skysight-inc/HackerNews huggingface dataset:
It doesn't matter which OS you use - you will not be immune to nation-state actors. In fact you will be more exposed to them using google, considering their history of providing data and access to governments.

With de-googled OSes that provide proper network controls, you can at least cut out commercial spying.
That's funny. I'd have thought most maps are based on the standard Mercator projection, which is infamous for exaggerating sizes more the farther north you go? (The commonly-used blatant example used is how Greenland looks almost as big as Africa on a flat map, but on a globe it's tiny in comparison.) So unless you've seen some weird non-standard map, the north of Sweden probably looks bigger than it ought to, not smaller.
Thanks for sharing this! I'm of the mindset that it's safer to assume humans can experience a form of quantum entanglement between them, especially genetically related people than it is to deny the possibility.
I think this is a really bad sign. They’re saying that they will throw out all the rules for quarantining and testing, just to get workers back to work. But although those workers might claim to be asymptomatic, wouldn’t they risk spreading infection? Is it really okay to tell Nurse Typhoid Mary that it’s okay to go back to work if she just feels okay, regardless of what the tests say?
Love Deno. So much much more intuitive and simple than Node. I highly recommend you giving it a try, if you used Node before, Deno will be a super easy to learn tool.
Why is anyone still using packages for bloated software like plex? Pull the docker container and call it a day.
Europe Is Entering a Death Spiral: How Immigrants Can Save It
Agreed, I can't imagine wearing shoes all day.

The most pleasant footwear for me is Birkenstock Arizonas with socks, at home or office or when driving or running errands. This is the classic model with two straps over your foot and no back strap. I only switch to shoes when I will be walking some distance.

With the Birkenstocks, most of your foot is ventilated even while standing or sitting, and every time you take a step the bottom of your foot gets some air.

Don't over-tighten the straps. You should be able to slip your feet in and out of them without reaching down. Have at least two pair on hand, so you can easily slip out of one pair and into another.

In the summer I may leave off the socks to stay cooler, so it is especially nice to switch to another pair of sandals to let them dry out. With socks in cool weather, I'm comfortable wearing the same pair all day.

If you get these, be sure to get the "soft footbed" version. They are much more comfortable than the originals. And I like the suede version for the softer straps.

You may look geeky wearing them, but face it, you're already a geek!
As an Italian, I stopped after I saw the internet has decided that pineapple on pizza is ok.

Illegal.
Quantum Turing Machine!
Wasn’t there a similar thing in the 60s?
My best guess is: It won’t last.
> This sounds increasingly like security theater.

It does help. Quite a bit.

Each layer (e.g. firewall rules that require that all internet access go through a proxy), adds non-trivial amount of work for the hacker to get anything useful done.

1. best case - hacker will give up.

2. good case - you have more time to notice and react.

How much layer cost you, how much does it cost for hacker to overcome it.

Things to remember:

1. Not all hackers are nation states. Most are not.

2. We must accept that no security measure is absolute even against script kidies. Given enough time and luck/misfortune js sandbox will do "rm /sensitive/file".

Recent Log4shell example shows that one can follow all best practices and still get bit in unexpected way.
What the pandemic has done to our memories
Have you tried it with this service? My fastmail managed custom domain doesn't have DMARC set up according to this site. The other two are set.
Most wholesome GH thread I have read in a while. I for one appreciate your most terrible poetry.
Except for the folks accused of doing things in said made up memories - like all the poor bastards railroaded in the 90’s as part of the crazy satanic panic Bs.
This is one of the many things that annoy me about "web3" - they have, in my mind, appropriated a term that denotes something quite different.
They have TPMs and closed source firmware, so you can't be certain you've truly de-googled your phone.
I would argue that the failure in the presence of an alternate means to facilitate decryption is a negater of the whole "effectively" clause. That's okay though. Civil disobedience is the best way to go I'm afraid.
Technically correct.

Also related: https://microsoftedge.github.io/edgevr/posts/Super-Duper-Sec...

