skysight-inc/HackerNews huggingface dataset:
I wouldn't call the coloring "a good thing". I would call it "an acceptable compromise". It would be better if you didn't have to label it and it all Just Worked, just like it would be better if you didn't have to annotate lifetimes and it all Just Worked, but for the space Rust is operating in, it is an acceptable compromise. Rust sits high on the "force programmer to put more effort in, give programmer more out in return", on a pretty nice cost/benefit tradeoff place in that space. But the fact you get benefits commensurate with the costs doesn't mean it's not a cost at all, and it's probably not good to get into the habit of conflating costs and benefits. Clarity of view of both sides of the balance is very important for engineers.
Since OpenSSH >=8.2 you can use FIDO2 and security keys. See https://www.stavros.io/posts/u2f-fido2-with-ssh/
Even in academia, where most research originates and matures before being sold to corporations, the vast majority of research is tax-payer funded. I wholeheartedly agree with you stance. It's unsurprising that these regulatory barriers keep all but the wealthiest corporations out of the market considering that big pharma and insurance account for significant share the donor-base of most politicians in the United States.

Tax base funds the work, donor base collects the rewards.
R&D and quality control provides benefits to patients, and it is critically important to figure out how to reduce the cost of R&D and quality control so we can do a lot more of them. That's what Four Thieves Vinegar and other biohackers are doing.

Regulatory compliance doesn't provide benefits to patients; it's a deadweight loss. As you are presumably aware, to a significant extent, the reason that regulatory compliance is so costly is that, being costly protects established drug companies from competition.

Quality control and initial R&D have nothing to do with why Epi Pens, insulin, or Daraprim are absurdly overpriced in the US. That's purely monopoly rent extraction.
I read HN via an RSS feed over the front page. You can filter out junks just fine.
I've noticed a similar thing on rentable bikes in SF and NYC. People don't put the qr code over the existing bike one, but they put it near enough that your QR reader might pick it up by mistake and open up the order site for a pizza chain. Fortunately, when I'm using the bike app directly, these codes are ignored, but new users don't necessarily have the app yet.
>"Amazon Fullstack" (formerly "Apache Fullstack", now forked and rereleased)

Underrated comment of the day here.
"the young sleep in late because they realize they have their entire life ahead of them.

The old get up early because they recognize they have their entire life ahead of them."
What's interesting is that you start from the female perspective and explore the male graph you will find the "chads" and find the other 80% of men are completely invisible.
There's probably more of them but if you look at the html (browsers used to have an icon for this...) there's a <link rel="alternate" type="application/rss+xml" title="RSS" href="rss"> tag in there on the home page, so https://news.ycombinator.com/rss should be the feed
Ah Homeopathy its like vaccination but without the science:

"A popular homeopathic treatment for the flu is a 200C dilution of duck liver, marketed under the name Oscillococcinum. As there are only about 10^80 atoms in the entire observable universe, a dilution of one molecule in the observable universe would be about 40C. Oscillococcinum would thus require 10320 times more atoms to simply have one molecule in the final substance."

https://en.wikipedia.org/wiki/Homeopathic_dilutions
If public key authentication is used with secret key in a hardware key/TPM/secure enclave, most other suggestions made don’t help further.

Fail2ban is certainly not needed (unless there is potential that some users may use very weak passwords, which password policy shouldn’t permit that, or logs are preferred to be cleaner).

Firewalls, public key authentication (verify host keys, also rotate), hardware keys, using SSH over Wireguard, and a secure bastion host provide real security. Preventing SSH agent and X11 forwarding is good too.
It's about time to do this everywhere! In Bulgaria, for example, most of the mining is with stolen electricity! Craptocurrencies are nothing but fuel for crime and scams!
Keep the blood fresh. The slowest/oldest/worst 10% has to go! Stack ranking is the best!
David Allen - Getting things done

Steven Pressfield - The War of Art + Turning Pro

Tony Robbins - Awaken the giant within
(maybe he's released a better book than that now, but it was impactful personally back in the 90s)
For those who hit a paywall: https://web.archive.org/web/20220105215604/https://www.smh.c...
Neat, there is a whole section on dungeon generation in there too!
> I was very clear and explicit that I was giving this criticism from the perspective of not "anybody" but rather someone who actively mountain bikes

Yeah, and everybody else was pretty clear and explicit that that perspective is irrelevant to, like, 95% of people.

