skysight-inc/HackerNews huggingface dataset:
I really disagree with this, plus I have to say, it doesn't sound like you are offering an alternative.

1. Escape hatches are good. Designing an API is hard, and supporting every use case within that API is harder. Providing a way to make sure you don't get backed into a corner means you can continue building things.

2. State updates -> View updates seems perfectly reasonable to me. I don't think I've ever wanted a view to use a stale piece of state in one section and an up-to-date piece of state in another.

3. Reconciliation is just React's way of saying "we are trying to make things fast." I generally don't have to worry about how this happens while I'm building things: I can just build things. A library that let's me focus on business logic rather than boilerplate or implementation details is one that I want to continue using.

4. "Thinking in React" I put into two buckets: The first is easier to grasp, in how to reason about state (propagating down in one direction) and how to keep things in "React" land (don't manipulate the DOM directly, React won't "know" about it). The 2nd is in the API, and I'll admit does take some time to get used to. Lifecycle methods I think can be learned faster, but knowing the lifecycles around hooks also can be learned, of course. Plus, the abstraction and co-location benefits of hooks outweigh the learning curve IMO.

5. The [rules of hooks][1] that React provides is just two items, hardly overwhelming. The actual API of hooks (e.g. the need for a dependency array, return function from useEffect to cleanup on unmount, etc.) is larger and takes longer to fully grasp, but being able to have a linter catch a large chunk of these is a good thing in my book. Plus, no library is without its footguns. In the jQuery days there were plenty of times I'd forget to remove a listener, create race conditions in ajax stuff, etc. Learning a library's API is just that, its API. You are writing in Javascript, but of course no one is saying "the idea of dependency arrays is 'Javascript,'" although that concept definitely appears in other computer science / programming fields.

[1]: https://reactjs.org/docs/hooks-rules.html
yeah, about that paper work...

1. The paper trail is probably not as good as you think. I feel like you're thinking of a US system where there might be some pretty solid systems in place, but what about all the other countries around the world? I'm sure there will be at least a few places that will not be great paper trails.

2. The paper trail only helps you after you've been scammed as a way to maybe track down whoever did that. A costly and time consuming process which may be next to impossible if you think about the complications of shell companies and legal jurisdictions. Or are you suggesting that before you use a site you go through all this work proactively?
Not that you're incorrect but to be even more precise, and for the readers who do not know about Rust, I would say "voiding *parts* of Rust's safety contract".

Citing the documentation:

> To switch to unsafe Rust, use the unsafe keyword and then start a new block that holds the unsafe code. You can take five actions in unsafe Rust, called unsafe superpowers, that you can’t in safe Rust. [...]:

> - Dereference a raw pointer

> - Call an unsafe function or method

> - Access or modify a mutable static variable

> - Implement an unsafe trait

> - Access fields of unions

> It’s important to understand that unsafe doesn’t turn off the borrow checker or disable any other of Rust’s safety checks

https://doc.rust-lang.org/book/ch19-01-unsafe-rust.html#unsa...
A better quote:

> Jonah Peretti was right in 2017 when he warned that paywalls are “bad for democracy.” Credible information shouldn’t be a luxury good.

Paywall does not automatically mean luxury? I think the actual problem is the average internet user expects everything to be free, independent from his/her income.

Anecdotal: I have friends with iphones of whom I wonder how they can spend so much on a mobile. It is about making choices.
So badly built red tape at huge orgs is why individual designers should give their work away for free? Come on.
With the current prices of graphics cards, it may be more economical to make them out of diamonds...
Google scrapes web data is my point. It is king web scraper.

Robots.txt does not fit into this argument. Im not sure why it was brought up. Google doesn’t scrape urls listed there? Ok. And so? Am I to believe that just because Google says so?

Google scrapes what it wants. It does so for its shareholders. It could care less about web standards.