Most Browser exploits these days use Heap Spraying attacks that try to corrupt the state of the sandbox in between bindings and native libraries (or their data structures that are transferred between contexts). So technically, a JIT VM always leads to possibilities for breakouts when there is a discrepancy between the optimizer and deoptimizer's assumptions (e.g. in regards to callstack, garbage, memory ownership etc).

Also: There's a legacy navigator.plugins C-Bridge based API which hasn't been maintained or redesigned/refactored since the late 90s yet it is still active in most Browsers.
Other than what's been mentioned, the "digital nomads" have a pretty long history of traveling to low-cost tropical areas, to get most bang for the buck as far living cost goes. And it makes sense.

But these projects, however, I'm not sure. Maybe they really just want some secluded cult-like utopia of likeminded people. This is gonna be much more expensive than simply camping out in Thailand.
read the Modern View section of the wiki page. tldr is it's massively over stated and the actual impact was completely negligible. Not quite the same as the 2 trillion dollars global crypto market today. Any comparison of the two is just not done in good faith.
Their ranking is based on inbound shipments / outbound shipments.

Texas had 12k inbound shipments to their state, but they also had 10k outbound shipments, putting them at #17 on the list.
While they are indeed sightly different, I fail to see how the differences are at all relevant in this context.
That's sarcasm isn't it? When an article about nuclear waste starts out with "All human activities produce waste" one can be pretty sure that one is in for a treat.
Just call and ask

https://www.att.com/support/article/smb-internet/KM1181996/
Or just call it blaze :)
As hard as it is to imagine a rat punchline, I find it even harder to imagine the tiny little cups they'd put the punch in.
Youtube vs peertube vs odysee is a good comparison between web2, fediverse and web3. Youtube is popular and garbage, peertube unpopular and garbage and odysee unpopular and not garbage.
VAT is added on top of your invoices. It's paid by the end user to the government. It only passes through you.

When I measure my revenue, I always leave VAT out. It was never my money.
The simplest changes we could make would be to ban the addition of sugar to certain mainstream food categories (drinks, bread, sauces), and also to require nutritional information to be listed as per 100g, not per serving size.

Follow that by banning burning of coal and oil, we also remove a significant amount of noise and air pollution.

Next we can ban any hormone-disrupting chemicals (including as plastic additives) from being used in anything that will ever touch human food or drink, or ground water.

Finally we can legaize euthanasia for anyone aged 70 or older and with a terminal health condition.

With these changes you have a human population much healthier and less reliant on expensive healthcare.
Completely agree. However some of the most painful things I’ve done have been objectively hilarious.

I wish I’d seen me drop a beehive.
You are allowed to circumvent to access a work. No one is allowed to publish a method to do so (well, I believe the original copyright owner might be?).

So, most likely this GitHub takedown is perfectly legal.
I like nicer products but last time I found a good product on PH was about 5 years ago. The best of awards every year also hints at how bad it is - most of those products aren't even that good.

I noticed some things did do really well, like a list of decks from successful startups. Again, reinforcing that the main user of PH are people trying to launch a product.
Wow. Now that is capitalism at work.
The Query and Answer System for the Ambitious Developer
Absolutely. Nevertheless, and to nitpick, "beauty" and "positivity" are not isomorphic.
> very minimal/low-feature language, that’s fairly low level, even if that means somewhat more awkward or mistake-prone code

Do you think this is a good trade-off?

If you're using a tool every day or at least regularly, the one-time cost of mastering a slightly more complex tool is amortized over all uses of that tool.
This, along with "we were covered by the media"
Is the situation for Rust different than as described here: https://github.com/rust-lang/rfcs/pull/208

“Currently, attributes and macros/syntax extensions are both conceptually macros: they are user-definable syntactic extensions that transform token trees to token trees.”

