skysight-inc/HackerNews huggingface dataset:
C'mon

The real priviliged class uses regular banking, private banking services[0], they don't need bitcoin.

It's the Engineer in Nigeria trying to conserve his 5 figures at most wealth for his family who needs Bitcoin.

The 7 or 8 figures guy just calls his nearest bank and they will give him the whole package and even launder the money for him.

[0] https://www.investopedia.com/terms/p/privatebanking.asp
It’s justified to keep that in mind. The EU is absolutely capable of myopically binding itself in red tape and stumbling in to second order problems.

It is also silly to tolerate techs incessant fuckery.
Yes and no. One could create a Squid SSL-Bump (MITM) proxy and create ACL's that operate closely to uBlock. There won't be full parity between the two so uBlock would still provide some benefit to the client. The method of using Squid as a MITM proxy method assumes one can install and trust a server public key into the clients. Squid will limit what HTTP protocols one could use. e.g. h2, alpn won't be supported. If one does not mind those limitations and having to maintain a small list of sites to bypass MITM due to public key pinning then Squid can have rules for anything the client or server can see. Domains, URL's, Content-Type, Size, Methods, Ports, you name it. One could save some bandwidth on static content as an additional benefit.
Previous threads:

Introduction to the a* Algorithm - https://news.ycombinator.com/item?id=24146045 - August 2020 (1 comment)

Introduction to A* (2014) - https://news.ycombinator.com/item?id=18642462 - December 2018 (14 comments)

Introduction to A* - https://news.ycombinator.com/item?id=16190604 - January 2018 (0 comments)

Introduction to A* algorithm - https://news.ycombinator.com/item?id=10724098 - December 2015 (1 comment)

Introduction to A* - https://news.ycombinator.com/item?id=8059237 - July 2014 (28 comments)

Related threads:

Making of “Introduction to A*” - https://news.ycombinator.com/item?id=8445732 - October 2014 (12 comments)
186+ upvotes for a complaint that isn't a thing. Tweet timelines aren't blocked behind logins. Can scroll endlessly
> Your salary could be denominated in big macs or grams of gold or shares of BRK.A or whatever

So you would like your salary denominated in things that are more volatile than currency. That is an interesting choice. I’m sure you would enjoy that when, e.g., gold drops and you can’t afford rent for the month because your salary dropped to match.
Varies by state. In New York you can be cited and fined for impeding traffic.

In California, a car on a two-lane road with five or more vehicles behind it is required to pull into a designated turnout area to alleviate the jam. Failure to do so can result in a citation and fine.
More attack vectors for attack ↯ vectors ⩘⩗ sake ‽

Idea for the new toolset start-up:
- A cyberware to validate source code and its modules against https imports
From Matt Levine’s Money Stuff piece on this:

> In a sense, the pitch here is straightforward. Blackwells does not think that Foley is very good at running Peloton. The stock market does not think that Foley is very good at running Peloton, in that the stock is down 80% from its highs last year and spent last week below its 2019 initial public offering price of $29. (It’s up today.) And Foley does not think he’s particularly good at running Peloton, at least if you believe the quotes that Blackwells selected here. If someone else takes over the day-to-day running of Peloton, or the process of selling it to a better owner (and Blackwells is also pushing for a sale), then Foley will have more money (because he owns a lot of Peloton stock) and also more free time (because he’s not running Peloton). It is no fun to do a job that you’re not good at, particularly when doing that job costs you money. If you can get in a room with Foley, or just lob a PowerPoint deck at him, and explain “hey, everyone is mad at you, you’re not having fun and it’s making you poorer,” that’s fairly persuasive and maybe he’ll listen. He did!

Sidenote: I suggest subscribing to Money Stuff. It’s a free email newsletter, and Matt’s writing is stellar.
You can use NPM offline.

Setting up a enterprise mirror isn't hard.

NPM, as far I can tell was not designed to have you run npm install every single time you deploy. People decided to do it anyway, I still remember the day NPM's SSL certs went down ( 2013 or 2014). It's like the internet broke overnight.

