skysight-inc/HackerNews huggingface dataset:
Security question: Is a web extension safe if it is installed but if you're not using it at the moment? For example, if I were logged into my bank's website and I did not click the SingleFile button in the extension toolbar, could it still theoretically collect info from my bank's webpage or do other actions?

I'd like to use SingleFile and have no reason at all to distrust it, but I'd like to understand the security impact of installing lots of web extensions. How do people handle security risks like that? Do you run a separate vanilla browser with no extensions for sensitive tasks?
SPA's #1 draw back is that you have to rebuild browser functionality inside of the browser.

The browser natively handles internet connectivity, back / forward buttons, refresh buttons, URL management. Additionally, users have been trained to understand the responses, hit the refresh button, and use the back button. Browsers have gotten better at distinguishing between your internet being down and the website being down.

Good SPAs have to rebuild all of that functionality.
I've had this thought experiment before, but where I get stuck is - what happens when you want to share state between the pages? URL params, storing to indexedDB, sticking them in global variables - all viable solutions but all with their own issues.

I'd be very interested to hear how you solve this, or if it's less of an issue than people might think.
In the 90s, I credit a huge amount of my love and appreciation for electronica to the folks at my nearby Tower Records. That single store, with a single listening station in the Electronic Music section, holding only 6 CDs, exposed me to music I never would have heard before. It wasn’t anything from the Billboard 100 or top streams on Spotify, it was just what some local electronic music nerds thought was new and cool and I am forever grateful to them for what they decided to share, as well as desperately mournful that I’ll never have that kind of experience again.
Fuck, please no :'(

I've spent thousands of dollars on Bandcamp. This makes me really, really sad.
Web support... I think there may be WASM compilers for Java, but there's still going to be a lot of overhead.

Mobile, there's Android... or did you not realize that's Java?
Those Russian invasions happened after NATO officially invited those countries to join, so it is not self fulfilling

Those countries are right at Russia's border, US other NATO members invading countries thousands of miles away

NATO members are by far the biggest aggressors in the world, always in and out of countries, claiming to spread "freedom". The population in all the countries, they intervene, live in worse conditions today. Yugoslavia, Iraq, Libya, Yemen, Somalia, Pakistan, Kenya, Afghanistan, Uganda, Ethiopia...

https://en.m.wikipedia.org/wiki/2008_Bucharest_summit

https://en.m.wikipedia.org/wiki/Georgia%E2%80%93NATO_relatio...

https://en.m.wikipedia.org/wiki/Russo-Georgian_War

https://en.wikipedia.org/wiki/Timeline_of_United_States_mili...
The SD845 phone has a larger screen. Galaxy S21+ and Oneplus 6. Notebookcheck's wi-fi browsing battery runtime tests set the brightness at 150 nits. Oneplus 6 gets 12hr42min, S21+ gets 10hr51min. At minimum brightness they get 30:06 and 29:40, respectively. All this despite the fact the Oneplus 6 has a 3300mAh battery and a 115.4cm^2 screen and the S21+ has a 4800mAh battery and a 108.4cm^2 screen. It's pathetic.
If you assign conclusive weight to recent "news", rather than historical precedents, I think you'll remain at the mercy of constructed narratives about what's really happening in high-stakes diplomacy & warmaking.

The US was shouting from the rooftops that they expected an attack, in a manner putting real credibility at risk. While laypeople, & left footsoldiers, may have completely discounted the possibility, Germany & others in NATO are close enough allies they'd have seen more of the tangible reasons why the US was saying that.

Note that feigned surprise can also be a conscious tactic, to help shepherd-along any alliance stragglers, or domestic opinion. Or, excuse inaction. "No one could have known", say the official mouthpieces for those who ignored the alarms from those who did know. "We are blameless!"

Further, if there was actual confidence in policymakers that an attack was unlikely, & that Putin was deterrable, then pre-announcing the severity of the response would have been very cheap! You won't have to do it, in the expected case. And pre-announcing makes the expected case even more likely.

