skysight-inc/HackerNews huggingface dataset:
The end result may be that there's a little bit more proprietary software; so be it, people could already make proprietary software. We'll still have plenty of Open Source software that's actually Open Source. That's better than losing Open Source altogether.
You could use something like Cloudflare Access to secure it, while it's on the Internet. There's no reason you need to build the security just because you build the tool.
Not everything that is essential should be regulated the same just because they have this factor in common. Stop being so dense. A market being essential simply means that optimal outcomes in that market are very important, so regulation is more justified if that market is a failure (such as a duopoly).

One of the many differences is that the duopoly of Apple and Google in mobile markets is effectively unbreakable without government regulation. Today there is no amount of billions you can spend to break their moat. In contrast, grocery stores are highly competitive because they don't have insurmountable barriers to entry. Anyone can lease retail space and sign up with a distributor. There are lots of independent grocery stores operating in many towns.
Of course both perspectives are fine. And fair enough for you to point it out. I may have misinterpreted the person I was replying to. I got the impression that they wanted to better understand music from a musical point of view, and I responded that wanting to know optimal beat frequencies and such was probably not a fruitful route. But you're right, if one wants to view music as a deep treasure trove of source material for some kind of scientific analysis that makes one happy...go for it! And realize that that's probably not the route to becoming a musician, in the traditional sense.
The Linux world has two competing ideals: "So easy my grandparents can use it" and "Learning the terminal will make you a better person". Anyone who tries to make things too simple (PCLinuxOS) is derided and criticized by Popular Linux YouTube Channel, Reddit, etc. Anyone who tries to make things too technical (Arch) is ignored by Popular Linux YouTube Channel, Reddit, etc. So only those distros that flounder somewhere in the middle get popular. Ideally, the Linux desktop world would just split in half, so that there can be a clean separation between these two ideals. People who want "Easux is so easy my grandparents can use it" won't be bothered that Hardux is hard to use. People who want "Learning the Hardux terminal will make you a better person" won't be annoyed that Easux is easy to use.
> Convert pdf to png. Assemble multiple images into a pdf

not want to sound harsh, but imgemagick could do that 15 years ago.

I use OpenOffice Draw nowadays, but despite the fact that PDFs have become a joke of a file format, Linux is the best to handle them by far, unless someone thinks that Acrobat is anywhere near to being good (or Preview for that matter)
Right, it's a random password tho not a dictionary word
I’m increasingly pessimistic on ES as a solution. Everyone is coming to eat their lunch. APM? Datadog. Product search? Algolia.

I think the next wave of search tech will be

1. Leveraging automated ingestion optimization.

2. Capable of searching across mixed media: text, audio, images to start out with. This is only possible because of optimized ingestion. The ingestion layer will perform vectorization of the inputs. The vectors will be the entires stored in inverted indices.

3. A great jump from two to an optimized data store for searching mixed media.

People obsessing over elastic/splunk features are lost. Nobody will care in 5 years. Both will be legacy enterprise tech.
Just figured since there are so many forks reproducing the same work, I would merge the comments upstream to meet the needs of the community ;)
You write about conditional surrender as though it were completely without precedent.
One can debate whether the Soviets would have been able to invade the Home Islands, or whether this would have been necessary to press the Cabinet into surrendering.

But it does seem strange to say they were not in a position to make a "meaningful" entry by that point, given the order of battle employed in the Manchuria campaign (per WP):

1,577,725 troops
27,086 artillery pieces
1,152 rocket launchers
5,556 tanks and self-propelled guns
3,721 aircraft
Mongolia:
16,000 troops
I wish something would be done about cars that honk when they lock. I ride a bicycle so I take every car horn seriously. Living in an apartment complex that has a parking lot nearby is awful, I hear beeping horns every night, all night.
The Soviet Pacific Fleet had ships in Vladivostok that they were readying for an August 24 invasion of Hokkaido after successfully moving troops to take Sakhalin and Northern Korea. https://foreignpolicy.com/2015/08/05/stalin_japan_hiroshima_...
Most of these are fairly discoverable and have been consistent for decades:

