anything.
Well, now at least we know what it eats.
Freqency at the begining of words is likely to be different to frequency anywhere in the word. Regardless, "a" has the highest frequency in the company names, when spelled out in full (occurring 6 times, in 3 of the 5 corporations)
Please do not propagate flamewars on HN. We don't want this kind of thing here.

If you wouldn't mind reviewing https://news.ycombinator.com/newsguidelines.html and taking the intended spirit of the site more to heart, we'd be grateful.
I don't think that really addresses my point, it just shows that they did the work for one sanitizer already.
> Has updating the Go compiler actually been an issue for you in the past? To me, with Go's stability, it's never been more disruptive than updating a library in practice

I've run into issues with several go version updates.

Off the top of my head, all of the following caused breakages:

1. go 1.4 making directories named 'internal' special and un-importable. Cross-package imports that used to work no longer would compile with a compiler error.

2. go 1.9 adding monotonic clock readings in a breaking way, i.e. this program changed output from 1.8 to 1.9: https://go.dev/play/p/Mi6cGCPd0rS (I know it looks contrived, but I'm not digging up the actual code that broke)

3. The change of the http.Server default to serving http2 instead of http/1.1 broke stuff. Of course it did. How can that possibly _not_ break stuff?

4. The changes in 'GO111MODULE' defaults broke many imports which had either malformed or incorrect go.mod files. This one was quite painful for the whole ecosystem.

5. go1.17 switched to silently truncating a lot of query strings. Of course that broke stuff, how could it not? https://go.dev/play/p/azODBvkb-zK

Those are all intentional breaking changes which were not fixed upstream (i.e. are "working as intended"). The unintentional breaking changes, from changing error messages to cause string-based error detection to fail (because so many stdlib errors aren't exported so you have to do string matching), to just plain dumb bugs in the stdlib.... those are vastly more common. Those usually do get fixed in point releases. Take a gander at those release notes, many of the issues highlighted in those changelogs come from pain people hit during upgrades.

I think the majority of go version upgrades have had some amount of pain, and most of them have been far more disruptive than updating a well-built library.

I would much rather update just my fuzz-testing library in a commit, and be confident that it's only used in tests so CI is good enough to validate it, than have to update that and my http package and my tls package and my os package all at once and have to look for bugs _everywhere_.
Really depends on the context. Usually things that were designed for pilots to use will display ground speed in knots since it's likely the pilot will be comparing against calculations done in knots. Things that were designed for the general public usually show mph since most people don't have a good sense of how fast a knot is.

Taxi speeds are always written in knots, so I suppose you could say it is "official" (in terms of aircraft handbooks, airfield directories, etc) to use knots for ground speed. Of course the situation of an aircraft's ground speed while on the ground is sort of an edge case.

On the topic of odd units, the operating handbooks for jet aircraft often use mach number for limits, which has some of the same properties as KIAS as far as being density dependent but is a little more precisely defined.
Is k8s a requirement for being a backend dev in 2022? I thought that was for devops/infra only.
I haven't written any software to either of those, but I've written software for other very dissimilar purposes in the past decades, and learned something about them. I don't have real expertise in the substance of those fields, but I have real expertise in bug reports dealing with those fields.

AFAICT, no two fields can be so different that lay people won't make similar stupid mistakes and similar confident assertions.
You take your username seriously =)
I can't imagine "smaller numbers" plays any role at all.
This could be a scenario for a doomsday movie. On another note, I wonder if our solar system has been visited by such rogue planet in the past.
What benefits would you get though?

You are still exposing the password_hash to the server and any compromise there (software or hardware, as described in your link) would still let an attacker grab password_hash, craft a custom client, and send it as if the original client had hashed the plaintext_password to begin with.

The attacker doesn't need to know plaintext_password, just the string you use to authenticate with in order to replay it. The password_hash becomes the new password.

Then due to the salt being on the client, it still opens the password up to rainbow table attacks etc.
I wonder if a contributing factor is that they have local noobs flying. I know quite a few very highly experienced pilots (15+yrs at Emirates) were sent home due to the pandemic.

The only pilots in the middle east with absolute job security are the locals, and they get away with shit that would see any expat fired on the spot. You can hear stories about this from all the airlines in the region... Emirates, Qatar, Oman, etc.
> and rebase could also rebase descendant branches.

Why??