Source: Amp
I guess the same idea also applies to QWAC.

https://www.eff.org/deeplinks/2022/02/what-duck-why-eu-propo...
I know you're facilitating a conversation about key discipline, and I don't mean to derail you from that, but it's not clear that the problem here was really an inaccessible wallet. You can read the Ontario government report on it [1].

Cotten was treating all customer deposits as ostensibly a single asset pool, paying expenses and customer withdrawals out of the same pot, using that same pot to speculate on bitcoin on external exchanges, and using fake accounts to boost volume or liquidity. When Bitcoin crashed in 2017 he had way more BTC and way less CAD than his customers were owed and had paid much more for it than he could sell it for. It was a classic Ponzi scheme. Add in all of the money he had spent on personal assets out of the same pot and there is no need to speculate about a mythical missing wallet. They found 4 paper cold wallets and all of them were empty, presumably because the contents had been sold to pay other customers.

[1] https://www.osc.ca/quadrigacxreport/
ASCII certainly has been a source of security vulnerabilities.
They are! Inhaled flu vaccines are generally live attenuated virus, which isn't recommended for everyone but is perfectly effective for a large segment of the population:

https://www.cdc.gov/flu/prevent/nasalspray.htm
I have no idea why you're getting downvoted. I don't use 1password for anything and I don't recommend anyone use it for anything.

I will never use a 3rd party service to manage my passwords or key phrases. And why in God's name are people generating SSH keys in the browser?

The thought of using it for SSH or GitHub just sounds insane to me. And as you say it doesn't even really offer any benefit over cutting and pasting from the CLI.
Especially considering Midway was so close, even with the gigantic advantages the US Navy has ( intelligence so they basically knew what the Japanese were doing, in what order and where, and radars).
There is no extension to use 1Password with FF on iOS. iOS recognizes 1Password as part of the normal password system on the device. I, and others in this thread, have no problem doing so.
> officially touch my packages

I was including all who handle my luggage, including TSA/government employees.

TSA/government employee do steal travelers property regularly. A quick search for 'tsa employee steals' returns nearly a million results.

e.g. https://www.foxnews.com/travel/tsa-employee-caught-stealing-...
Auth0 is a great developer API for authentication, and Aserto picks up where Auth0 leaves off. The "contract" between the authentication system (Auth0) and the authorization system (Aserto) is a signed JWT.

You can get away with very simple access control using scopes embedded in a JWT token, but that approach runs out of room pretty quickly [0]

With Aserto, you can write authorization rules that are evaluated for every application request, and reason about the user attributes, the operation, and any resource context that is involved in the authorization decision.

[0] https://www.aserto.com/blog/oauth2-scopes-are-not-permission...
I hope so! I am definitely rooting for them, at least.
> Would you be willing to pay for the creation of search index data files?

Those can also be created by crowdsourcing: https://yacy.net.
Oh cool, that's very clever! Probably a little too clever for me, though :P I think the code is misleading, and you can't handle classes with hyphens in it (and if you do, that's even more misleading!). But it's a neat application of proxies!

For folks wondering, here's how it would work:

const htmlClasses = new Proxy({}, {
get: (target, prop, receiver) => document.querySelector('.' + prop)
});

// Get element with class pagetop
htmlClasses.pagetop;

const htmlNodes = new Proxy({}, {
get: (target, prop, receiver) => document.querySelectorAll(prop)
});

// Get all h3s
htmlNodes.h3;

You can run this on hackernews to see it work.
I absolve those who made the choice of any kind of responsibility for protecting enemy civilians. Their only responsibility was towards Americans. If their choice saved even one American life then in context it was the right choice. How could they possibly ask Americans to contine dying if they had the means to shorten the war?
If you buy from reseller they have no way to correlate payment details to search queries. With subscription, however, service provider have your payment details and knows everything about your queries so it can build a profile on you.
I don't get it! It is clearly written in the code, that the progam should behave this way.

Is the proof, that perl is capable of this behaviour?! I don't get it - what is the point?

