skysight-inc/HackerNews huggingface dataset:
I'm in a similar situation regarding salary/COL, however I don't travel..

I found SV lost its appeal when I no wanted to take advantage of the meetups, computer clubs, etc. If I wasn't going to take advantage of the unique geek culture SV offered, what was the point of being there ?
Experts say to have no fear because as long as you do not sell your assets after they drop in value, the government will be there to pump up the values again.

The only broad market index fund owners that were hurt by 2008 were those that sold at low prices. The people that hung on a couple years were greatly rewarded.
Checking for audio or video devices in rental property
Does anyone have any reasonable methods of checking for recording devices when staying and working at a rental property? I’ve always done a sweep of hotel rooms, mostly for sanitary reasons. But rental properties can be bigger and filled with more stuff. Also, it’s 2022! There are smaller devices than ever for both video and audio. Any reliable ways to sniff them out?
That's really clever!
My main take from reading Wittgenstein was that no one agrees on the meaning of words so there's barely any point arguing about things. I suppose that's sort of positive.
In English, a more idiomatic way of expressing what you seem to intend with “the entire Ukraine” would be “the entirety of Ukraine” or “the whole of Ukraine”; what you actually wrote is applying a modifier (which happens to go between the article and the noun) to “the Ukraine”, and is out of place exactly to the extent that “the Ukraine” without the modifier is.
IMO this is hinting at PRC pursuing (conventional) prompt global strike with hypersonics. Other moves like building up nuclear stockpile to move away from minimum deterrence etc supports such posture change. I've speculated this is the best capability for PRC to acquire to counter US power projection and other capability asymmetries.

Key line from article:

“With effective hypersonic precision strike weapons, the critical value of ‘strategic depth’ in traditional warfare will no longer exist. All the critical political, economic and military assets of a country will be at risk.”

There was another piece by SCMP from PRC researchers working on AI to calibrate hypersonic hardware accuracy down to 10 meters. That's the level of accuracy/CEP that can hit target of any size, anywhere. Better IR detectors is just another piece of the capability puzzle.

Combine this with PRC building up nuclear stockpile, basically moving away from minimum deterrence, while maintaining No First Use. Suggests PRC wants to eventually build nuclear MAD to gamble hitting CONUS targets with conventional hypersonic/ICBMs without triggering immediate second strike.
For what it’s worth, I live in California where both
Honeycrisp and Cosmic Crisp are readily available (among a healthy gamut of other varieties). I LOVE Honeycrisp and it’s my favorite. I have not even bothered to try Cosmic Crisp, because from all I’ve heard it’s not any better than Honeycrisp, but just has a longer shelf life. I have no issues with the shelf life of Honeycrisp and am skeptical that shelf life can be extended without giving up some other quality.
While Google and Microsoft don't break down their cloud revenue publicly (Amazon does with AWS), there are several finance research firms that have dug into the breakdown and they seem to more or less align.

Here's an example: https://www.statista.com/chart/18819/worldwide-market-share-... . The link is from Statista and aligns closely with the WSJ numbers, and it points to "Synergy Research Group" as a source for that breakdown.
Guerrilla warfare stands a real chance to disrupt any nation state. Do not discount a bunch of men with guns.
I started something along those lines: https://levien.com/tmp/tractatus.html
Is this supposed to be used to put entire domains behind basic auth or should you use it for specific end points?
How do you do client side hashing without the server sending the salt/pepper to the client, which is a really bad thing?
Why not just Silicon Wasteland? Is that not "meta" enough?
"... a company that you entrusted your data to now has a moral responsibility to do everything they can to hold on to that data until such time as you explicitly relinquish them of that duty ..."

I completely agree.

I will take this even further: that company should break a data retention law in order to hold ambiguously abandoned data that might be important to that user.

Further: that company should safeguard that data and protect it from unlwaful intercept or surveillance just like the data of any other paying customer.

Finally: no additional costs should be accrued beyond the original terms for this safekeeping of data.