This sounds like something that could break tons of workflows
Which is irrelevant, given this is about aviation where feet and knots are standardized in all but a few former Soviet block countries.
Even regular morels are (at least around here) toxic when picked and must be properly cooked to be safely eaten. So while delicious I wouldn’t place them on a list of “safest” for that reason.

Toxic mushrooms that can be confused for porcini are very rare in most countries. Rare enough that one can generally neglect the risk of ever seeing one. In places where those are common it might be another story of course.

I think that’s important to stress: advice like this is geographically local . The list of safest mushrooms to pick in North America is not necessarily the same list as it would be in Europe. Use local advice.
You posted a bunch of flamewar comments in this thread, and have broken the site guidelines in other ways too. That's not cool, and we ban accounts that do it. I don't want to ban you, so if you'd please review https://news.ycombinator.com/newsguidelines.html and stick to the rules from now on, we'd appreciate it.
Oni2 is not vim. It does not act like vim. It uses neither Vimscript nor Lua, but instead Javascript (VSCode-based extensions).

I paid for an Oni2 licence and regret it, because it isn’t what I want, which is a MacVim.app wrapper for neovim.

If you like MacVim.app, there is _absolutely no GUI that is acceptable_ for neovim. I understand why, and I’m not interested in taking on the development myself. But until someone makes a GUI that is as well-integrated with macOS as MacVim.app, I will be using vim and not neovim.
Only if they know.

"Clue" and "holding coin" have not so much overlap.
That’d be dope. Send over an email? oliver@iconduck.com
Please do not post flamewar comments to HN, and please omit personal swipes from your posts here. We've had to ask you this more than once before.

https://news.ycombinator.com/newsguidelines.html
Its more of the same tactic in politics as used by chief nazi propagandists: "Propaganda must facilitate the displacement of aggression by specifying the targets for hatred."

It still surprises me how efficiently all our worlds leaders shifted blame from them for our shitty covid health response to the unvaccinated as though the vaccine was available from the beginning.
EU drafts plan to label gas and nuclear investments as green
At least this sounds like pure human error, failure to follow pre-flight checklists, and not a Boeing engineering/mechanical problem.
Lol at that exception. That guy must have had the time of his life there.
Speaking as a cheerfully untrained armchair observer, we might also expect the nuclear fallout to be detectable for at least the next 50,000 years [0] on the basis that detection equipment is really sensitive. Sensitive to the point where we can detect sunny days happening several millennia ago.

This looks like silly news. They may as well just have run with "US did nuclear tests in the 1960s" or "radioactive cesium has a half life" and left it at that unless there is something to report on.

[0] https://en.wikipedia.org/wiki/Radiocarbon_dating
Hey there, I work on a project called Awayto. It generates and deploys web applications to AWS with all the base line bells and whistles (db, api, ui, user mgmt, react, typescript). I enjoy working on tools for developers and this is a project that's supposed to help developer consultants. It's a full stack framework, and there are of course many ways you could help or be involved, so if it sounds interesting please check it out!

https://github.com/keybittech/awayto

https://awayto.dev
I mean... tech is inherently amoral.

Tor is used for CSAM. PhpBB and PeerTube are used for djihadist propaganda.

There really isn't any trivial way to give people better communication technology without giving them better ability to coordinate to do awful things. If you don't want that, fine, but then the natural conclusion isn't "we shouldn't push Whatsapp on third-world countries", it's "we shouldn't develop the internet in third-world countries". Telegram and Signal can be used to incite genocides just was well.
iftop is a Linux command line tool to list network connections.

https://www.tecmint.com/iftop-linux-network-bandwidth-monito...

Of course it has no firewall.
I don't think they fab their own chips either. It's a stretch to say the whole system is off the shelf because it has a commercially available motherboard with custom firmware, e.g. https://tech-docs.system76.com/models/thelio-massive-b1.2/RE...
Not quite all public domain. (in English) [0] (maybe? gray area)

I'd highly recommend checking out his work on (and coining of the term) "language games" [1] I'm not sure I agree with all of the thinking behind them, but it's a fascinating concept that has useful nuggets whether or not you agree with everything Wittgenstein says about them. They are explored pretty fully in his work "Philosophical Investigations" [2] This work pretty much set aside a fair amount of his thinking in Tractatus Logico-Philosophicus, which is still an interesting work in its own right. I think that even a cursory ELI5 treatment of this material in a standard college course would be very useful in arming students with tools needed to dissect language. I've used it (in brief) when teaching a course on Informal Logic in relation to propaganda.

