skysight-inc/HackerNews huggingface dataset:
They are not considered to be the same race and yet both can be Jews.

I was just thinking about the Sith in Star Wars, but maybe that comparison hurts feelings again....
I tried to sign up on Android and it didn't work. It texted me a confirmation code, but putting it in the text box did nothing except make it flash and disappear. If I click "Confirm Code", a model appears with just the text "0".

Update:

On maybe the fifth try, it worked. But now it's requiring my contact list to proceed. The app itself on the home screen is just called "rn-fetch-blob" (i.e. a default react native project). I'm not going to give contact list access to an app that didn't even bother to give itself a non-default name/icon on the home screen. I think the app needs a little more time in the oven before you have other people try it out.
Can someone explain this to me?

Have people just given up?
> our modern society ... which is so fat and happy

We are talking about a society where, still, you have to struggle constantly to secure the most basic of needs. In most countries, anyway. So, ignoring the issue of mass obesity, I disagree.
I hope someone also picks up the work started in https://project-oak.github.io/rust-verification-tools/ - the idea of having a `cargo verify` tool that supports different backends is great for bridging the academic PoCs with something that an average programmer can integrate into the dev workflow.
Huh? What about all other vaccine, antibiotics and antivirals? When would you say is the "experiment" concluded. I mean I could always say: yeah it fared well for 40 years but what about 50? Do you know? Ergo still an experiment according to you.
> with the hope that more people will feel comfortable getting the benefits

Nope.

What you are doing is illegitimate spying on people. People who managed to find obfuscated setting and explicitly requested to stop logging private data.

I hope that this action will result in yet another fine for Google, this time measured in billions of euro.
A nice tl;dr from the newsletter that doesn't seem to be in the article (in short form):

> Among the many insights:

> - symptoms start to develop very fast, on average about two days after contact with the virus

> - infection first appears in the throat

> - infectious virus peaks about five days into infection

> - at that stage, it is significantly more abundant in the nose than the throat

> - lateral flow tests are a reassuringly reliable indicator of whether infectious virus is present
What is a headless CMS?
The Hopewell airburst event, 1699–1567 years ago (252–383 CE)
> Discord communities.

You mean the "app" that has no search and requires you to sign up to see anything, then pass some obscure initiation ritual by the mods, then be pestered with various bots. And that app doesn't even make money yet, wait until they decide to become profitable.
SEEKING WORK | Sarajevo (Bosnia & Herzegovina, Central European Time) Remote 4-person team of senior software engineers and designers here.

We all have 10+ years of experience working for Fortune 500 companies and several acquired startups. Comprehensive knowledge of:

• JavaScript/TypeScript, React, Redux, React Native, CSS, Node.js

• Clojure, Elixir

• PostgreSQL, MySQL

• Sketch, Adobe XD, Figma

What we can do for you:

• Design & Build an SPA/PWA/Mobile MVP on a solid foundation so it's smooth sailing once your userbase starts to grow.

• Scale up a team that has an overflow of work or wants to add certain tech to their stack.

• Revitalize an existing app. Solve design, scalability, stability and performance issues.

• Consult on domain specific topics like banking, real-time trading, payment processing and PCI DSS.

Sectors: FinTech, MedTech, EduTech, Social

Website: https://go-stellar.com

Email: hello@go-stellar.com
The article talks about bugs in code for scientific computations, not how to fix them.
It seems to be spaces so I wouldn't try to actively sabotage his campaign
> Python -- never mind Ruby

Lol, with the new JIT compilers and TruffleRuby, Ruby is blowing Python out of the water performance-wise. TruffleRuby approaching Nodejs speed for some tasks.

But yes, CL is fast. Faster than any other dynamic language, approaching Java speed (and Java is shockingly quick considering it has a GC).
That's really cool, but COBOL on wheelchair sounds kinda offensive, seems risky for a politician.
Not sure how you reach that conclusion, the root cause is described in detail.