Please do not abuse this.
So this is not as black and white as it seems. There are three major pushes that end up pushing people out of the cities.

* the aforementioned highway boom, but this is not enough to actually kickstart the whole thing; most European nations also had a highway boom around this time with much less sprawl

* lending standards. Prior to the Great Depression, banks are wholly in control of mortgage lending. The collapse of the economy also collapses the banking system and the housing market; banks have to foreclose on properties that are no longer worth anything. As part of the bank stabilization efforts, the FHA creates national standards for loans that it will insure. These standards are restricted to single family homes, and to properties without commercial (small businesses have a really high rate of failure). This has the effect of encouraging banks and developers to stampede into single family suburban development; the cost of financing is a lot cheaper because of the Uncle Sam guarantee, and it's a lot more profitable as a result. No other type of property is given this kind of preferential treatment to this extent, and this still more or less persists today.

* desegregation. This is the big one; prior to the civil rights era, suburbs are expanding rapidly, but cities are still growing. The moment Brown vs Board of Ed passes in 1954 all hell breaks loose. The real estate practice of blockbusting gets into full gear, where real estate agents spook the white people out of a neighborhood by having one black family move in; they proceed to buy the houses on the cheap from white people fire selling as fast as possible, and then take advantage of black and minority sellers. Whites move into suburbs in droves, because it's "where the good schools are" without the minorities they used to be legally separated from. And this is a national phenomenon. Even today, we see whites flee school districts with increasing minority populations; they do so even in districts where the minority groups are affluent and educational metrics remain positive, like Cupertino, CA or Johns Creek, GA: https://psmag.com/news/ghosts-of-white-people-past-witnessin...
> The fact that requests has "languished" (not sure how tbh) doesn't really change the fact that the Python stdlib is a bit of a hilarious disaster from afar.

Agreed that the Python stdlib is a disaster, but my point was that the OP contradicts himself by arguing that stability guarantees hold the standard library back while pointing to requests which itself hasn’t made many/any intrepid breaking changes or even sensible non-breaking changes a la async support. Note that “stability is bad” is the OP’s point of view and not mine.

> Tons of cases of "that shouldn't be in std" where libraries have quirky, locked in behaviors, or an entire major breaking release with decades of work to migrate has to be made to clean up the mistakes.

But the parent pointed to the requests library which is not in the stdlib. Note also that Go has been around for a decade and has needed no such major migration initiative.

> Yeah this also means that you need to update your compiler when there's a vulnerability instead of just a single point release in a library. This happens with some frequency.

The frequency is very low and updating the compiler is minimally risky due to Go’s strong compatibility guarantees (precisely the kind of stability the parent opposes). This is a much lesser problem than dependency management in Python (I have 15 years of experience in Python and 10 in Go).
Yonden Lhatoo demands West free Julian Assange before preaching press freedom
I wasn't too impressed with this one, either. In my mind, this illusion is much more straightforward demo of a similar effect (color perception being relative to surrounding colors):

https://www.illusionsindex.org/ir/checkershadow
https://ataspinar.com
What does it matter? If a criminal gains the hash, they can log in and be malicious anyway. If a criminal can do a MitM, they can substitute the Javascript that's hashing your password with all the nonces and salts and peppers you add to it and send the password anyway.

If you just hash the password, the hash becomes the password. You're not solving the problem that way, you're just switching around definitions.

There is an alternative that's supported in most platforms, and that's WebAuthn. Not even a need for a password automatic secure handshakes and with the right protocols, the keys differ per site so they're very hard to spoof through phishing. You can achieve much of the same thing with client TLS certificates, but the UX for that is even worse than the UX for HTTP Basic.
No, it would be much better to use a zero knowledge proof (typically called a PAKE — password authenticated key agreement) to demonstrate that the user knows their password without sending that password over the channel.