[0] It seems copyright on the English translation might still be in effect, or at least a gray area of determination. Since it's a common text use in college courses I'm guessing the copyright owners may fight public domain release. The issue will be whether or not the translation was a work for hire or if it can be considered sufficiently different to constitute an original work. The English translation by Anscombe, Hacker, and Schulte occured posthumously, and so might not be considered work for hire. Hopefully it will resolve in favor of public domain. For a shorter consideration of "language games" check out Blue Book.

[1] https://en.wikipedia.org/wiki/Language_game_(philosophy)

[2] https://www.amazon.com/Philosophical-Investigations-Ludwig-W...
You have the “favorite” function for this.
Yeah well PHPnuke wasn't exactly written by secure coding experts.
> You get an PI address block and ask your ISP to advertise it on your behalf

And? Get nothing in some regions because all of their ISPs aren't willing to provide this service even with money?

I know provider-independent addresses, but don't pretend it'll solve the problem of IPv6. The fact that you need to do some service wrangling rather than "take this IP for private use, just don't ask us when IP conflicts happen" (and ULA implementation is inconsistent even in enterprise routers) means headaches abound that didn't exist for IPv4.
This article has some really good descriptions of what's going on as the light interacts with the atoms in the fibers.

[https://en.wikipedia.org/wiki/Refractive_index]
> You want to check without hashing, that's the entire point.

It's not the point. There is no attempt to avoid hashing.

At this moment I'd like to be careful and distinguish between ordinary cryptographic hash functions (SHA-2, BLAKE2, etc) and key derivation functions (PBKDF2, Argon2, etc), even though both are often referred to as "hashing" in this context.

The thing about key derivation functions is that they make brute force attacks harder, because the computational cost of verifying the password is higher. They are typically parameterized so you can adjust verification cost. This is the cost we want to avoid.

However, just because you are not using your ordinary key derivation function with the parameters you normally use, it does not mean the only other option is to store passwords in plain text. You could use a key derivation function with different parameters, an HMAC with an ephemeral secret, or an ordinary cryptographic hash. These are all options, with different security tradeoffs.

Part of the evaluation of key derivation functions and their parameters is the evaluation of the risk that the hashed value is compromised. These values are stored in files or in databases, and there is a correspondingly higher risk of compromise... e.g. through backups. Your conclusions would be different for an in-memory cache which is harder to compromise and contains fewer entries, so you would naturally choose a different way of storing the passwords. Different algorithms or different parameters.

(There are also other interesting solutions around... like using an HSM to MAC the passwords.)
Which is just bad policy, not everywhere is urban. Even in an urban area with generally good emergency services that is not a guarantee 100% of the time. For instance some reason 911 could be down. Ambulances could be short if there is some other event is going on that is occupying them all or made them not operational. There are numerous examples of things happening like this in cities where normally they are operational.

A vehicle that has the potential to not operate either due to false positive or not handling a legal exception that a lot states have on their books. Is not a vehicle you want to rely on for emergencies. It even becomes more risky if one lives in area that does not have responsive emergencies services.

This is even before we consider possible privacy issues and concerns depending on how this is implemented. Let alone legal and moral considerations of essentially monitoring and scanning of people who have not committed a crime to try and prevent some people from breaking the law.
I'm surprised the Gervais principle[0] isn't there, as it supercedes the Peter Principle and Dilbert's law as far as I'm concerned:

All organizations are perfectly pathological, their hierarchy being divided up between sociopaths (management), clueless (middle-management) and losers (everyone else). Sociopaths, in their own best interests, knowingly promote over-performing losers into middle-management, groom under-performing losers into sociopaths, and leave the average bare-minimum-effort losers to fend for themselves.

[0]https://www.ribbonfarm.com/2009/10/07/the-gervais-principle-...
the ground speed of an aircraft is reported in kts.
lmfao, they asked for the BEST, not just any old garbage from big tech
Buying stuff is not a universal recipe for happiness.

Neither is retirement, obviously, but you are correct that being financially independent gives you the freedom do do what you want. Whether that is time off between jobs, working on independent projects, etc.
I would be dead nothing matters anymore. But that’s just me. I don’t have anyone close.
If the attacker only has access to the hash that hash is only usable for your website. If the user uses the same password for another site an attacker can not log into that other site using the hash.