Shut down: Apple Menu > Shut Down (since ~2001)

Print to PDF: File > Print... > PDF > Save as PDF (since ~2001); some apps have an File > Export... menu item as well

Combine multiple images: Photoshop (or image editing app of your choice, e.g. Pixelmator, Acorn, Affinity, Krita, etc.; since ~1990)

Screen shot: command-shift-3 (entire screen) or command-shift-4 (selection/window), (since 1990s; earlier for print screen; Mojave or later for command-shift-5); discoverable/configurable via System Preferences > Keyboard > Shortcuts > Screenshots; modern macOS also pops up a thumbnail you can click on
Surely why they granted it and they intent they had should matter for morals.

"Specifically and explicitly" is much more of a legal argument.
If you look at the economic backgrounds and general location of students you will find that is the true predictor of educational outcomes (on average) rather than whether that child is at a charter or public school.
>²MS Auth requires a double PIN entry on the phone in order to respond to an MFA.

Check Settings: App Lock.
Ask HN: Is there Python package that can read environment variables
pytest-mongodb
https://github.com/mdomke/pytest-mongodb#migration-from-humongous
requires 3 variables to be defined in pytest.ini these variables are already used in the code as environment variables. It doesn't make sense to duplicate the code in pytest.ini

I saw that https://pypi.org/project/pytest-env/ let's you define environment variables but this isn't very intelligent since it's only one way. I want it to read and in pytest.ini e.g

[pytest]
x=$blah

Are there any packages that can do this?
Delivering real functionality in production (with code review from your mentor, of course) is absolutely standard at a Big Tech or hot startup internship.
I have a lot of experience managing O365/Azure, and these issues all come down to the config of MFA in the O365/Azure tenant. They may even be intentional for "security" purposes.

To be fair, O365 and Azure change all the time. I've seen these issues on neglected O365 tenants, usually MFA was setup years ago and never touched again.
>use a decibel meter on their phone to measure how loud

Phone microphones are not calibrated for this and the apps just spit out completely wrong numbers. They show relative noise changes fine but one phone could show the same sound at a higher or lower db rating just because the mic is a little more amplified or something.

The Apple Watch actually is calibrated for this and has a built in app which shows noise levels quite accurately.
What's worse is they didn't surrender after Hiroshima was destroyed. They reasoned that the US military probably only had a few of these weapons, and therefore losing a few cities was considered acceptable losses.

The leadership of Japan during this time was truly reprehensible: Willing to sacrifice millions of their own citizens to continue their failing war of aggression.
Zoom Video Communications, Inc. Privacy Litigation
Honoring that right-to-left reversal character is also a "UI Issue".

The Windows UI could just render that character as a tofu box, and not evoke its reversal semantics.
Until you're happy you solved it in a nice way and then learn that your script will run on some ancient RHEL with bash 3 ;)
I use https://www.mkdocs.org/, which is markdown-based. It's simple to get started and customizable enough if needed.
There are two subtexts behind these arguments against VPNs:

1. Your IT infrastructure is mature enough that all application access is directed through a series of authenticating proxies, so that you're not making individual app-by-app configuration changes to enforce SSO/MFA/device-context rules.

2. Your VPNs have strictly iptables-style network access control (if that).

The latter subtext is true of most existing VPNs and is responsible, I think, for almost all of the flak access control VPNs take. Until pretty recently, the state of the art for access VPNs was stuff like OpenVPN, which is so painful to set up and maintain that most installations have no access control at all.

The former subtext is true almost nowhere, and that's a problem I have with arguments like this. I like the BastionZero people, but, obviously, most engineering teams aren't using BastionZero, or anything remotely like it. I also don't believe the dust has settled on what products/solutions like this are going to look like.

If you can't get that first subtext to hold true for your team, and you nevertheless adopt the logic of this post, you are going to be boned; you'll effectively be setting your security posture to a mid-oughts level, when VPNs were themselves a novelty at small engineering teams, and debug instances of apps hanging out on the Internet were a norm.