Of course they'll fix so that this problem doesn't occur in the future. But as said, it had nothing to do with telemetry. Just that telemetry happened to trigger the bug.
> there were many contributing factors working together

Looks like one factor, to my eyes: telemetry.

I have telemetry disabled. But if you're going to default to "telemetry on", and then silently send data to sites that aren't in the address-bar, then it's your responsibility not to "break the web". You can't blame it on rust, or necko, or viaduct, or google.
A CMS without the consumer-facing frontend. (i.e. just storage and backend editing UI, with APIs exposed you can hook a custom frontend to)
How do you mean? Do you mean infosec people usually don't have degrees?
I expect one buys the NAS themselves and pay electricity
I have not downvoted it as I see it as a nice example of why Google should be receiving fines in billions of euro.
Thanks for the comment! Found that years of studying and working in Architecture and Design that I shared my work online maybe 2 times so it was that thinking that formed a lot of the architecture. If you share different things with different people, why not have the same mechanism online?

I guess the question we're trying to answer now is whether we narrow in on creating a more intimate social network for regular use or create a type of social-email hybrid for this exact use case.
I agree but it is also worth how/if the majority reacts to those kind of fringe ideas.
Senior Wrangler is genuinely impressive.

I have it on good authority that Boris Johnson was viva'd at the end of his classics degree – implying he was on the first/2:1 boundary – and graduated with a 2:1.
It's so annoying. They have the screen real-estate to show both units, but for some reason it's like they're trying make a very subtle statement to their international audience. "For Americans only" or something like that.
I still abhor this everytime I see it. I'm on a bed with 5 puppies at this moment, lol.
Pretty cool that you took your time out to write some very useful tips so thanks a lot. It is my first video so definitely a very rogue in that aspect haha.

I’ll take it on board for the next video! Thanks
Cool. Thanks for this feedback! We started with mobile because that's the dominant force these days but depending on movement it would be great to create a web-app or desktop client.
LibreOffice 7.3
I was also disappointed for these reasons but couldn't have stated it this well. I also find it alarming in this age of citizen hostile countries blocking/rerouting Internet and J-curve countries having intentional calamities to think that everyone who uses Firefox might hit bizarre technical failure contacting unnecessary centralized servers like this as a first barrier to get past before following common DNS setting instructions to get to whatever local networking people are assembling.

(That's a lot more graffiti than "8.8.8.8".)
I agree. I've been lazy with my use of language, I'm categorising both insane and unreasonable people together, I suppose because I see them as existing on the same spectrum (i.e. when people act in extremely unreasonable ways, we medicalise it, whereas when they're just a bit unreasonable, we consider it to be normal variance).

The effect seems to be the same though, that you shouldn't use their opinions to inform policy because they're not using causal reasoning. Basically, to listen to them would be populist. It might be a vote winner in the short term but it's a bad thing in the medium to long term.

Or, on a more individual level - I don't hang out with these people because well, it's pointless. We can't get on, we can't learn anything from each other, they're broken humans.
> The issue is that if you’re developing like this on WP you don’t gain much from it except the ability to use a select few plugins and an admin UI. At this point why not use a solid PHP framework like Laravel?

Agreed, if you have a dedicated engineering team, but most non-tech companies that need basic websites don't...so in that context, Wordpress's admin UI is a big gain. It's familiar to users and provides media management functionality out of the box. The vast majority of CMSs have terrible/non-intuitive admin UIs and limited functionality. Leaving aside Gutenberg and the rest of the garbage pile that is Wordpress, the admin is the primary selling point of Wordpress IMO.
Just added myself for notification when their kickstarter begins (Simula). I wish they went with an AMD APU, instead of Intel Xe graphics. The youtube gameplay comparisons seem to give AMD a big edge in well... everything. I'll definitely be backing this. I want to play Tabletop Simulator on all of my walls and ceilings. :-)

(Thanks for telling me!)
some of my top picks:

- Hammerspoon: https://github.com/Hammerspoon/hammerspoon

- MeetingBar: https://github.com/leits/MeetingBar

- Stats: https://github.com/exelban/stats

- Syncthing: https://github.com/syncthing/syncthing-macos

- Bitwarden: https://github.com/bitwarden
Not a security guy in any sense, but working with b2b often.