It's a real catch 22. When you look for a magic npm package to save some time, you have no idea what's really in it unless you inspect all of it's code, and it's entire dependency tree.

I guess you could build an solution to check for any vulnerabilities, but then you just move the problem elsewhere. Said ML tool would never be perfect
Really enjoy your works.
When you get a new heating system are any of the options "fake it til you make it?"

Would you pay for any of the options known to be unstable and will have to be replaced in a year?

What about the options that require HVAC staff to carry 24 hour pagers? When's the last time you got a whoopsie email from that manufacturer because of an outage?
$900/month seems a really low price to sell your soul.
Sounds like it. These days, HTML is trusting JavaScript that's loaded from all over the place already. A "secure" database hosting service loads assets from 20 different domains on their login page.

Loading code from remote domains can be abused and mis-used in any language. In this case, I think it's considered a "feature" because code was already being loaded remotely with NPM, who in turn got the code from the original author.

Now you can load the code directly from the author. So instead of trusting both the author and NPM, you only need to trust the author. This could be considered a reduction in your attack surface area, and it's definitely helping with the NPM registry being a single-point-of-failure in the Node.js ecosystem.
Agreed. To add to that - I think what Jay was trying to highlight is the difference between chips that can generally run Linux (which generally requires an MMU) and those that run an RTOS. Is this an exact line of demarcation with no blurry edges? No. But it seems to work for me. Maybe a better way to think of this is - does the system have external DRAM (if so run linux) or not - if so run RTOS.

Our of curiosity - does anyone still sell a (by strict definition) a true "micro-processor"?
I feel like this is either a mis-interpretation, or the scope of this law would prevent 95% of websites from existing in the EU (including hackernews which stores your email).

So any US company cannot store PII on an EU citizen?
If someone from the EU comes to my site to make a purchase, I can't allow them to do that?
I thought this was Hacker News?

The essence of hacking is seeing the world how it is to accomplish exceptional things. Yes American police are corrupt, as has been thoroughly covered in its own right pretty much everywhere. You can still appreciate the focused result while not condoning the adjacent culture of corruption.

"Proud, unapologetic criminals who get away with it because they're in the right clique" is more appropriate to describe the corrupt police themselves. The public fallout from a Cannonball is the possibility of a car crash that seemingly hasn't happened, whereas the fallout from the police corruption is (among other things) the routine murder of innocent people. The latter is infuriating, but dumping that anger onto adjacent topics is not a way to build consensus.
How does this approach compare/differ from using something like mighty app where you stream a video to the ui and take gestures to the server?
> The demographics of the people who died with/of covid skew what, 70% over the age of 65? More? How many of those people do you think were actively looking for a job?

Pre-covid the labor participation rate for people 65+ was 26% and the 65-75 bracket was projected to climb to 30% by 2030 as the last of the baby boomers entered that range. The idea that everyone retires at 65 is not particularly accurate.
DNS filtering is the only option outside the browser because of SSL
I'd really argue "regularly" is a bit much. It happens rarely and moving to URIs is only shifting the problem.

I'd also argue the claim npm is insecure. How would you improve its security over what's there now?

Lastly, there isn't really a dependence on npm at all. You were always able to 1) put URIs into package.json, and 2) make your own package manager. Node does not require npm to work. It just looks in node_modules by default, which npm uses to manage packages for you. They are completely decoupled.

URI imports, on the other hand, have a lot of security problems and surface area and will probably face a load of criticism going forward.
Is your claim that they can't share a customer's address with a shipping customer, and thus must actually perform all shipping themselves?
> I don't think it's accurate to solely blame the EU when this is in response to legislation that gives/gave the US access to all types of personal data on European citizens.

I would argue that the Americans getting better privacy protections and working with other countries instead of forcing American companies to behave illegally abroad would be a much better solution than the Europeans watering down their privacy laws.