Edited to add:

> You have now moved on to confusing the way marketers lie in their descriptions of bikes in order to sell to the ignorant, with the actual and established sports that comprise mountain biking and the bikes used therein.

That's not the problem. The problem is that you started out by confusing the "actual and established sports that comprise mountain biking and the bikes used therein" with this discussion, which was an ordinary amateur consumer talking about ordinary amateur consumer products and reviews thereof, and every time someone tried to steer the discussion back to the topic at hand, you've gotten more and more snitty-snotty about your irrelevant No True Mountain-Biking Scotsman perspective.

HTH!
It is better for it to go to the common good than be burnt up in a sticker-over war that would eventually spill over into a violent territory war.
Are there any good FANG size companies? Amazon sucks, Facebook is unethical as most Social Media and ad selling. Crypto is a scam. It seems everyone is hiring but I struggle to find a good company to work for. Google perhaps?
There was at least 3 attempts from Microsoft in the past to do just this (Windows RT, S and X).

So while you can still run unsigned software on x86 on Windows today, if Microsoft previous attempts at ARM machines had succeeded, it would have been indeed impossible to run unsigned software on some Windows installations.
I usually set up a bastion host that has Tailscale installed on it, with my private key stored on a yubikey.

That way you need to be on the Tailscale network, and have my Yubikey/PIN - makes it nice and easy for me to get on from pretty much anywhere if I need to.
Soudns good. What fiction can you recommend for Solarpunk?
Like what?

I'm unaware of other ways to get consistent listings of new content at various sites in a machine readable format.
I've been using hyperweb for a couple of months now. Absolutely outstanding app -- it has completely transformed my mobile web experience. Custom ad blocking filters, automatically opening reddit links in Narwhal, custom css so I can browse HN with a dark theme... I kind of look at it as a single app that turns Safari into a slightly shittier Firefox. And since Apple has neutered browsers on iOS, this is absolutely as good as it gets.
The point of this exercise is that the regulatory capture effectively prevents life saving treatments from reaching the people who need them.

For example, better quality insulin is far more expensive because there's tremendous capture not only in the insulin market but the bioreactors required to make the insulin from bacteria. The process isn't insanely complicated, chemistry-wise, but the fact that only a few can make it and its MUCH better means they can charge more.

Another example is one-off drugs for rare but potentially curable conditions. They are often so expensive that they're pulled from the market because 1% of 1% of the population needs them and you can't use that to drive revenue.

3D printing took off precisely because of the LACK of regulatory capture. Imagine you had an FDA synthesizer that could make something common and simple like blood pressure medication for fractional cents on the dollar. You wouldn't be able to find the plans for this like you could for a 3D printed gun, for example, because the technology requires actual expertise to use. So you'd likely be left buying it from some biotech firm who will happily charge a price equivalent to a lifetime supply of all the drugs it can produce. You once again reach the affordability problem. Not because the technology is that far out of reach or so esoteric, but to be able to even get the device into the people's homes who need it you would need to find centuries of deeply entrenched and well capitalized special interests. Pharma would rather you die from something preventable than leave a single penny uncollected. Normally this would be considered hyperbole but in this case it's absolutely, verifiably true.

You can be certain if any DIY "3d molecule printer" ever took off there would be heavily armed alphabet soup boys at the DEA ready to kill whoever to keep the interests of big pharma in power.
> What if everyone had an analysis machine that could analyze the medicines, DIY or not, to find out what was in them

I can fairly confidently predict this will not happen like it did for software. Chemical analysis has been around a long time and remains difficult for experts to do accurately without context, let alone for a layman. Gas chromatography, for example, requires large and expensive machinery and some idea of what the substance is composed of in order to determine the concentration of analytes.