The risk of coordinating with a leaky/corrupt regime isn't necessarily disqualifyng. There may be portions of the Ukraine government/military in which there was very high trust - such as close contacts in special forces, & those who have repeatedly proven themselves in the last ~8y of lower-grade hostilities. Or, people whose comms have been completely pierced – so NATO knows exactly how much corruption, or mixed-loyalties, they'll express.

Weaponry could also have been pre-positioned just outside Ukraine, or kept in the custody/knowledge of trusted contractors or deniably pre-positioned special forces. I hope you don't think Russians, like the saboteur groups repeatedly confronted in Ukrainian cities, are the only forces who can pretend to be someone else when it suits them!

As another example, no one outside of the home airbase support teams know who's really flying a fighter jet, unless enemies shoot it down & recover the pilot. I hope Ukraine has some world-class fighter pilots! But with lives and practically priceless (in the short term) military hardware at stake, if an even 10% better pilot is ready & willing from an allied counry, I suspect Ukraine can grant them a uniform & citizenship instantly. (It's been surprising how many NATO countries have said it's OK for their private citizens to go fight in Ukraine.)
They were pretty great for that purpose. Somehow visiting a 4-star store was more efficient than staying home and perusing 10 different 'best-of' lists across kitchen, electronics, book or game categories. I always found something interesting when I visited.

It was a bit like a Sharper Image but instead of 80% of the items being useless gadgets it was more like 20%.
Y’know, now that he mentions it: no cooling system, no ventilation, and takes up less rack space than a Mac Mini. Probably will have Thunderbolt 4 ports and you can route power and data through one of them. MacBook Air Colo, I can see it.
Even the BeyondCorp paper doesn't fully buy into this idea. If you're on a coffee shop's wi-fi network, you'll talk directly to Google's Access Proxy. But if you're in the building, you're 802.1x authenticating to their network before getting access.

The problem with VPNs is that enterprises have used them for decades as a crutch, extending their perimeter model out so that instead of a small SPOF, they have a gigantic, ever-changing SPOF. "ZTN-think" pushes this basic idea way past usefulness, to the point where all network controls are somehow suspicious. Which is crazy; BeyondCorp fundamentally relies on network access controls as well as application access controls, like every other modern network design. They're just different controls.
Our Response to the War in Ukraine
The FTL soundtrack was my first purchase on Bandcamp and I think how I discovered it. I love it. Farewell.
There's a joke: "Escape room idea: Just a well-stocked bookstore with clearly marked exits. You have one hour to get out. Good luck."

Elliott Bay Books exemplifies that meme better than almost any place in the world. Not only does it do an almost preternatural job of putting books you might like in front of your face, but it's a literal warren that can be tricky to escape from after you've finally woken from your book-induced reverie.
You can meet a major LGPL requirement by dynamically linking your dependencies or by providing object files that the user can statically relink. Neither is circumventing the LGPL, however.

I take your point the Qt company wants (L)GPL licensing to sound scary, so they can sell licenses.
Somehow Neil Young (the guy who bought a model train company for funsies) and a host of his ostensibly-principled contemporaries all decided recently that they needed more money by selling their catalogs, so I would hazard against assuming anyone is immune to the temptations of more money.
Right, but is it true that most NFTs just post the URL and not a IPFS CID (or any other form of checksum)?
The story doesn't fit the current climate and I can't see why 'most' was used for the article title (there doesn't seem to be real comparisons or numbers). But the story and interviews themselves, at the time 2015, seem legit. So I wouldn't dismiss it outright. That said, again, it doesn't fit the current climate and would've been better discussed 6 months ago or hopefully in a year.

"On 2 December, parliament approved a new health minister – Ukraine’s third in the year. He was Alexander Kvitashvili, a Georgian given Ukrainian citizenship especially for the job. Officials hoped that the fact he was foreign, and unconnected to any existing power structures meant he would be able to shake up the country’s hospitals in the way no Ukrainian could manage."
Classy | San Diego, CA or Remote (US) | Onsite | Remote OK | https://www.classy.org

Classy is a giving experience platform that enables nonprofits to connect with supporters through online fundraising.