I read all the comments and still don't get it. What am i missing?
What is interesting is that master composers often broke the "mathematic" rules.
Schubert, Beethoven or Chopin for example have sometimes very strange and unbelievable beautiful harmonics sprinkled in. Whereas mediocre composer do not do this, they are predictable.
Toxic Emissions
One of the funniest debates on this subject is in the Pilot episode of House MD when House tells Cameron that he hired her because she was extremely pretty.[1]

Cameron: Why did you hire me?

House: Does it matter?

Cameron: Kinda hard to work for a guy who doesn’t respect you.

House: Why?

Cameron: Is that rhetorical?

House: No, it just seems that way because you can’t think of an answer. Does it make a difference why I think I’m a jerk? The only thing that matters is what you think. Can you do the job?

Cameron: You hired a black guy because he had a juvenile record.

House: No, it wasn’t a racial thing, I didn’t see a black guy. I just saw a doctor…with a juvenile record. I hired Chase ‘cause his dad made a phone call. I hired you because you are extremely pretty.

Cameron: You hired me to get into my pants?!

House: I can’t believe that that would shock you. It’s also not what I said. No, I hired you because you look good; it’s like having a nice piece of art in the lobby.

Cameron: I was in the top of my class.

House: But not THE top.

Cameron: I did an internship at the Mayo Clinic.

House: Yes, you were a very good applicant.

Cameron: But not the best?

House: Would that upset you, really, to think that you were hired because of some genetic gift of beauty not some genetic gift of intelligence?

Cameron: I worked very hard to get where I am.

House: But you didn’t have to. People choose the paths that gain them the greatest rewards for the least amount of effort. That’s a law of nature, and you defied it. That’s why I hired you. You could have married rich, could have been a model, you could have just shown up and people would have given you stuff. Lots of stuff, but you didn’t, you worked your stunning little ass off.

Cameron: Am I supposed to be flattered?

[1] https://clinic-duty.livejournal.com/385.html
Apple Music’s Spatial Audio Is Paying Off with More Listeners, Major Releases
The certificate authority has no requirement to verify that they are emitting a certificate to a human person that has any legal right to the domain name they are obtaining the certificate for.

All the PKI requires of CAs (for DV certs) is to ensure that the entity requesting a certificate has control of the domain name they are requesting the certificate for. That entity may very well be a server, not a person; and it may very well be malware that has infiltrated on Google's servers, requesting a certificate for google.com. It's not up to the CA to verify which it is, for DV certs.
I'm portuguese, and this subject was in the news for some days. It was followed by the news outlets like you've said, but still, both events are quite rare to be mentioned in the media.

For example, four or five years ago there were some ransomware attacks but it never reached the media.

What's more troublesome about Vodafone attack was that it affected some emergency services, and hospitals, that used Vodafone for communications -> this is what is being deemed as secondary to international news.

Was this just colateral damage from a random attack to Vodafone? Or was Vodafone attacked because they knew some emergency services were dependent on Vodafone?

Where is the line that separates an attack to emergency services/hospitals, which shouldn't be taken lightly, from a regular attack to a big company that happens to provide services to key operations in a country? Was it a criminal offense, or a terrorist attack?

All of this could be a coincidence of course, but due to the range and the damage of the attack, this must be investigated and it's a big deal to Portugal.

I don't think there were any deaths directly related to this attack, especially because those emergency services were quick to switch to other communication solutions, but the headlines could be flipped around:

Portuguese Emergency Services were disrupted after cyberattack to Vodafone Portugal.
Password filling on iOS and Android is built in to the OS. There's no need for an extension anywhere.
From a lay person's point of view, I am trying to imagine if there would be significant extra mass required to distribute a billion inhalable vs injectable vaccines. It seems like there would be additional mass and volume. Could that be one reason?
> But ... somewhere in the period mentioned above, a subset of western musical culture started to want to experiment with "modulation" - changing from one scale to another in the midst of piece. On continuous pitch instruments (e.g. violin, voice), this is entirely possible to do, since they can play any frequency in their range at all. However, it does require significant skill on the part of the performer, since the pitch of a (say) "F" will differ depending on the scale currently in use in the piece.