Reagent testing is cheap, simple, and straightforward, but it is generally only capable of detecting whether or not some class of substances are present above a particular concentration. You cannot use reagent testing to determine "how pure" a medicine is, let alone whether the impurities (which there will assuredly be) are potentially harmful.

As is currently the case for illicit drugs, I imagine there will be an ecosystem to verify that A) the active ingredient is actually present and B) some limited range of problem impurities are not present, but that is a much less stringent form of quality control than pharmaceutical companies perform.
I was expecting something as impressive as this: https://collection.sciencemuseumgroup.org.uk/objects/co84189...
The Need for a Culture of Achievement
You can download zone files for lots of gTLDs using ICANN’s Centralized Zone Data Service [0].

For ccTLDs there’s no centralised system and availability depends on the country registry. For example, Nominet make the UK zone file and others available for UK registrars for a fee I think.

Another approach is to buy WHOIS files from providers like Whoxy [1], the registrant data shouldn’t be used because of GDPR and other restrictions but as a domain list it can be useful.

I’ve done a fair bit in this area so if anyone wants any help feel free to send an email - details in profile.

0. https://czds.icann.org/home
1. https://www.whoxy.com
>>Different people have different parameters for success.

True, but I would say close to 100% of people who build and business and try to sell it have a pretty singular definition of what success really means - and it isn't 'I learned something doing it'
Then you’re making the argument that the hospital is forcing this because they’re worried about their own employees being hospitalized. Even at a 10% hospitalization rate (much too high), that’s 70 people. Who won’t all get sick at the same time, and likely won’t all be hospitalized in the Mayo Clinic.

The only way to justify this is reduced transmission, enough so that it outweighs the harm to patients done by firing staff in the current supply-constrained healthcare economy.
No doubt this characterisation is bring misused, or better, there surely is a lot of state-sponsored misinformation about misinformation.

That said, not every information out there is genuine opinion that just falls on one or another side of some point on the spectrum.

There is a form of "information" that is constructed as a cheap flood of random claims that are cheap to produce and hard to confute. (Aka https://en.m.wikipedia.org/wiki/Brandolini%27s_law)

Now imagine you recognize this latter as a serious problem in society. How can you approach to it without confusing it with the former?
Ideally you collect the data from students, so you have a constant stream of learner trajectories.

Also, if you did this well you could mostly get rid of exams.
You and me both! I made it to the round of in-person interviews when I was pursuing a principal pm role. 5 hours of back to back interviews, expressionless faces, repeated questions and almost zero eye-contact.

I am not certain what they were going for, though I can tell you I left knowing that even if I had gotten an offer, there was no way in hell I'd be accepting. It's obvious there are some very successful (happy?) amazon people (amazonians?) but no thank you, I enjoy living.
It's odd not being able to take a walking pole considering that tripods are on the allowed list.
>I wouldn’t call implementing redundancy and fail safety for a fairly complex system easy though.

What's the cutoff for IQ then to implement a redundancy. Is there really a mediocre software engineer who can't do it. My argument is with a lot of effort any software engineer can do it. And if anyone can do it.. it's easy.

>They might believe that it’s easy to write some software that in some way solves the problem but in my experience they don’t always engineer good software, and don’t always realise that their small part of the program has to work together with a huge amount of other software. Not that all software engineers do this either..

As I've stated before. There's no logical theory behind program organization. How you integrate software together is mostly gut level arbitrary decisions and many times those decisions come out wrong and people make workarounds to fix things.

It all usually ends up working in the end. It may be ugly but it works and then everyone rewrites and the cycle begins anew.

Nobody in this area of software truly knows what they are doing. Hence why it's easy.