To learn more about who we are, our engineering culture, and whether this is the right place for you, read our Key Values profile: https://www.keyvalues.com/classy

See all of our open roles here: https://boards.greenhouse.io/classy?gh_src=b1d75ee71us

Tech Stack: AWS
Agile React
Javascript ES6, Node.js, AWS (Lambda, SNS, EC2, ECS).
SQL
NoSQL databases (MySQL, MongoDB).
GIT/Bitbucket
Countries aren't going to leave swift because I bet 99% of them don't have any aims to be doing invasions anytime soon.
Doubtless, although I think there are a bunch of these "time travelers". Or maybe one guy who does this on multiple bulletin boards.
Probably the last time Putin is going to grant any wishes to Xi
thanks for the info! never knew about this, i wonder why it's not on the pico-8 landing page.
> “No wireless. Less space than a Nomad. Lame,” said Rob “CmdrTaco” Malda on Slashdot on October 1st, 2001. (The Nomad, if you're wondering, was a pre-iPod MP3 player that was the size and shape of a Sony Discman in its early incarnations)
By similar logic to Russia’s claim on Crimea, wouldn’t Finland have a claim on eastern Karelia?
My understanding is that most of security defects in the JRE were related to the browser integration. The core Java sandbox was secure.
Lol. These coin websites are practically like RT in the way they constantly just pump out propaganda. If the price of Bitcoin rises it's bullish for crypto, if it falls it's bullish for crypto, if Russia invades Ukraine it's bullish for crypto, if world peace is declared it's bullish for crypto.
There was also unrest in Kazakhstan early in the year that Russia intervened in; very shortly after the start of the war they publicly called on Kazakhstan for troops and were declined. I wonder if diversion of Russian resources to Kazakhstan and/or Kazakhstan forces that were planned on being available being held back played a role in timing, too. (And if so, of then those Kazakhstan forces not coming through once the invasion was underway caused additional problems.)
I agree 99% with this article, but the part about packaging C++ is wrong. I'd say use "vcpkg" (yes, it's Microsoft but also works on Linux) and then CMake. CLion is a nice IDE for that kind of stuff and it's reasonably easy to setup cross-compiling or GitHub pipelines with it.

The result:

C++ source pushed to git => GitHub pipelines => freshly compiled binaries for all platforms

That said, I have also re-written some things in Go just for its ease of packaging and cross-compilation. The fact that libraries "just work" is like a Zen experience to me. Also, "go generate" really makes it easy to merge small resource files into your one-file binary app. BTW, I come from python and Ruby, where "WTF did mkmf.rb crash?" is a daily thing...
Heh, thanks for bringing that to my attention; based on the video alone, I think that'd be right up my alley (linky-linky: https://www.gog.com/game/project_zomboid and it's on Steam, too, if you're into that)

> Why?

From the GOG page:

Works on: Windows (10, 11), Linux (Ubuntu 16.04, Ubuntu 18.04), Mac OS X (10.9.0+)

is almost certainly "why," and I'd guess the lua part is because it seems to be the lingua franca of game modding, so meet folks where they are
Above freezing? Read some news this morning that lots of snow is expected across eastern Ukraine. Maybe the weather shifted..
If you add '--no-parent' (doesn't request anything that's not a page dependency above the requested URI) and a '--level=5' (only follows link 5 deep), you won't get all of a site. It makes it more realistic for getting wikipedia articles.
Swapple – Sort of like Wordle mixed with Boggle
As in: an organization who makes a mistake once is unreliable for everything they say no matter how trustworthy everything else they put out is? And the alternative is what? Something like: let's start believing random facebook posts, or some other systematic biased site?
> "I probably shouldn't be laughing at this but it's really funny anyway."

Part of me feels fairly uncomfortable with this idea. Humor is such a complicated emotion, but lately we seem to try to distill it to a single interpretation, shallow, derisive, and then proclaim what it's okay to laugh about or not.
I tried to reduce that definition for readability: "suzerain noun: internally autonomous vassal state w/ externally dominated foreign affairs."

What dictionary is your source of truth? I've been using Webster [1] but I feel like there's probably a better option.

[1] https://www.merriam-webster.com/
They do have a point. It's just "beating around the bush" so much. Focal length, distortion, projection. I guess I'm just too cranky for it.
> How about giving people a little slack on being emotionally charged when most of their employees are in a war zone?