Request signing by a shared secret (jws or jws based) is what I see at almost everyone we work with in small business range. But I doubt its purpose really, they do not rotate keys ever, and also if someone intercepted a request in a plain text, they could still do some damage. For persistent links rotated shared secret simply attached to a request, iow basic auth, would be enough.

I think some of them would do that, but looking “unprofessional” in eyes of your partners feels bad. They are happy to log into their email and banks with a cookie, but in b2b it’s a bad form. Consider this if politics is a thing.

You probably want to analyze your attack surfaces and use a corresponding technology. If it’s just info/events, basic auth is okay. If the access is subject to change/revoke, use time-limited tokens like jwt. If it’s financial ops, sign every request so that an attacker couldn’t forge a request in their favor. Tldr it depends.

Basic auth would work well for our needs and it's very easy to build and use

So much yes. For some companies it takes weeks to implement correct auth, because developers cannot write good guides on average and don’t understand each other contrary to common beliefs. They aren’t all FAANG graduates. Integration slows down so much because of that. Make sure that you provide enough documentation, working examples and in-API auth debug modes, if you decide to implement non-basic auth.
Couldn't have said it better myself!
I'm beginning to think it's on purpose. It seems impossible to me that cars can't handle PlayStation 2 levels of UI. Perhaps it's done to dissuade you from chaining together interactions. Rather, they want you to do one action, then look at the road while it's loading and then do the next action etc.
As I like to put my privates at the bottom of the definition of a class, having to use the class keyword and then having to put a public access specifier immediately after is fairly annoying :).
This is one of the fundamental mysteries of quantum mechanics called the "observer effect". Experiments have proven that particles change their essence at the instant moment they are being observed. This discussion is not only philosophical, we can prove perception changes everything.

https://m.youtube.com/watch?v=ZH9OfoM1MiU
Mike Seavers is really inspiring. I haven't seen much content published about this transition.
Cool. Appreciate this. We build cross platform to give people choice but most dev time has been spent on iOS so its further ahead. Agree that the Android needs baked longer. Will fix!
Syncing contacts from my phone is a hard no even from established companies -- there's just way too much potential for abuse. An unknown individual wanting this screams scam.

But let's assume for the moment that you aren't running a contact harvesting scam... I hardly use Facebook and I'm very particular about who I add on there. I actually go back and remove people I don't interact with or who create noise --I want to be able to log in once a week and see what people are doing, not scroll through memes or other crappy shared content.

My contact list on my phone, on the other hand, has friends, ex-friends, family, current and former coworkers, etc. Most of them I don't want to be connected with on a social network.

So I guess what I'm saying is that from my perspective, you aren't solving any problems, and are just a potential security risk when it comes to sucking up contact information.
The argument IIRC is sites want eyeballs and wouldn’t block content if you don’t grant notification permissions.
Blocking for Ad/trackers is not so dissimilar
Some quotes I like:

Andreas: Everything is just a piece of code that somebody writes. And if we just make all those pieces of code and stack them up, it’s going to work. I had no illusions about how an operating system looks once it is put together and works. Now I didn’t know how to get there, but I reasoned that if you just start building these components one by one, eventually you’ll have the full stack and it will just gel together. So that’s what I started doing.

Andreas: I remember so much leaving Apple and still having that feeling of, “I can just go and look in the source code of this thing.” And I was using a MacBook when I left Apple. I remember getting really frustrated when I couldn’t bring up the source code for stuff anymore. ... I think it would be cool if everybody could have that feeling about the software they use every day without having to work at Apple. The spirit of taking ownership of the whole stack, Apple doesn’t have a monopoly on that mindset. And it’s definitely something that could be replicated elsewhere.
> I think "tracking" is a bit misleading here.