FWIW I definitely admit the point about Go compiler directives sort of cheating into this space a bit - I see them used responsibly for the most part but it’s a valid point. (Go’s struct tags OTOH, are an escape hatch I revile…).
A Song of Ice and Fire was written on Worstar for DOS, and I believe it’s the only editor the author uses for book writing.
It’s one side of the coin.

The other is, to do anything at all of practical use in 98% of jobs, day 1 is installing a tonne of OS stuff.

It’s not practical to expect pretty much every dev to inspect 100% of that, even if that’s what they implicitly agree to do in the license.
The last two paragraphs of the medrxiv article is the following:

"Our study contributes to emerging evidence that BNT162b2 or mRNA-1273 primary vaccine protection against Omicron decreases quickly over time with booster vaccination offering a significant increase in protection.

In light of the exponential rise in Omicron cases, these findings highlight the need for massive rollout of vaccinations and booster vaccinations."

Compare this to the suggestion of WSJ's word choice of "obsolete"
Of course it'd be better, but I don't think a simple declarative language could easily cover the breadth of what is currently done in postinstall scripts.
Nor should one blindly trust a Nobel Prize winner.

cft (who, like us all, is not devoid of bias) linked to Wikipedia as support for the importance of this letter. I think it's only fair to examine that page to check if that support is appropriate.
Melbourne, Australia here -- I wonder if the negative attitudes to DST relate to something specifically American. Perhaps school starting earlier in the US than here?

Can't say I've ever wanted to stop daylight savings. Never-ending afternoon evenings every day in summer, delightful!
At that fatality rate, the virus would probably struggle to spread as its carriers would all die first. The sweet spot is probably around 40-50% like the bubonic plague
Fun fact: the article was co-written with Jed Rubenfeld, who is a constitutional scholar and husband to the "tiger mum", Amy Chua.
The phone and computer you are using, the vaccine that protects you from covid, the medicines that keep you living when you get sick, these are the products of thousand years of hard work from past generations.

People wanting to "abolish work" may rather leech on society, it is a consequence of social media brainwashing: gambling, crypto, FIRE, 4hww, etc. These concepts have wide scale, harmful implications for the future of humanity
people cannot send spoofed emails with my domain. I'm just an enthusiastic running his mail server so no big gain. But I can see why $BIG_BANK would like to prevent people to be able send fishing email from accounts@$BIG_BANK.com from random computers on the internet...
Sure, but I wouldn't call laughing as the world burns "beautiful" either – more "psychotic".
First time I read a comment on the Internet about so well how bad things are, how even worse they are going to be and how nothing is actually done to avoid it. Thank you.

And if I may add, before COVID I was also concerned about antibiotic resistance, mainly because of how we produce a big part of our food (meat). But after two years of COVID, and given how we dealt with it so far, I think it's an even more worrying threat than I thought. Combined with air, water and soil pollution, there's too many fires to look after.
How does this compare to the SCiO scanner in terms of use cases, etc? Or is it apples and oranges?

https://www.consumerphysics.com/technology/
Except you can run JS and C++ in it and the VM is already on every machine on earth.
It's good stuff.
It might be good to have an option to have a time threshold based on when the typing starts, not when the word appears. In that way, the time taken to recognise the word becomes irrelevant.
no need to... but it is not that hard to implement...
I’ve seen Australian magpies do exactly the same thing. I was thoroughly unsurprised to see that they are in the list of laughing animals as well.
Huh, foxes. Everything foxes say sounds like laughter though.
Seems like it's a crypto secret society.
Deno’s permission system is broken, you shouldn’t rely on it. Deno developers consistently ignore security issues, high priority bugs take months to fix.

https://github.com/denoland/deno/issues/11964

https://github.com/denoland/deno/issues/9750

API-based access control can’t possibly work because it’s nearly impossible to predict the effect of any single permission. For example, “permission to run specific command” makes no sense without checking the integrity of the binary, controlling the environment for LD_PRELOAD-like hacks and evaluating the code of this command for possible escape hatches. If you want to isolate a program, you need to do it on the OS level.
As someone who open sourced a lot of my code as well, I could also see a lot of potential scenarios that would piss me off.