Does it really? Listeners are pretty forgiving, so I think in practice, you will just have drift away from concert pitch, and you maybe just have to be a bit careful because the open strings will jolt you back to concert pitch.

But in a capella vocal singing, there's no such forcing function, so you just need the ensemble to be good at locking in with each other, especially on long chords where you really want the audience to feel the consonance or dissonance. Which isn't simple, but it's also not rocket science.

It would be very hard to perform exact pitches within a couple cents of exact frequencies, if that were necessary. I just think theorists vastly overstate how much listeners care about tuning in most cases. I made this mistake myself. For research, I was interested in creating a sythesizer that allowed composers to switch between tuning schemes mid piece. And I could barely hear the difference, and much to my disappointment, it wasn't very compositionally useful.
Yup, we can credit politicians bending to appease BLM for these disastrous policies. The guy who stabbed the woman 40x in NY this past week had been arrested and released without bail numerous times. Woo-hoo... equity!

It's a massive run they've had, to all our detriment. Fortunately, I think it's all backfiring.
If by "western music notation" you mean the clef and stuff, then lol, no. There's a reason most musicians don't use nor know it.
Part of the problem you are having is the English word love is an overloaded term.
private key never leaves the device it is on; public key is .. well public so not something to store in a password manager. If the device is replaced, you create a new ssh key pair or restore your old one from a backup. In case your device is stolen/lost, you revoke access by removing the public key wherever you used it. This too is something a password manager can't do for you. If you are in a cloud environment, you let it manage keys for you. E.g. we don't provision any keys to GCP vms and instead login via a gcloud command that provisions temporary ssh credentials.

In short, I see no need for using a password manager for managing ssh keys. The public key is not something that needs protecting. The private key is something that you should not share between multiple devices or generally pass around.

But of course being able to paste your public key from some tool is nice if that is a regular thing in your life. And if you switch between multiple key pairs, it's probably nice to have something more user friendly than very fiddly command line tools. I guess the latter is what 1password is trying to solve here.
Presumably if the laptop is stolen, the key isn’t exposed because it’s in 1Password, and the attacker doesn’t have your master password?
I use KeyPassXC for almost all of my secret storage needs.
Thanks for your kind words :)

> long term what is your goal to differentiate? or where do you want to focus?

Most other tools have clunky UX, dated design, or are painfully slow. I'm differentiating in ease of use, clarity and speed. Still a lot to be done, but I think I'm already doing okay compared to other sites.

> Other TLDs or Other Associated Domains, is this something that you would be able to find?

Since GDPR, nearly all WHOIS queries get their owner details purged. You also can't link it based on resolving IP addresses, as many sites use a shared CDN. There might be some signals left, but definitely not enough to give any kind of meaningful coverage to make it useful.

> Can you determine from a DNS search if a domain is owned by a company or by a non-corporate entity (Blog, personal)?

No, for the same reason as above. Here you could scrape the site and look for 'about' sections and do some ML, but that'd be quite involved.

> I would purchase and use this for a email verification process.

What would you like to use DNS for in email verification?

> Email format Verification
As in, detect 'firstname.lastname' for 'john.doe@company.com'? There's already a SaaS that does just that: https://hunter.io/
Hmm, the question is whether information is actually lost. In the answer linked below there is an example with a two pixel image that at least in that case information is actually lost, which means that the algorithm is not reversible.

https://softwareengineering.stackexchange.com/a/86810
And instead of those nuclear plants they mostly build coal plants that are still costing money and hurting people one a massive scale.

If coal has been correctly accounted for in terms of human cost even outside of carbon, nuclear would have looked far better.

And what those numbers quote actually miss is that there was a period of massive over order of all kinds of plants, including coal that were canceled during 1970s economic problems. So the fact that people were over optimistic about the future in that period doesn't mean nuclear was bad. The economy simply didn't continue to boom as much as some people had predicted.