Sending the password over HTTPS doesn’t expose the password to passive observers, but it does unnecessarily expose the password to the server.

https://en.m.wikipedia.org/wiki/Password-authenticated_key_a...
The closest kind of apple to Antonówka that I found in England is Bramley apple, or more generally, various kinds of cooking apple.

https://en.wikipedia.org/wiki/Bramley_apple

https://en.wikipedia.org/wiki/Cooking_apple
Distribution.

You develop software. How do you get it in the hands of users? Shrink-wrap, on-premises, downloadable executables and installers, SaaS (through the browser in one environment, or supporting lower browser cardinality than user environments').

Once you choose SaaS as distribution mode, you're writing for the web. Therefore a part of your problem, an important one, becomes web development.
After years and years of production experience with thousands of mobile robots that use this weird xml + yaml as configuration, I am 100% in the “just use code as configuration” camp.
This is also why if one wishes to mandate weekly tests, those tests should be required of everyone, not just the unvaccinated. Mandating tests for just the unvaccinated is more punitive than scientific and doesn't slow the spread.
> The radiation is continuously creating isotopes in the gases in that air.

What radiation? Note that he didn't say he received radiation exposure throughout the submarine, only "working on the reactor". That's an isolated space that doesn't continuously exchange air with the rest of the submarine and has an extra layer of shielding between it and the rest of the submarine (in addition to the shielding around the reactor itself that separates that from the space where people working on the reactor go--nobody ever goes inside the reactor itself).
Looks like they implemented their own windows kernel driver [1] [2] for intercepting packets. And since I see BOTH domain names and applications that won't trust custom SSL CA in their website, I guess they get the domain name from the ssl handshake packets (sni) [3] which is in plaintext

[1] https://github.com/safing/portmaster/blob/22507e879be95c7b0f...

[2] https://github.com/safing/portmaster-windows-kext

[3] https://en.wikipedia.org/wiki/Server_Name_Indication
A persistent denial of service vulnerability affecting iOS
It was my go to apple as a kid, but that was back in the day when the other options were red and yellow delicious.

Even with an abundance of options today, I still enjoy them on occasion.

To each their own ;-)
Yes but it's not one or the other - there's million different things to do in software before getting to the level of building blockchain crap.

Also I'm really curious what people consider valuable environmental work - like, if you didn't have to work for money tomorrow, what kind of environmental work exactly would you take on?
Stupid question: why not use nginx? Configuring basic auth is about 4 lines of config.

Nginx is fairly simple and is overkill only for dev setup for which you don't need auth anyway.
Simplest solution would be to write it at the end of the title. Something like [paywall] or (paywall) perhaps?

It would be nice if HN posts could include an "alt link" which would be paywall free. (like an archive.is link or similar)
Amelius' law: Management will always refer to Hofstadter's law as a myth or an excuse.
> Updating the compiler is a bit more of a chore and I'm going to worry a bit more about the impact (since it's global to all code vs local to one package).

This is indeed a chore in other languages. In Go, the compiler is trivially installed. Typically this just means bumping the version in your Dockerfile and “gvm use $newVersion —default”.

> For another, I would want to make sure I had tooling that could tell me "is this library in use by service X". I don't know Go's story there, but I would hope it's trivial to do so for a library but I suspect if it's part of the standard library that may be trickier. If not, nbd.

This is supported out of the box by Go’s tooling. `go mod graph` is what you’re looking for.
> More people die each day from climate.

And from solar panels! There are a dozen deaths a year, worldwide, from installing them on roofs, which mean solar is more deadly than nuclear ;)
I'm getting into Computational Geometry, and am interested to learn from and contribute to relevant projects in GIS, Computer Graphics, Robotics.
No, I didn't till your post. Just read a bit about him. Meh. He seems un-stupid and to have started out with things a bit later than me. I don't really evaluate peoples social standing. Bad measures are bad measures. @dekhn I might note that you don't really know who I am. Nobody does.