I didn't know that. But if that is the case, the company could have offered them money and support to relocate somewhere out of the war zone?

That is rational and humanitarian, and probably would get them better PR among non-ideologues.
Bangladeshi sailor dies in missile attack on ship at Ukraine port
Any good sources on the verbal issue?

This isn't well understood, but starting with a tonal language has a major influence on how speech processing in the brain works.[1]

[1] https://theconversation.com/if-you-speak-mandarin-your-brain...
When I was a teen my family took a road trip through South Dakota. They've got "trophies" of them them everywhere, restaurants, gas stations. It's a big thing.

My sister who was maybe 6 at the time swore up and down that she saw one on the drive. We all just said "Really?!" and laughed on the inside - didn't want to kill the joke.

To this day, some twenty years later, we still like to tease her about seeing a jackalope.
Because, and fairly so, people don't want their spending to go into the pockets of companies that get kids interested in gambling or buy exclusivity.
Lame.

(lots of whooshes here. https://slashdot.org/story/01/10/23/1816257/apple-releases-i...)
this is the shit that will kill all of us. I feel like avoiding a larger conflict overflowing more borders is going to require perfect decision making. What you linked to is not perfect decision making.
It’s hard to remain rational when in love. This writing captures that. It shows the immense frustration you feel when you’ve felt such warmth from another person, only for them to flag, then rally again, and on and on… The good times are a pain-killer and keep you from holding onto the full extent of the bad times. This can be on the frequency of a couple of days. 3 great days, your world is suddenly real, your partner is there for you, cares about you and loves you. 3 days where you are shattered, your partner is distant and cold, is angered by discussion, chides you for being upset, takes your contributions for granted. This cycle makes you DUMB. The good times keep you going though.

It seems like an interplay of both peoples trust issues. The author has been betrayed in the past. Why pursue a married man? Some may say she wanted the resulting and predictable pain. Both people are too scared to end it for various reasons. Not to hurt the other? Worried about suicide?

Who ever knew it would be this hard?
GTK/WPE use libsoup. Playstation/Windows uses curl. And yes Apples networking is proprietary.
I hope you are right, but the track record for take-overs isn’t very good.

When the original managers leave, you get replacements from the parent company. Or managers who want to “change things” so they can impress the upper echelons. Seen it too much.
> You know that isn't an argument against what I said, right? Like, at all. It completely supports what I said.

It's literally the opposite of what you said, unless you suddenly changed your mind and agree that the merit-based schools are the best option for poor kids.
Snowflake acquires Streamlit for $800M to help customers build data-based apps
Google tells employees in US to return to offices in April
Not a fan of explaining the joke, but between you and another commenter, I think it’s necessary here:

https://en.wikipedia.org/wiki/Creative_NOMAD

This is what iPods used to be stacked up against in tech circles.

> edit: I have been thoroughly schooled about not immediately recognizing a quote from the turn of the millenium presented out of context not as a quote. Sheesh

No disrespect intended. Sorry! :)
Wind increases evaporation if it is occurring, basically a multiplier. At 100% humidity no evaporation is occurring because the air is fully saturated. So the wind is multiplying times zero.
When would be a good time for an invasion? Not when the snow thaws. Ok. How about when its ice cold? That option sounds even harder, though I guess the vehicles don't get stuck as badly. How about waiting until summer? That sounds like a more conventional military strategy, though I don't know enough Ukrainian geography to tell if its a sound option. Is there ever a "good" time for an invasion? If so, why did Putin jump the gun? If not, the current situation was inevitable in some form or other.
This is all in the context of the USA.

My question is why would you be asked or, if asked, tell your caste?
Matthew has been pretty active on Twitter with charts etc. We do plan to blog about it shortly.
Making Phone calls from a Trolley in 1896
If the auth service has failed, the correct response is to shut down all access to what that service was connected to.

In order to survive shutting down that access, the system must be compartmentalized, so the shutdown is limited in scope.

For example, the hydraulic system on an airplane has a redundant equivalent hydraulic system. But within a hydraulic system, it is designed to isolate failed sections of it from the rest, so the rest can still function. I.e. developing a leak in the elevator actuators won't disable the aileron actuators on the wings.