Meanwhile, you can mostly break the subtext about VPNs by using a modern VPN like (sorry, I have to say it again) Tailscale, which has fine-grained per-app ACLs based on role-based access control.

A major complaint the "Zero Trust" people have about modern VPNs is that app-layer proxies can do device-context authentication --- so "employer-owned device, up-to-date patches" is a valid access rule, and that's harder to do right now with things like Tailscale. Fair enough. But almost nobody is doing anything like that today, and I'm not sure that when the dust settles it'll be a market win for app-layer ZTA proxies.

You should do whatever you can to limit the scope of exposure for your networks, and you should not put off network access controls you can deploy today because you think you should just wait to see how ZTA products mature.

I think Tailscale is probably the most pragmatic next step for most companies.
> I'm just failing to understand the distinction between destroying a deceased person's capital, and destroying their money.

"Capital" is the wrong word here. It doesn't include non-productive, consumable goods such as food, but it can include money as a stand-in for means of production. It doesn't make sense to contrast "capital" with "money" when what you really mean is "all goods which are not money".

In any case, the difference is utility. The value of money is (almost) entirely derived from its use in trade; it's not consumed and it doesn't directly serve as a means of production. If a factory burns down or food spoils then society is poorer for it, but if the amount of money in existence decreases then nothing of value is lost, provided it affects everyone holding currency equally. (In the case of someone dying the only one not affected equally is the deceased, who isn't around to object to the loss and thus doesn't count.) We still have all the consumable goods and means of production which we had before, and the purchasing power of the remaining currency will adjust to compensate for the change in the money supply.
You get a SHA256 hash of each guess. The hints you get on each guess are useless to help you with the next guess.
Best I can find is this:

https://www.autoweek.com/news/industry-news/a35952569/loud-p...
This is how they do work, at least in the paris trial. Multiple mics around which can locate the source of the sound. They can also just record the sound + video and play it back in case of a dispute.
You are right Microsoft could be a more difficult entity to deal with.
you’re depriving me of my valuable karma! I’m relicensing all comments.
Thanks, gonna try that one - but so far maim hasn't let me down and it's a drop-in replacement.
trombones and horns.
> bail is a tool to allow them out and ensure they return. Without it, you just keep them in jail.

This is where it breaks down. I don't think you need bail to make sure they come back.
> Solar is awesome in that yield scales with load peaks.

No, this is the opposite of what is true. In most places, load peaks in the evening, just as the sun sets.

Looking up the data [1], the more nuanced answer is that load peaks in in the evening in the fall, winter, and spring. Only in the summer does solar energy match load.

1. https://www.eia.gov/todayinenergy/detail.php?id=42915
Even so, I just edited my comment and elaborated.

You can do this in 9 online guesses with feedback + a very large number of offline guesses, and have the solution for the 10th.

The information is there-- just the best search strategies known are very expensive.
Comments moved to https://news.ycombinator.com/item?id=30355738, which has the source this article points to.
Fun fact is that if you have an active Skype account and upgrading from Win10 to Win11 installer will use it to sign you in ╰(°▽°)╯
For me, the compelling part was at my last company, we'd build these complicated distributed systems with a whole lot moving pieces—any of which could go down at a moment's notice. For a complex enough system, there was sometimes more work to be done to deal with any part of the system failing than to build the system itself. Basically, we were implementing our own bespoke version of Temporal over and over again.

To your point, the complexity of a SQL/PHP application is significantly smaller, but, the value proposition of Temporal is probably still there: If any part of the checkout process fails (e.g. charging the credit card, successfully triggering the order after they've charged the credit card, timing an email if there is an abandoned cart, handling the moving pieces of a return). These pieces are either handled manually by a human or you've got a decent amount of business logic in place to handle each of these edge cases individually.