I think it's misleading for other reasons. Namely, I can't be 100% sure that if I turn it off, I won't be tracked - or if you just stop display the tracking data you gather anyway.
No-search is the best part. You actually have to talk with people, and get to know them, to discover more communities!

Sadly, it's a proprietary space, yes, but still.

The difference with "social" networks (and now the bad state of search engines) is that you actually get to be part of a community. As opposed to shouting in a loud bar to compete for likes to get heard better maybe if some algorithm likes you.
Sound dystopian. Did I understand it correctly? Technology permitting, a real life equivalent would be allowing authorities to mimic your appearance and go impersonate you in social gatherings, your work, and even your house.
Wow. Amazing technology.

I would buy the "Human Static Presence Module" in a second if there was a tutorial on how to set it up (code wise). The YT video linked on the page made me way more curious then I thought I'd be.
I’d like to get back into lisp, but I haven’t found an environment that is as good as the AllegroCL one I used use. Everything seems to fall apart when using the debugger, or doesn’t quite have eval-just this-selection.

What’s been your experience with the debugger and integrated repl?
Clickhouse for storage, airflow for orchestration. Dbt for reusability in your models and transforms. There are a bunch of decent extractors that have prebuilt connectors to pull data from third parties.

Most of all, though, you should think through how users will discover data, and how you will check quality. Once your transforms start getting complicated, you’ll want this (and maybe a metric store).

Since your data isn’t huge, build things so you can rerun in a different architecture, should you outgrow your setup. Keep a certain level of raw data where possible in AWS, make sure your dbt build works from scratch.

While your data size is small, focus on delivering value from as simple an architecture as you can get away with. If you can rebuild your warehouse because you’re using standards, the underlying tech doesn’t matter as much as the processes and culture you establish.
> but can you find such a better app at all

In this case - probably yes, and even making own one is feasible.

It is not as bad case as with mobile OS where making own is infeasible and among existing ones all are terrible. You can only select flavour of terribleness.

> in general, the incentives given to developers by companies / society does not align with better quality software

Exactly

> Still, probably the ugly chair will have a way larger financial margin. Guess what companies are going to produce?

Ideally there would be both company producing cheap ones (IKEA) and ones producing masterpieces (carpenter making one-off furniture on request) and anything in range.

> Beauty and good will always need to be fought for.

++
Having worked on such software: I wish it was on purpose...
In the US houses are supplied with 240V split phase. So most outlets are 120V from one of the two parts of the same phase. There are some outlets (e.g., for a drier) that use the whole 240V and with those getting high amps is also easy because US homes also usually have higher total power supplied than in Europe and they have standardized plugs that mean higher amps are available (without going to the industrial plugs we use in Europe). But if all you have is a pre-existing 120V outlet then it's very slow. So in more cases they need to do an upgrade but when they do the result is usually pretty good.
The question is rather: how do you expect to get rid of nuclear energy production in the coming century AND reduce CO2 emissions AND not get energy blackouts and prices soaring to unimaginable levels?
This is quite disheartening to me. Do changes like this ever get tested with focus groups before getting rolled out? I can’t think of anyone who would be ok with this change.
+1 Love his honesty about his motivations to become a director. Most people would never admit these even to themselves, let alone say it out loud in a podcast.
They also have a deep experience in certification and high assurance norms, which makes them an interesting partner whenever you're entering a regulated market. Not something I make use of, but I see a lot of papers/books coming from there and had deep very interesting discussions about the whole software and system safety engineering process and trust-building.
I'm sure that was true for about ten minutes after it was written, but it's unlikely still the case. This issue appears to suggest detections:

https://github.com/Stanley-GF/PirateStealer/issues/45

I think I've found a relevant virustotal:

https://www.virustotal.com/gui/file/de7535f8c64d7a6ac8094146...
I agree with the first point but can you cite some examples for the second. I personally feel they are/should be most developer friendly company considering they are purely engineering driven.
This is so useful, thanks!
> the fix has to be in the code that communicates back, it should fail gracefully.