That's really the main benefit of this approach - it reduces the impact of password reuse.
Combo of crypto mining and the whole supply chain situation being in a bad situation
Please don't take HN threads on generic flamewar tangents. They're repetitive, tedious, and usually turn nasty.

https://news.ycombinator.com/newsguidelines.html

Edit: it looks like your account has been using HN primarily for ideological battle. That's not allowed here, regardless of what you're battling for, because it destroys what this site is supposed to be for. We ban accounts that do it, so please stop doing it.
There was an episode of Cheers about this, where Carla buys a house extremely cheap and then believes it is haunted. After sleeping a night there, she finds out it’s because it is close to where planes land at Logan Airport, which calms her nerves.
Apache has had form-based authentication for about 10 years: https://httpd.apache.org/docs/2.4/mod/mod_auth_form.html
The key difference is that central bankers were in a very different state of mind in 2008. MMT realy imposed itself post 2008.

So while it's relevant to brace for a small crash due to interest rates adjustments if inflation continues, I wouldn't bet on a full scale snowballing cash grab, that killed relatively healthy institutions like in 2008.

Short term money market have been greatly improved and central banks have shown multiple times their readiness to intervene.

The part that is always glossed over in MMT is that taxation is thr regulatory factor. Except that in this low trust political climate it's absolutely impossible that anyone manages to raises taxes.

Thus, I think that inflation is the greatest of current risks. Especially unacounted inflation (housing, healthcare services...).
Never contain programs so few bugs, as when no debugging tools are available - Niklaus Wirth

Fuzzers and testing can detect bugs but I don't see how they can make a contribution to a reasonable software structure (I believe that bad structure is the prime cause of bugs).
2021 Year in Review: Google Quantum AI
Fascinating research. It is crazy how hard it is to do such well controlled nutrition science.

Why is it dissolving, though? Not enough continued funding?
Let's hope this happens. They have been promising this for a long time. It's the "fusion energy will be available soon" of the crypto currency space.
Yes, assuming that the previous crew left you a 'perfect and ready to fly plane' is one hell of an assumption to make. With tiny little pieces to collect if it ends up being wrong.

Emirates has a pretty good rep but this doesn't help.
List of RF Recordings
I'm writing a new functional language using Rust as a side project.

The repository is not yet opensource because it's in a very early stage (syntax/grammar not definitive, AST not definitive, ...), but if you'd like to help, feel free to contact me (my email is public on github: https://github.com/linkdd

The key features of the language are:

1. values does not have a single type, instead a type declares what values it has:

class int(n: number) check
frac(n) = 0
end

42 is int # true
42 is number # true
42 is string # false

2. Equations that have one or more solutions yields a boolean (need to implement a SAT solver)

class even(n: int) check
thereis k: int, n = 2 * k
end

42 is int # true
42 is even # true
43 is even # false

3. Expressive type definitions:

class odd(n: int & !even)

43 is even # false
43 is odd # true

class result(r: (:ok | :error, any))

(:ok, 42) is result # true
(:error, "oops") is result # false
# NB: `:ok` and `:error` are atoms like in Erlang/Elixir

4. Generics:

class ok<T>(val: (:ok, T))
class err<T>(val: (:error, T))
class result<T, E>(r: ok<T> | err<E>)

ok<int>(42) is result<int, string> # true
err<string>("oops") is result<int, string> # true

5. Set builder notation:

let s = { x: int | x > 0 }
s is set<int> # true

let russel_paradox = { x: set | x not in x }
# impossible:
# set class does not exist, but the generic class set<T> does
# set<T> can only contains T, therefore:
# { x: set<int> | x not in x }
# is invalid as well, since set<int> is not an int

6. Map/Filter/Reduce operators:

let sum_of_even_ints_below_10 = { x: int }
|map x => x * 2
|filter x => x < 10
|reduce[0] acc, x => x + acc

7. First order logic operators:

(true ==> true) = true
(true ==> false) = false
(false ==> true) = true
(false ==> false) = true

(true <==> true) = true
(true <==> false) = false
(false <==> true) = false
(false <==> false) = true

8. Rust-like Pattern matching:

x := 42
y := match x {
42 => true
_ => false
}

9. Goroutines and streams

func worker(s: stream<int>) -> :ok
do
let val: int
s >> val
s << (val * 2)
:ok # single point of return, last expression is the return statement
end

func main() -> (:ok | :error)
do
let s: stream<int>

run worker(s)

s << 1
let val: int
s >> val

match val {
2 => :ok,
_ => :error
}
end

10. For now, it's an interpreted language, but I'd like to compile to LLVM IR instead