The value-add of Temporal—in this case—would be that it would keep track of where the customer/order was in the overall flow of ordering something and pick up where it left off in the event that something went wrong.
Had OpenSolaris developed a sufficient community outside of Sun/Oracle, this would have been much less of an issue. Which is why community is a big deal. A large company can always decide that some project is no longer interesting and, if they're the only ones supporting it, it's going to die. They certainly have no obligation to support it.
> it required a "lock in" to the Apple Store

What's this about? You can make an Android version of the game too. Does Apple prohibit that?

> Microsoft motion to lock-in github developers, now requiring a Microsoft account

How is requiring a Microsoft account fundamentally different from requiring a Github account? What is the tangible difference?

> tried to set up a dual-boot
> failed because Ubuntu installer could not find any disk space
> Get angry that I can't seem to use hardware I BOUGHT

Yes you can, you just have unrealistic expectations. Dual-boot is unsupported by both Windows and Ubuntu, it's an advanced technique that requires you to break lots of assumptions.

> Install Ubuntu on whole drive, removing W10

See? You were able to use the hardware you bought, what's the problem?
Not the person you replied to, but - yes, `head file.txt` is perfectly reasonable, as are a few other use-cases like `grep`/`sed`-ing. But when you go beyond "processing streams of lines of text" and start having to introduce conditionals, maps, or functions, the syntax is (for me, at least) opaque and easy to make mistakes in.
LeMay knew exactly how horrid of a thing he'd spearheaded, too.

"If we hadn't won, I'd have been executed as a war criminal."
This is why, when someone asks me to pick a random number, I try to think of some random process going on in my surroundings, and from there derive the random number.
https://www.pocket-lint.com/cars/news/ford/131151-ford-admit...

Maybe you're thinking about Mustangs? - I think the engineers came up with a great solution!
Nuclear regulations had nothing to do with it. Texas had very few regulations for oil/gas and for power plant winter weatherization hence the grid failed. Overall the grid is fine, but it can't handle a freak winter weather event like that, and it still can't. It has handled many summer heat events just fine (I know I've lived here for almost 15 years). Regulations are the obvious factor that lead to the failure, ERCOT has been warned (and in turn warned the politicians) about the dangers multiple times and the politicians will not pass legislation and money to fix the issue.
> Every Unicode character and code point exists because somebody, somewhere, needs it.

Not quite. That and because some twits are willing to cave in and add it, because adding crap to Unicode gives them a sense of purpose which makes them blind to the harm they are causing.
Show HN: Querying OpenAPI Definitions with SQL
Why not upload those files separately, or in ZIP format?
> You still need some level of expertise to use this info

Verification markers are common UI elements used on Instagram, Twitter, Facebook, WhatsApp and many other end user focused apps.
I've had jobs that were type II. Generally anything in the entertainment industry, and most specifically being a roadie. There were moment of type I, but a huge amount of the time it was an exhausting, boring, grind, with #$@$@ tour managers and others. Mostly hated it at the time, but two weeks after getting back I'd be hustling for the next tour. Perverse!
The lack of enforcement appears to be causing an increase in bad driving[1]. Anyhow I view this as a good thing. The people spoke loudly that they wanted less policing and they got what they asked for. This isn’t sarcasm either, but I am genuinely surprised that government actually listened. Now I personally don’t want depolicing, but I accept that in a democracy I won’t always get my way.

[1] https://www.transportation.gov/briefing-room/usdot-releases-...
Google does have a more stringent mode that can be enabled on high profile / admin accounts that requires MFA more often and faster auto log outs. But it is still not too bad.
The Fat Gold guide to extra virgin olive oil
US gov't systems have already been pushing out the little bespoke apps for a while now anyways. They're a security nightmare with or without a VPN. Plus, the majority of them seem to cover three things:

1. Task management (JIRA clones, but worse) and coordination, possibly with external user (contractor) access which opens up a hole in the system anyways.

2. Custom workflows (BPMN-ish, but not disciplined and not, easily, connectable to each other), again with external user (contractor, citizen, applicants, whatever) access.