I wouldn't call my statements "worked up by his apparent misuse of radioactivity-detecting instruments"

I would call them reasonable statements of someone who gets pissed off by FUD. Can you [or HE] explain to me how this is not FUD?
Good points. Although tiling may be a departure wanted or unwanted from your normal workflow i3wm does provide support for tabbing arbitrary applications together however this neither supporting merging 2 tabbed application into a single level of tabs nor does it fully support using window manager tabs in place of application tabs because of the inherent lack of context that would require a deeper sort of integration.

For example in your browser you might want in its UI to open a particular link in the background or foreground or perform an operation on all tabs or a subgroup thereof that is specific to browser tabs that wouldn't make sense in the broader context like bookmarking, saving a session, sending to another device etc.

There is a good argument for opening a window in the fore or background being exposed to the application but it doesn't at present work that way.

Regarding multitab operations, do you display only the options that make contextual sense or perhaps list all the options that make sense?

Example 3 firefox tabs and 2 Emacs tabs in a group. Show bookmark all firefox tabs and save all Emacs tabs as operations that can be done to the group? Possibly show only the relevant options if some subset are selected. Example if only 3 firefox tabs are selected show only those operations.

There is an argument for retaining multiple levels of tabbing at the OS level and the application level other than simplicity. Often when you want to perform a group operation the app is an already defined group for that operation, and in addition it often makes more sense to page through application tabs and windows separately rather than as a singular operation. For example going one window to the left for your editor while leaving the existing firefox tab focused rather than having to hit a different shortcut to jump up a level.

I think it would be interesting if you could have like application windows automatically vertically tabbed like Firefox's tree style tabs and have a contextual option to either break out to a new tree or open a different applications link as a child tab of the tree.

One could then optionally switch between showing trees side by side/top bottom or joining them into a horizontal tab group.

Ideally operations performed on multiple tabs could be performed by hitting a singular hotkey or button that would present all relevant options without going into each apps menu or pressing a different key or ui per app.

This would however be both complicated and require coordination between players that would likely be impossible.
I currently work for a startup program in Washington state and it's my third program. One of the biggest challenges we have (that I am sure is not unique to our program) is that we have a large community of mentors as well as founders and when we want to connect our mentors and founders together it takes a manual email introduction. I've also put together an Airtable where founders can connect with our mentors, but again it's a manual email for them to set up a time to meet.

I'd like to build something where mentors can list their profile as well as their skills. Founders could then sort those mentors by skills, book time (perhaps connected to the mentor's calendly), and connect via a conference call with something like Twilio.

I know something like this exists today, but it's a platform for a very specific community and cannot be white labeled or partitioned for another specific community.

Thoughts?
Yeah, smash 'em up! Hurt it with fire! Then add a little cinnamon...
The usual habit of typing ids as integral numbers is incorrect, they are not numbers. But the problems it causes are well known and dealt with by what is broadly known as good practices.

Is it better this way?

(You can see the problems clashing with each other if you search for discussions about defaulting ids to 32 or 64 bits. So they are not completely solved, the practices are just good enough that things don't usually break on practice.)

At the end of the day, all you have on a computer is a bitfield to mess around. You will always have to deal with encoding at some point.
> There are password verification protocols where the password is not revealed to the server either, which is much more secure as it means that you’re not at the mercy of whether the sever operator follows good security practices about not saving your password in plain text somewhere.

Well, the most common such protocol is TOTP, which still requires the server to store your full password. In that sense it's worse than a naive password exchange, which only requires the server to store your hashed password.

There are other password protocols that require neither transmission nor server retention of the full password, but it seems worth noting that the protocol we actually have didn't bother with that.
As someone who hasn't touched Java since a programming class 20 years ago, and mostly lives in the Node world now, with sprinkles of Python, is it enough to simply scan jar files? Do I need to worry about a Linux VPS running a Node app that might install some kind of Java dependency somewhere?
> Considering the zeal of American Christianity, this has apparently been lost on many

As an american atheist, an awful lot of American Christians don't seem to follow much of the teachings of the Bible.
No. Social media consumption is a cognitive equivalent of smoking. You're better off without it.
And RedReader on Android also supports old.reddit links.
Floats effectively work by specifying a level of precision and a multiplier against that. For big numbers, you need a lower precision (larger gap) between the representable values. Eventually the precision gets so low that adding 1 doesn't reach the next possible value and rounds back down to your current value.
Yes, the different CPUs added a richness to this time period readers are very likely to find enjoyable as well as enlightening.