The Fukushima plant and Deepwater Horizon rig both had a vulnerability to a single point of failure that produced cascading failures that unzipped the whole system. Both were easily and inexpensively preventable.
My guess is he's saving them for a bigger invasion of other countries if he's able to take Ukraine.
SEEKING WORK | Remote | Data science & software dev

Have a nonstandard optimization problem? Could use an interactive visualization to explore complex data? I'd love to hear about that!

https://andersource.dev/

hi@<username>.dev
I always thought of the benefits of SPAs more as a separation-of-concerns thing. You can pretty effectively build a functional front-end web application and mock a set of back-end REST apis, while another team builds out a the back-end. There are absolutely tradeoffs, and being a good software engineer is about understanding where and when those tradeoffs apply.
I think SPAs are awesome, there are just so many cases that SPAs can handle easily and more gracefully. From non-redundant input checks over interactive elements to optimizations for spotty networks or even offline usage.

Anyway, it's painful when a page won't load or it takes 10 seconds to load for no apparent reason. That's why profilers need to be used, loading indicators within the elements and also there's the trend towards frameworks with small footprints or even to go framework-less.
> a sustainable lifestyle business

A company with 100 employee isn't a lifestyle business. The term we used to use for that before VC swallowed the world and decided that anything less than a billion is chump change was simply "business". A 100-person company with millions in revenue is a successful medium-sized business.

The only reason it doesn't feel successful and stable today is because we live in a unprotected corporate environment where any of the giant behemoths may anti-competitively crush a smaller business if they so choose to and there won't be any repercussions.

I wouldn't be surprised if the main motivation for Bandcamp selling was simply the fear of being either bought out by someone worse, or crushed by them. (Likely Spotify, which is two orders of magnitude larger than them.)
Oh, yes, the details are critical.

Once inherited a 2D graphic editor... so slow it was totally useless. After tinkering a bit I noticed coordinates were sometimes 'long', sometimes 'Long'... gazillions of automatic boxing and unboxing operations resulted in a severe performance penalty. But the original developer didn't figure this out, tried to fix the problem by adding some multithreading on top... and of course botching it.

Introduced some sensible data types, got rid of the multithreading and it really got smooth...
This looks like what we usually call a "heavyweight mapping", distinguished from the usually preferred "lightweight mapping".

There are sound reasons to prefer the latter. When it is lightweight enough, the mapping is intuitive and obvious, so the original documentation mostly suffices, modulo some release notes. If something doesn't work right, is is very likely your code, not the mapping, at fault. Anything omitted from the mapping is easy to add, compatibly.

The promise of a heavyweight mapping is always that you won't need to understand the thing mapped, that the mapping itself will (1) be fully documented, and (2) work. Neither is ever wholly true. As a result, you need to understand both libraries, and also the (lightweight) mapping between them, and work around all the bugs and infelicities in all three -- mostly without help, because nobody else understands all that any better than you do. When something doesn't work, you have to determine if it is your code, the mapping library, or the thing mapped that is at fault.

Lightweight mappings are always ugly. You end up with your own, custom, heavier mapping, but just to the parts you are actually using, and that you actually understand. It is tempting to fill that out and publish it, which is the actual origin of all the mappings you find published. Resist.
It's probably their time yet, but I'd love to see the Mac Mini and iMac counterparts of the 14/16" MBPs. A new display more in line with the pricing of the old Thunderbolt Displays would be nice too.
In the heart of winter the whole country is a road, right now it is very narrow strips that are easily passable and it is getting worse by the day.
Congratulations, this looks great.

I wanted to know how this compares with customer.io in regards to the Segment integration.

For example, can you build email campaigns based on multiple events / user traits?

I.e. send an email to "all users who signed up 2 days ago and didn't complete onboarding"
I'm reminded of "John Doe v. ExxonMobil Corporation", which alleged that Exxon directed death squads who killed and tortured Indonesians.
Putin's yacht (worth $100m) was in Hamburg, too. He moved his three weeks ago https://www.businessinsider.com/putin-yacht-graceful-left-ge...