The bug that caused the hang was in the network stack itself. There was no way the calling code could have prevented this in any way. You can see this by taking a look at the linked HTTP3 code. It's not that the higher-level code kept retrying over and over causing the hang, that was not the problem here.

Under "Lessons learned" you can also read "investigating action points both to make the browser more resilient towards such problems". I agree that this is broadly spoken, but it covers ideas that would have made this technically recoverable (e.g. can network requests be compartmentalized to not block on a single network thread?).
1/ not always, and it limits salvo size, lots of the launchers are multi rocket, so if you can take out the launcher while it still has munitions, you stop rockets, destroy the launcher, damage the site which may be connected to tunnels and maybe people.

2/ like AD you can have red/green zones for pre-authorized counter-battery
> users who disabled Telemetry would see this problem resolved even though the problem is not related to Telemetry functionality itself and could have been triggered otherwise.

All they mean by that is that it was a bug in their HTTP/3.0 code that could have been triggered by any HTTP/3.0 connection that was using that codepath. But the reason for that particular connection (which had the conditions to trigger the bug) was for telemetry.
They explained that in the retrospective.

The code _does_ work the way you describe, _except_ for the latent bug that caused the networking thread to get stuck in an infinite loop, which it was never supposed to do, even when errors occur.

It was never supposed to work that way, and the fact it did was because of a bug they'd never seen before.

So it wasn't that "oops, we shouldn't have built the system to get stuck forever when it fails" but rather "this bug triggered that bug which combined to cause a far worse result than 1 bug alone could have".

The only "lesson learnt" there is either that they need better ways to find bugs, quadruple up their thread count just so that different subsystems can't coexist on the same threads to avoid a theoretical problem that shouldn't ever happen again, or they just come up with infrastructural changes to minimise the negative results of the next "2 bugs reacted together and caught fire" scenario, which is the one they went with, and the only sane one.
What I have heard from them is that it requires "wet lab experience" to really learn it. Not sure how true it is.

If you were to ask me, programmers can't learn it because what they are learning is based on complete misunderstanding of organic chemistry (which has not been updated with the modern understanding of physics)... so it is bound to drive anyone who tries to make sense of it crazy. The only way to learn it is to accept all the rules and ALL the exceptions to the rules as the foundation and go from there, which not a lot of people are willing to do.
If you're in Europe, check out the VW e-UP. It's about as basic as an electric car can get these days.
It's the article which is comparing the height of a can to the radius or diameter of the motor (apparently the radius, but it would be more logical to compare it to the diameter).

It's just as valid as using bananas for scale, but the issue with the article is that that it doesn't even bother to mention the actual dimensions in cm or inches, yet it uses "tiny" in the title to describe the engine.
How exactly is post encryption implemented? How do viewers decrypt the content (key management)? Where is it decrypted? In the browser? Server-side?

In the end for me the question is: How can I trust you to not leak my private posts? Why should I not continue using Signal groups? I realize that I’m probably not your main target group.
It would seem easier and more efficient to fix the cultural taboos around nudity and over-sexualisation.

Breastfeeding mothers would be collateral winners of that change for example.
This is called a "biformity". There was a great post about this the other day:

https://hirrolot.github.io/posts/why-static-languages-suffer...
that’s a key question. OP mentioned Path (which was an incredible product), but probably they struggled with the acquisition. One of the super powers in a social network is the network effect and OP need to understand how to overcome that.
They can already identify a person from typing, gait or even how you move your mouse.

It is either very dishonest or extremely stupid for an expert to say mm waves can't be used to identify a person.
Gunfire Reborn - a little roguelike shooter, every playthrough is different because of random power-ups (scrolls) that can be traded among the party, to optimize your build as you go.