Ahhh, the 6809! It's my favorite 8 bit CPU. If you've not given it a look, please reconsider. You are likely to benefit too. That chip is beautiful, and is a whole lot more powerful and elegant than one might expect an 8 bit CPU to be.

Let me seed the content a little: (and the 6800 too, because why not?)

Williams "DEFENDER" runs on a 6809 at 1Mhz, no blitter, no tiles, just a straight up bitmapped display. Here's a tutorial video with an expert player and a new gamer being introduced to the game. Lots of gems in their chatter and a good look at what an 8 bit CPU can really do:

https://www.youtube.com/watch?v=8PEpDMgR9D0&t=293s

Fun fact: DEFENDER plays one sound at a time, and the sound board is a 6800 (also a good CPU and missing from the list) connected right to a DAC to generate sound procedurally. Williams has a distinctive sound in all their classic games, and this board is why.

Amazingly, DEFENDER was ported to the Color Computer 3, the sound board replaced with samples. Doing that worked better than I thought it might, and overall the game play is on point. This port impresses me because of how different the frame buffer RAM layout is, and the 6809 being flexible enough in it's many addressing modes appears to manage in both scenarios. Very little is lost.

https://www.youtube.com/watch?v=jLdAvNj8HNI

I hope to see one of the better players run the port, and or play it myself on a system one day soon.

Here's a system I've always wanted: http://www.oldcomputers.net/swtpc-s09.html

It's an 8bit workstation! 768K of RAM, nice storage, respectable terminal, expandable...

https://www.youtube.com/watch?v=jLdAvNj8HNI

They made respectable machines using both the 6800 and 6809 chips.

The 6800 ended up in wonderful Tektronix computers and terminals. The computer was industrial, and intended for prototyping, science and industrial control and not commonly known. https://www.primidi.com/motorola_6800/personal_computers

The terminals were well known, high resolution vector, and wait for it...

CRT STORAGE TUBE displays! These delivered "4k" vector graphics in the 70's! The catch? No refresh cycles on the displays. Instead of blasting through all the vectors X times per second, these CRT displays would continue to glow, until erased for a new screen display.

The 4051 came with tape, X,Y analog joystick or dials, keyboard, display, and serial ports, and a very powerful "BASIC" that had a strong emphasis on math and graphics. I used this system to program CNC machines back in the day, and what could be done in BASIC on one was impressive.

Check out the demo set. These displays are beautiful and functional.

https://www.youtube.com/watch?v=YZsiR45tKKw

https://www.youtube.com/watch?v=aFfp8JHmFjA
oauth2-proxy is as simple as HTTP Basic Auth (and can also accept HTTP Basic as well) - no great reason to not use it, along with REMOTE_USER header
In "the double ring illusion" I'm unable to see them as 180° rotations. I see all rings in the video doing constant 360° rotations, and I don't care if they intersect.

Maybe I'm too used to see virtual 3D animations where objects can intersect and do whatever they want without any physics involved.
FedNow instant payments, although not until 2023-2024. Drags US financial infra into the 21st century, and provides similar capabilities to instant payments in other countries (UPI in India, Pix in Brazil, etc). Likely ends up significantly shrinking Zelle (the private consortium competitor), PayPal, Venmo, Cash app, etc.

https://www.moderntreasury.com/learn/what-is-fednow

https://corpgov.law.harvard.edu/2020/08/31/fednow-the-federa...
That's the thing. As far as the effect of remote work in the general population, it's near negligible. I'd be surprised if 1% of jobs have shifted to remote.
Answer: it doesn't even address the third one.