American companies will set up independent shell companies or subsidiaries to serve European customers anyway. Microsoft and Amazon are never going to voluntary leave a market of 400M customers. Doing so would leave too much room for a competitor to grow and then threaten them. So if fragmenting the web means that Europeans get the same services as Americans, but with better privacy, then I am all for it.

Europeans are to blame for the flaws in the GDPR, not for doing their thing without the blessing of the Americans.
If replacing Office / Workspaces is not a monumental task, why are there only two good options? Workspaces is only just becoming a viable replacement for enterprise because pivot tables are hard.
Nationality is beside the point. A store of value has to be backed by something (know-how, labor, natural resources, etc.), and these somethings (and their markets) have to be defended (agreements, force, counterespionage...), and all of this consumes a great deal of energy, but good luck finding out what that number is in the media. That's much harder piece of homework than typing a number into a mining calculator, hitting enter, and posting another the-sky-is-falling opinion piece on Medium.
You're playing semantics. If there aren't physically enough homes in NYC for the number of interested buyers there is Scarcity. Talking about that source of that scarcity is irrelevant. Re-Zoning fixes nothing in the short term and scarcity will remain. Even if you re-zoned you need to physically build up inventory which takes years.
My main problem with this is that they punted the integrity check work down the line.

If this had been implemented as something akin to the integrity HTML attribute, e.g.:

express = require(
'https://my_local_repo.tld/express/current/4.17.1',
'sha384-oqVuAfXRKap7fdgcCY5uykM6+R9GqQ8K/uxy9rx7HNQlGYl1kPzQho1wx4JwY8wC'
)

It would be vastly superior. I'd go so far as to require it without an additional --unsafe-import type flag.

However, I think they did not do this because the import of dependencies then comes into question. IMO this feature should not have been added until developers could guarantee the expected integrity hash matches.
We've seen time and again what will happen now is hundreds of blog posts talking about this new feature, none of which will mention the integrity hashing functionality (because it's not there). When it does eventually get added, those posts will be the most popular anyone can find, and thus new users will end up using those eventually-wrong posts and implementing things in a less-secure way.

Huge disservice to the developer community.
I agree it's a maturity thing, but I wouldn't say the cool technology 'inevitably turns out to be janky and annoying and half-finished.' I think it's more that the cool technology is developed for a certain use-case and, developers being the way we are, we pick up our new hammer and proceed to test if every object around us is a nail.

We also won't accept other people's test results. Sure, 80 other devs have said this isn't a nail, but are they SURE?

It's not the technology's fault.
Our start and finish points were the Beverly Hills Hotel and Pepe's Pizza in New Haven. I don't recall the drive times, but I was roughly 20 and enjoyed the diversions of meeting amazing people, finding new places, and of course, food. After the a few trips, it was more about how long could we take. Collecting the stories of the road became much more important. Since my cars have needed tail wind and downhills to get anything near triple digit speeds, it was less Cannonballing, and more candle pin bowling. Either way, I do love a road trip!
You aren't just buying an indoor "replacement" of an outdoor activity. You are also purchasing a coach/work out buddy. It's this latter part that is the differentiator between a normal indoor trainer/treadmill and what Peloton sells.
Silicone oil is one of the most stubborn contaminants I have ever encountered. I use trisodium phosphate to clean it up, and even then it sometimes persists. Try pouring epoxy over wood that has been polished with Pledge, and you'll see what I mean.

I can believe "scrapped."
I've just asked the UK ICO for advice and got a confirmation it wouldn't be considered as a data controller or processor. I gave this example:

Me: "Effectively, in my case, the user is adding 'post-it' notes of their own devising that remain 'sticky' so the next time they visit the same page they'll see their own notes - but those notes are never sent to the server"

Me: "It's effectively the same circumstance as a classical computer program being downloaded by the user, and then used (locally) to create/save files on their local device. In that case you wouldn't consider the author of the computer program to be the data controller, surely?"