Some of the stuff I made is open source because it might help others like myself. But every code you put out there also means work. If my code was then used by Amazon, Google and Microsoft, which would push a ton of work my way without donating the money for my time, it would certainly create some pressure.

Maybe we need other licenses that exclude Megacorps or somehow mitigate the problems stemming from their monopolistic existence?
Depends on what you mean by "real time". If by "real time" you mean "the spacetime interval between the event 'supernova explodes' and 'explosion observed on earth' is lightlike (or null)", then we witnessed it in real time. I can't think of any other definition that is observer independent.

I also argue that it is not well-defined, as the time span depends on the observer, as you say. Did it happen 120MY ago or 1MY ago? Both can be true for different observers, and none is privileged over the other.
Could the link please be edited to used https?:)
If that's the case, people will have to start practicing account hygiene...
It's funny how so many people bitch about "responsibility" or point out that "well, aws & co. are allowed to use the code because loicense"

Have any of these keyboard-warriors ever read a FOSS license? There's a huge fucking disclaimer at the bottom in all caps saying "this code does whatever use at your own risk".

So what? Is the author bound to the moral implications that their users assume the code actually works, but it's totally okay for amazon to completely disregard the open source ideal of "give and take" because the license technically allows them to?
What's the benefit over VLC?
> So why not have Robin sort out the payment?

Sure, that's what should be done. That is, that's what Upwork should do.

> There's no mention of that from the freelancer or the freelancer's account of upwork's responses.

Probably because it's too obvious to mention.
Not sure if that is even enough, at least in NPM the .lock files work on semantic versions, not commits. I'm not sure if NPM enforces you to change the semantic version with each commit.

And even if all of that works, you still run head first into the issue once you inevitably upgrade the dependencies.
On the euthanasia point I would agree that this should be a legal option (but on a humanitarian rather than a financial basis).

We definitely need do do a better job with end of life care/terminal diseases - in practice this would look like earlier/more hospice/compassionate care, less needless end of life treatments and interventions).
My argument is that you shouldn't automatically trust it just because it's free. You shouldn't rely your entire infrastructure, and, perhaps, life, on it. If you do, there is no one at fault but you, because you passed all the responsibility to someone you have no control over. You are not entitled to protection and safety from the side of developer just because you said you rely on them - they are not going to carry your burden when it's not their job to do so.

Either you stay cautious, in which case you maintain your own forks for your own business or reinvent the wheel, so you don't rely on others that much, or you admit that you can't just reject this dependency - in which case it becomes either a public infrastructure, or a "donut business" on its own, and both should be financed as such. Take Linux as example, Linux is backed up by corporations and financing because everyone understands how crucial Linux is for our living. People took all the necessary steps to guarantee that kernel dev team is not going to disappear at any moment.

This is not the first and not the last time this happened. For some reason people think that open-source devs owe them something just because they had the right to bring their projects into existence. Javascript environment especially suffers from it because of unknown obsession of people to depend on packages which contain 1-2 lines of code at best, packages that can disappear at any moment.

Faker dev acted maliciously, but no one could guarantee that he wouldn't. No one was there to care about his mental state, or his wallet contents, and only relatively small companies and few people donated to his project, something he worked on for over a decade.

Sure, you can blame him all the way you want, but that won't undo the damage. If you rely on something maintained by an individual, you have to take into account that this individual is an actual human, this human actually exists and like any other human he is a subject of free will and uncertain futures, and whatever risks come with it. If you don't, this is what happens to you.
> smaller, faster, purpose-made modules and frameworks that don't rely on thousands of dependencies.

This isn't necessarily enforced by Deno itself right? That seems like more of a side-effect from the self-selection of its users. Once the ecosystem grows and the all the "normies" come in, this doesn't seem guaranteed at all.
What makes it better than VLC?
Also the screen resolution options on a Macbook Pro 2880x1800 retina screen.
https://i.imgur.com/Tsv3ril.jpeg

It's hard to tell how useful this app is with a non-HiDPI monitor since it quickly gets into unusable resolution territory, but still HD or HiDPI I find this to be very useful and extremely sharp looking.