Even back then the inventiveness for US public utilities were structured in a way that makes it more viable to buy things that require continues fuel cost, rather then up front investment.

The simple fact is, externalizes include nuclear power would have dominated and would still do today. Short sighted politics and public fear is the reason it didn't happen.

Looking back at it, its actually a no brainer and countries like France who did it certainty didn't regret it. No massive pollution from coal plants with horrible environmental destruction around them, no dirty air, no mass destruction of country side because of coal mining. Far better energy independence.

> Alternating between "small and modular" and "big and efficient" to have something to try and hype with.

With molten salt or even just molten salt cooled reactors, you can be both small and efficient there is no conflict.

Had the US continued to invest in nuclear next generation reactors were well into development. However these were canceled. And very little private innovation took place from the on. Partly because it was incredibly hard to beat coal and later gas on cost and partly because regulation were hard coded to only be viable for PWR type reactors.
My favorite things about working at companies with a culture of writing
It's not always just about simplicity of primes. Some intervals correspond to harmonics too.

Major 2nd: 9th harmonic (9/8)

Major 3rd: 5th harmonic (5/4)

Perfect 4th: inverted 3rd harmonic (4/3)

Perfect 5th: 3rd harmonic (3/2)

Major 7th: 15h harmonic (15/8)

In fact one of my fav tunes Easy on Me by Adele has a suspiciously sharp perfect 4 in the chorus melody... I think she was tuning a bit towards the 11th harmonic which is sharper than a perfect 4. Someone measured her pitch and it's actually somewhere in between perfect 4 and 11th harmonic. So cool how it works!

https://youtu.be/U3ASj1L6_sY?t=145
How does the US have power over crypto exchanges? And don't most countries have exchanges that offer local currency?
I put an example of what `divs` could be in my comment here: https://news.ycombinator.com/item?id=30357788#30361633
The US was doing exactly the same! Building planes, tanks, sending food, making uniforms and weapons. There were even food coupons. Do you think it would've been fine for Japan to attack with atomic bombs a couple of US cities? Would you consider that a mass killing of civilians?
Or maybe I was making a conscious choice to comment on the one but not the other. In the last 20 years or so, there's been a wide reconsideration about the morality of dropping bombs (whether nuclear or conventional) on civilian populations during the war. I don't think we need to have yet another conversation about that. Instead, I'm trying to understand the Japanese viewpoint, where they get a telegram that 100k people have been killed in a raid and think "Bummer, but we fight on!".
Fully agree. With an open file format, people using yacy to create their own index would be welcome and actually help all of us towards having better search.

But I believe that for kicking off such a project, it first needs to exceed a critical mass of search coverage on mainstream targets. That's why I am interested to see if it could be executed while being financially self-sufficient.
Taking on VCs early would probably undermine the project, so bootstrapping seems like the way to go. And that means you need paying customers from day 1.

Relying on friendly volunteers, on the other hand, seems like quite the risky strategy.

EDIT: BTW, looking at their screenshots, it looks like Yacy is planning for a very different scale. I was actually considering indexing pages in the 10mio to 50mio URL range. But all their screenshots show <10K URLs, so that would be mostly niche results.
Relax. Per my understanding, you don't need to push yourself so hard. I come from C/C++/Java first. Then I use python. When I learn python, everyone said that the good part of python is its duck type and dynamic type. Now everyone talked about type hints. I can't express my feeling about it. Per my experience, type hints can improve your code quality if you are working with huge code base or some complex project. However, if you just write some scripts to auto some daily tasks, using type hints is a kind of over-skill.
On top of that, it is clear from Google talks at game developer related conferences that they really don't have any idea how to talk to game developers.

Apple, Sony, Nintendo, Microsoft talk about how their technologies empower game developers to make and ship games.

Google talks mostly about Play Store KPIs, they just don't get it.
https://web.archive.org/web/20220215122427/mywiki.wooledge.o...
The two are the same to this sort of person. It seems absurd until you've watched someone call a goodbye kiss between two men pornographic.