ICO (Flynn): "Flynn: Okay that sounds reasonable."
ICO (Flynn): "So if your product/service is not dependant on personal data and you are not processing it then you appear to not be captured by data protection legislation."
The court disagreed on the basis that US federal law enforcement could force Google to stop anonymizing IP addresses at any moment, not that their IP anonymization[0] is inadequate.

0: https://support.google.com/analytics/answer/2763052?hl=en
To be fair, a libertarian would agree with you.

To a first approximation, a libertarian would ignore all government statistics and instead look at markets. He sees the massive 10bp inversion in the eurodollar spot curve two years out, concludes that there is no (monetary) inflation, and positions himself for (monetary) deflation. He would agree with you that the CPI inflation has all the causes that you mention, perhaps throwing in lockdowns, vaccine mandates, and general government incompetence for good measure.
Swiss region votes on giving primates fundamental rights
Abolition among white Americans arose expressly as a religious movement. They weren’t just Christians who happened to oppose it, but an opposition expressly rooted in Christian theology: https://en.wikipedia.org/wiki/Quakers_in_the_abolition_movem...

Supporters of slavery, by contrast, often invoked the language of science and progress and condemned abolitionists as religious zealots. The famous Cornerstone Speech, for example, given by the VP of the Confederacy:

> This, our new government, is the first, in the history of the world, based upon this great physical, philosophical, and moral truth. This truth has been slow in the process of its development, like all other truths in the various departments of science. It has been so even amongst us. Many who hear me, perhaps, can recollect well, that this truth was not generally admitted, even within their day. The errors of the past generation still clung to many as late as twenty years ago. Those at the North, who still cling to these errors, with a zeal above knowledge, we justly denominate fanatics.

Think about this logically. Imagine you’re a white European looking around at the world in 1776. There is no systematic archeology, there is no science of genetics. What would cause you to look around at the civilization and technology Europeans had developed, compared to what Africans or Asians has developed, and conclude that all people were equal? Back then it was a moral premise you had to accept on faith without the support of science.

Consider Thomas Jefferson, who wrote about the Creator endowing all men with alienable rights. Even though he was probably a deist, he expressly incorporated Christian morality into his worldview (e.g. the Jefferson Bible).

Or consider German Americans, one of Lincoln’s core constituencies that pushed him toward emancipation. These were recent immigrants to the Midwest who had no historical beef with the south. Yet, per capita, states like Iowa contributed the most soldiers to fight and die for the union. Do you think they were driven by abstract enlightenment principles of equality and justice?

It’s widely accepted today that the Civil War was about slavery. That has a remarkable implication. 360,000 union soldiers died to end slavery in the south. Can you name another example of one ethnic group incurring that kind of casualties to fight for the freedom of a different ethnic group? Maybe there are other examples but I’m unaware of any.
probably just use deno?
> Many just want analytics and GA is the most convenient option. Though with GDPR now website owners (many offering free content and hosting a site where a user explicity browses into with their own will) need to learn law to make sure they are compliant, which obviously shouldn't be the case for such a simple task.

The problem is that we made collecting user data the easy task while ignoring privacy protection. The fact that Google spend billions to make spying easy does not mean it should be legal. And it's really easy to be compliant - don't collect data. You don't need it to host your website, you really don't.

> I'm not going into anyone's house and force them to give me their data, I'm collection anonymous data from people who, with their own will, visit my website/use my service. Don't want me to collect your anonymous data? Sure, don't visit my site/use my service then. No one forces anyone. Regulating what tech I can use on my own website? This is ridiculous.

And you're absolutely free to ask people for consent for collecting their data or to simply block visitors from the European union. You can also not collect data or do so in compliance with the GDPR, by the way. All ways are perfectly viable.