Let me be clear about what I mean by easy. Easy means anyone can do it. If a lot of hardwork and problem solving effort is involved... it doesn't matter and it's still easy because anyone can do it.
Yep. It has been a long time since I ever needed to provide a wide-open SSH service. By far the normal case is to allow login from one or a handful of IP addresses, or maybe a /24. Do this and your SSH log noise drops to zero.
If you ever got in a situation where your sound card wasn't supported on macOS, instead of "you can compile a driver" the answer you'll get is "throw away your sound card and buy supported hardware."

You could apply the same fix to a Linux computer and purchase known working hardware, but because you have the option of fixing the software yourself that makes it a worse operating system?
Oh, totally agreed. Denver commits this sin all over the place, too. Honestly, the only place in the US that doesn't commit this is Boston and some parts of New England... because the roads were designed for horses at 10mph max and pedestrians.
Rich Countries Cannot Outsource Their Migration Dilemmas
this sounds like a lot of overhead, though
I try to have IP6 only addresses as it helps with port scanning. I'd think it'd be more common.
A good, somewhat related read:

https://waitbutwhy.com/2014/05/life-weeks.html
I've used Linux for around 8.5 years now, and I've never once had to compile a sound card driver to get my sound working. On the half dozen or so laptops I've installed it on since then, every one of them just had sound working without needing to compile anything.

>Every time Linux on the desktop is discussed, the reaction of the Linux desktop community is predictable: defending Linux and its problems, and downplaying the difficulty that many users have. A ton of people say "it works for me on my hardware" or "I didn't need to compile any drivers" or "the games that I want to play work fine". In fact, this comment thread has good examples of this type of reaction. So what? Until it works for everyone it's just not good enough.

I'm a bit confused; have you actually had this experience when you had to compile your sound card driver in the past ten years? It would be totally reasonable for you to be unhappy if you had, but given how much you're criticizing, I have to assume that if you had this experience you would have mentioned it. Given that, it sounds like the only criticism is that someone could theoretically happen to need to do this, but that's not really any different from any other operating system; the difference is that if your sound card doesn't work on Windows, you don't have the option to compile it at all. I'm not sure how often people have driver issues on Windows these days, having not used it much since before I swapped to Linux, but I'm not going to prematurely get angry about the idea that people _could_ be having driver issues but not have the option to compile their own if I don't actually hear about anyone having these issues.
Can also audit using ssh-audit [1][2]

[1] https://man.archlinux.org/man/community/ssh-audit/ssh-audit....

[2] https://www.ssh-audit.com/
The author paints it as some kind of conspiracy, but the simple truth is that RSS waned in popularity once push notifications became popular and widespread. Every user's RSS reader polling every website for changes every few minutes for all eternity is horribly inefficient and unfeasible to do on most platforms and devices today (especially on mobile). Pub/sub is the clear way forward, but it's just sad that there is no accepted standard for it.
> especially in the Bioinformatics/Genomics space

My first internship was re-writing a Perl program that parsed the output of `samtools mpileup`[0] into a C program that used htslib[1] to directly read the BAM file and extract the relevant data. This preprocessing (the Perl version) was the slowest part of the pipeline, even slower than the actual data analysis.

[0]: http://www.htslib.org/doc/samtools-mpileup.html
[1]: http://www.htslib.org/
>> They are already way outside of rational territory and deep into religious territory

> Until it works for everyone it's just not good enough.

You are pretty well proving the GP point. There is no system that works for everyone. Windows can be very challenging to get up and running on hardware setups that are not the most common.

> Windows and MacOS don't make people do that

False. And it's funny that this is about sound drivers. I have a piece of older but perfectly working Roland audio/MIDI equipment that uses USB drivers that are no longer supported on modern MacOS. How did I get it working? By compiling a fucking driver the other day. (And yes it works perfectly out of the box on any Linux kernel for the past 20 years).