To repeat the links here since they are not clickable in the original post.

https://github.com/rbreaves/betterScale

https://www.reddit.com/r/UsabilityPorn/comments/ryo099/1920x...

I made this in part because I was getting tired of someone telling me how blurry everything would be scaling things like this, but clearly that person had never figured out how to use xrandr properly or used it with a DE that had good up scaling support to begin with.
Tell HN: Reddit is a nightmare but a dream for bugs
From my personal experience, Reddit.com is full of bugs. Right now, I'm trying to write a reply and copy some quote. The quote is getting pasted like thrice upon doing it once. CTRL + backspace is deleting words like a thresher gone haywire. Every now and then, my karma count fluctuates. Sometimes it's even 0.

I really didn't want to write this here and defame a site but I am really bound. People from Reddit Inc., if you're seeing this, please do something about it. Really it's taking me a lot of time trying to write a reply. I'm not saying this happens all the time when I open reddit but that's the point, I don't know when it'll go haywire. It needs fixing.
See also: https://github.com/rocky/remake

ISTR there was a thread about it here a few months ago.
> at this point I just see him as holding other committers contributions as hostage

No he's not, and you're just trying to be outraged. Just fork the code if you don't trust him. Oh, but you don't want to take his place as the maintainer? Maybe deep down you know that there's still a difference between being in charge and submitting the occasional pull request?

Your actions contradict your words here.
Security auditor here.

Every time I see a client importing unsigned code with no evidence anyone they trust has reviewed it, I flag it as a supply chain attack vector in their audit and recommend mitigations.

Some roll their eyes, but I will continue to defend it is a serious issue almost every company has, particularly since I have exploited this multiple times to prove a point by buying a lapsed domain name that mirrors JS many companies import ;)
I went back to using a ThinkPad from 2012
As a non-js dev, is it better than Node?
Maybe try http://www.typingtom.com/.

I found it broke up touch typing into just the right size chunks to engage me.

At the start of Covid, I spent a week doing half an hour a day. My typing speed and accuracy improved out of sight. The whole process of acquiring muscle memory is quite magical. I highly recommend it.

This is the companion site to http://www.speedcoder.net/, which is for coding, and presumes you start with reasonable touch typing skills on normal text.
I was into minimalism and saw the rise ift Marie Kondo. It had a mininal impact on the related communities in my opinion. It just gave them useful vocabulary for existing practices.

I slowly lost interest because minimalist communities had an unhealthy put object count above practicality. It became "the minimum" instead of "just the right amount".

Minimalist content creators also hit a wall when their practices were at odds with affiliate-based monetisation. It's hard to pocket a commission without selling something.
You didn't address my direct point (speed of propagation) plus guess what, those wiped out several civilizations in the New World, directly contradicting your entire subthread.
> Not sure why OP is so adamant to protect Robin.

Is he?!? Where, when, how?
You don't have to always pull the latest release on utility packages if you want to evade such problems. Sure, you would need to audit a lot of packages in certain languages...

But yes, I prefer to "vendor" my dependencies too, especially on large projects.
There is no way around the issue because "dependency hell" is indeed a thing.

Dependencies change. Dependencies of dependencies change. You can't not update any of your dependencies for too long or there will be other problems. Something is gotta give.
iCloud+ Private Relay: can it be trusted?
The tone changes half way, it wasn't all parody, though :-)

Thought it would be clear enough.
This seems to be an issue between upwork and the fraudster.
I think that it's less about studying, and more about passing time and creating pretty things.
I carry my socks over to my shoes and then put them on. But of course, it's socks first, then shoes.
If you, the person reading this comment, write Go without golangci-lint, you’re really missing something.

It’s fast, easy to use, and makes Go programming so much nicer and safer!