3. Document sharing (SharePoint, but more like a skin over a network share), again with external user access.

All of those can be covered by other systems, sometimes simpler ones than presently used (3 is the core of what HTTP was meant to serve, they "just" need access control on top of a basic HTTP server which is a solved problem these days).

A bigger problem with the bespoke apps is that they often have their own access control mechanisms, which don't always play well with the larger organization access control systems. They have their own user names and passwords, they may or may not connect to a CAC-authenticated backend. Or they do stupid things (had to fix one of these once) like not authenticating the CAC but using trust-on-first-use, and then the user's access had to be reset when they got a new CAC. Brilliant. These aren't good systems, they are serviceable systems.

There are other rapid application development tools (see Appian and others) that can cover (1) and (2) but provide a unified backend (which means the workflows can now be composed, too). SharePoint and other document management systems can cover (3). SharePoint can also cover (1) and (2) (though I've barely tolerated it for either use, it is at least better than dropping $1 million+ a year on hardware and software licenses for a one-off product supporting a half dozen users that doesn't integrate into the rest of the system).
> 3. Deploy with one click. Once you are happy with your architecture you need a simple way to just deploy it. You can deploy all the architecture components in Google Cloud with a single click.

Can they do this?
On Apple Maps, use the "report a problem feature". A team of underpaid contractors in Seattle will adjust it in OpenStreetMap, and Apple Maps will ingest the data after a few weeks.

t. worked on this terrible team
For desktop/laptop computers, Just use https everywhere to redirect reddit.com to old.reddit.com. It works like a charm. The difficulty I have is to redirect it to /.compact in mobile
Thanks that's an interesting talk and I enjoyed the examples, they're very clear.
I dunno, Stack Exchange is surely breathing down Reddit's neck in that category...
A Life of One's Own by Marion Milner.
In Australia, wind and solar have already started to win:

https://www.smh.com.au/business/companies/origin-energy-to-b...

No sign of a nuclear reactor in sight.
> Can you enumerate the remaining 1/256th of the search space? Not with anything other than a brute force search, minus the one password you tried. The exact same brute force search that you would have needed to solve the problem in the first place. Your one password attempt has yielded one password's worth of knowledge. You, a human, don't have eight bits of information. You have almost nothing.

Eh, the actual search space for reasonable online guesses is cut down by 10000x.

Yes, you still need to search an impractically large number of passwords here-- 2^92 or so.

But you only have to provide 10 guesses to the oracle. Described here: https://news.ycombinator.com/item?id=30367095

Or, if you tell me that the password is in /usr/share/dict/words, I can figure out what the password is in 2 online guesses.
I have never been pinged multiple times per day. In fact, I have never been inconvenienced by this at all and all my stuff lives in Office365 and Azure. No idea where all this is coming from in this thread.
Ask HN: Who Has the Most Bookmarks?
I'm building a bookmarker extension and its crapping out when people try to import 40K bookmarks. I never considered people would have that many bookmarks!

I'm wondering how many I need to be able to handle to take on the biggest bookmark hoarder out there.
Huh. Motorcycles are on a pretty short list of types of vehicles that startle or distract me with noise fairly often, along with emergency vehicles (popping on their sirens) and semi trucks (if they happen to rev to go up a hill or pass while right alongside me, or use a Jake Brake while fairly close).

Cars almost never do unless they've clearly got some severe problems with their mufflers, even though ordinary non emergency cars must represent something like 80% of vehicles I encounter on highways in my city. Even for the loud-bass types, the radius in which I can hear that and the volume is lower than typical "Hog"-alike motorcycles. Motorcycles are also the only non-emergency vehicles that sometimes sound really loud inside my house about 300 meters—and a bunch of trees—from the nearest highway (though that's mostly a couple of jerks who seem to like to race on that stretch of highway every so often, on what sound like racing-style bikes, not Harleys)
No, that doesn't prove that. It just indicates the opposite of what you said, here:

> And I doubt that, for most people, pytest is that much better to work with than the built-in unittest is.