Now go ahead and move the goalposts about older hardware not mattering or some nonsense. This hasn't been the only frustration with MacOS. It took these clowns the better part of a year to fix VLAN configuration in the network setup window. The only way to configure them for a lot of hardware was to drop down to the command line - so much for working for everyone.
Ask HN: Passwordless Access
Hello,
Im wondering if there are any ways to have a passwordless authentication for this new service I'll be implementing. I think I saw something the other day based on blockchain but didn't see any implementation examples.

I was thinking of making unique URL's and sending them to users email address.

If end users can access basic information that an admin has created for them, but still needs to be some what private. I do not see a reason to create accounts for all users.

A simple access url might be enough?

I'm not collecting sensitive information.

Name,
email
Phone (optional) for sms notifications.

Advice is appreciated.
I still use RSS on a daily basis, and it's great. I like Newsblur.com but there are a fair number of options based on your desire to self-host and/or use social features.

The primary thing I wish was better is a way to handle social commentary. Unfortunately this is an extremely hard problem to solve without allowing spamming and brigading.
Wow, that seems like a steal for 240€. If you don’t mind me asking, why do you need a single use laptop to travel? Also regarding the MacBook keyboards, they’ve completely redesigned them. They were the worst keyboard I’ve ever used from 2016-2019, but the latest models have a brand new keyboard and it’s my favorite laptop keyboard ever, although that’s obviously just personal preference.
Maybe tungsten molds instead?
Ah, maybe, it depends on the country. In Greece you'd get a fine if caught, but that's a huge if. You probably wouldn't be able to bribe your way out of it unless you were a huge company, as corruption is somewhat localized to higher levels.
I’ve been doing technical interviews for decades and have gotten good feedback from candidates about my technique. I have a small number of questions that are nearly impossible to have prepared for - one for instance is finding the median in a large dataset using map reduce. The question is open enough there’s a lot of solutions that are expensive, a lot that are dead ends, and one that’s pretty clever. The key is I let them investigate different possible solutions and give them guidance as they butt against expensive or impractical solutions and guide them to the answers I’ve heard over the years that work best. Because I ask the same questions over and over again I can tell how people treat the problem and try to solve it. But since it’s not a typical interview question no one is prepared to answer it off the cuff.
Ultimately my goal is to assess whether the candidate can understand the problem, understand dead ends when I point it out, understand how to pivot to another approach, and understand how to interpret hints in a positive direction. IMO these are the important skills for a professional problem solver working in a team.

I wouldn’t use automated screening tools. These tools select for irrelevant criteria in my opinion, and are mostly useful if as an interviewer you’re too lazy or too incompetent to formulate your own questions that tell you whether a person can solve problems and interact well in a group problem solving situation. But I’m an oldster so YMMV.
I bought ReadKit for Mac a few years ago and still use it today. I still like having a nice standalone news reader. It even ties into my Instapaper account.
Here's my (oversimplified) understanding of async: It's functions with yield points, at which other code can be run until execution returns to the function. Then, isn't it almost trivial to call an async function from a synchronous context? Just skip over the yield points?
Upon five more minutes’ consideration, I thought of several reasons why this would probably not imply either of the things I suggested it might imply. But my larger question is: What, if any, would be the larger cosmological implications of this discovery?
Meh, I just forgot you said that while I was replying
Unfortunately German only: https://www.rheingau.de/sehenswertes/sehenswuerdigkeiten/gra...

The oldest stone house of germany, ca. 1k years old. The wood is dated to 1035..1075 ad.

But Im sure that house is pretty young for Italian or Egyptian standards…
There's another QR-swapping scam running in NYC these days after the Citibike bike sharing system switched from typing a code at the dock to scanning a QR on the bike itself.

People will take the barcode from one bike and put it on others, meaning when someone comes to unlock a bike, it actually unlocks the scammer's bike. By the time the victim realizes why the bike they're scanning won't unlock, the scammer has ridden away.
That's not the point though. Leetcode can't figure out if you're able to do the work today. I think FAANG believes it can figure out whether they'll be able to train you to do the work.