But just because I opened a link in my browser does not mean I consent to anything - by that logic, ransomware is perfectly fine, because you visited their website and downloaded their software. This is ridiculous.
I'm going to self plug here on work I'm apart of that does persistent processes, although the motivation is different. I do think this paper does a good job of informing the reader on why these sort of features would be really cool that this project does not necessarily dive into. But it requires widening the API and allowing for developers to choose how they persist.

https://www.rcs.uwaterloo.ca/pubs/sosp21-aurora.pdf
I agree. Hopefully this is temporary and they can figure out a reasonable compromise. As a Swede I do feel that parts of the EU (with Germany and France) are heading in the wrong direction. Those are not countries famous for their entrepreneurship and it seems like their first instincts in relation to the US are usually protectionist.
That's not really a passenger vehicle though, it's a truck (it's right there in the name "pick up truck"). Just having more seats doesn't make a truck into a "passenger vehicle", my brother used to drive a 40,000 lb heavy truck that had a crew cab that seats 6, but no one would classify that as a "passenger vehicle".

It was so heavy that when he took it home, he couldn't drive it all the way home, he had to park it a half mile away and walk because there was a bridge with a 10 ton weight limit that he couldn't cross.
Only vaguely related, but there used to be a 17 mile long stretch of highway in South Carolina that went through the grounds of the Savannah River Site. In the cold war days, that's where they produced nuclear material for bombs.

The highway was open to the public, but you had to check in at both ends as you entered and left the site. You were given a pass with time written on it, and if you took too long to pass through the site, you could be subject to additional interrogations and searches.

As far as I know, it was the only highway where taking to long to cover distance could get you into trouble.
I imagine this has a lot to do with the variability around titles in such a large organization. Many teams will use "titles as compensation" or otherwise have wildly different metrics for what constitutes a particular level, even if there is technically a single corporate level policy. Should a new-grad hire that makes senior in 3 years be considered on paper at the same level as a 15+ year senior dev? Probably not, and this seems like a pretty equitable way to solve that problem.
Mathematicians have been constantly been giving bad names do their concepts...
Imaginary Numbers is one of the atrocious ones, Imaginary Numbers are part of the fabric of our reality... Meanwhile Real Number were axiomatized in a way that creates completely unrealistic numbers, "ghost-like" numbers, numbers that can never be given a name...
The first course in Analysis is ridden with examples of Continuous Functions that are not continuous in any sense humans would consider ever it...
Arguably, its a more accurate acronym since Microsoft is more valuable than all of FAANG except for Apple (and Microsoft is more pure-play tech than Amazon or Netflix).

Also, my inner 1990s 12 year old boy mind thinks it is funny. So there's that.
I dunno about YCombinator's stance ... but PG has mentioned them some: http://paulgraham.com/nft.html, https://twitter.com/paulg/status/1490406747051286539 (via https://treatyourcrypto.com/venture-capitalist-paul-graham-d...)

OpenSea was a W18 (https://www.ycombinator.com/blog/yc-companies-looking-for-su...) YC project (found via https://www.ycombinator.com/blog/?query=nft)

https://www.ycombinator.com/blog/?query=cryptocurrency may give other data points for your consideration
I had a boss once who had a Math PhD and could throw together spaghetti code to implement his ideas.

He would give me a task to do and would basically say "don't waste time making the code clean and nice" because he knew I had a software engineering background and didn't want me over engineering anything.

I would nod, implement it "the right way" anyway, and get it done in the same amount of time.

Because doing it the spaghetti code way always takes longer in the medium to long run, and often even the short run, anyway.
It's odd that you feel that this announcement is somehow a slight against Tesla, when all car manufacturers have had recalls via software updates[1]. They get the same press releases.

Also this is how recall notices are published, as required by law[2]. Nobody is out to get Tesla.

[1] https://www.nhtsa.gov/recalls

[2] https://www.law.cornell.edu/cfr/text/16/1115.26
Google.com is having issues. The search is not working in my side.
This is what happens when you have a centralized software.

Germany can just get the app removed from app stores:

https://voi.id/en/technology/114013/senior-german-official-a...

And this is true of other centralized software:

https://meduza.io/en/feature/2021/09/18/the-freest-platform-...
I see you want to be pedantic:

>It's false to create only two groups.

That claim is not even a half-truth...

>This completely ignores symmetry

... and this would not follow even if it were.

[Update moved to a subsequent reply.]