skysight-inc/HackerNews huggingface dataset:
The vast majority (around 67% in 2018) of US firefighters are volunteers[1]. My mother started as a volunteer in her small canyon community in Orange County, CA, and did that for five years before becoming a full-time engineer for the OCFD. She worked several wildfires in the area as a volunteer.

1: https://www.nfpa.org/News-and-Research/Data-research-and-too...
Astonishingly, this article contains 32 non-title mentions of MDN, but not a single link to MDN. What a silly oversight.

MDN is not mdn.mozilla.org, nor www.mdn.org.

MDN is developer.mozilla.org, of course.
Secure messengers in war time
After deep-diving on front-end stuff in the late 2000s, I got enamored with the idea of a templating engine that would let you address content into places in the document rather than strain it in via placeholders.

Eventually, I wrote a library for it in PHP [0] and built a blog and another app or two around it. Never could seem to sell many people on the basic concept, though. Glad to see someone else had some similar ideas.

[0] http://weston.canncentral.org/web_lab/CAST/about.html
https://github.com/westonc/CAST/
One nice alternative is a clipboard widget for your OS that strips formatting and other stuff out. I use "PureText" on windows to remove formatting and it works great for me for many things, though it only strips rich text formatting.
Your idea is unfair and would be illegal to carry out. Because it's racist, obviously.

Furthermore, I live in the Balkans area (Croatia) and it so happens that companies from this area do employ people of varied ethnicity, and those do work on the same teams.
I like this as a thought exercise. I wonder if a taco is a single element, or composed of multiple elements (shell, protein, sauce, add-ons). What are the pseudo states of a taco? Does the taco have child elements like a list?

```
shell: ‘hard’ | ‘soft’;
temperature: 0 - 100 | ‘cold’ | ‘hot’ | ‘lukewarm’
```
Well said. I don't think GP deserves to have their comment killed; there is a certain amount of hypocrisy when comparing today's response with that of the Iraq war. It was not justified, has killed a huge number of people both directly and indirectly and was waged with impunity.

We are right to point this out, and the comparison holds to a certain degree although it is far from perfectly analogous. But two wrongs don't make a right, and I'm sure plenty of us would have wished there existed an external power that could have made the Bush administration reconsider how they perpetrated the whole thing.

On a deeper level, the current situation is a conflict of principles; rule of law versus authoritarianism. The former system works better, and enthusiastic debate and denouncement of mistakes democratic governments have made is certainly a part of that.
Your email address is exactly the sort of to-the-point humor I’d expect of a 27-YOE Linux sys admin. You have a beard don’t you ;)
the idea is better connected, which factors more for potential investors evaluating the board and c-suite than employees. but it shouldn't weight that heavily there either.
Slab | Software Engineer | REMOTE (Worldwide) | Full-time

At Slab (https://slab.com), we believe that knowledge is the foundation of any organization's success. When a team's collective knowledge is more accessible, that team's potential is limitless.

Our product helps teams easily create, organize, and discover knowledge across the entire company, from non-technical to tech-savvy. Each day, thousands of customers rely on Slab across their entire workforces, including Asana, Benchling, and Fivetran.

You'd be joining a team of thoughtful and experienced engineers, distributed worldwide across North America, Europe, and Asia.

Stack: React, GraphQL, Elixir [1], Phoenix, Kubernetes

* Software Engineer: https://jobs.lever.co/slab/1c6fae7c-980e-4875-be9f-76ae1ebfa...

* Product Manager: https://jobs.lever.co/slab/002d52c5-adbf-49d0-ac7e-8ee4eb18b...

[1]: Why we use Elixir: https://elixir-lang.org/blog/2020/11/17/real-time-collaborat...
feross (creator of this project and submitter of this thread) didn't mention his background/experience/pedigree but I can point out that he knows his shit. Check out his resume: https://feross.org/resume

I became aware of his existence after I realized he was clever enough to set up a bot to watch new posts on https://web.dev (I used to be content lead for that site) and automatically post every new thing here on HN
>> One thing I recommend to my hiring managers is to not allow people from frictioned backgrounds to manage and interview people from the other side.

What? This is racist in and of itself and would be blatantly illegal for any number of reasons.

Also the problem is not necessarily limited to Pakistani and Indians. It's Indians and Indians. Not sure what you want done there. I freely believe that the caste system of the host country carries over to the United States, but attempting to subvert that via "good" racist methods is not going to fly, especially if documented.
Most of these discussions of bias are about as scientific as phrenology, and ought to be treated with as much respect.
I don't believe the material cost is even $50. It is niche and not as demanded as tablets. It is such a shame these things are not mainstream because of the price.
Do you have any recommendations for resources that have been helpful with that? I'm trying to introduce some "tactical statefulness" into a mostly-stateless web backend and would love to find some giants to stand on.
I had a quick back-and-forth with Derek on HN a few weeks ago about applying this philosophy to a personal CRM system: https://news.ycombinator.com/item?id=30329475#30334269
You're right that introducing a GitHub app comes with certain risks, but "security" isn't a monolithic concept. For many people, installing a security tool like Socket to prevent supply chain attacks will on-net improve their security posture.

Also, for the record, the Socket GitHub app was designed to only read package manifest files such as `package.json`, `package-lock.json`, and `yarn.lock`. It doesn't read other files, and it definitely doesn't send those files to remote servers.
They both are explicitly sexist. Hard to define that away.

Maybe it's not bad; but it's sexist. Just as it would be racist if the criteria was making sure one of the interviewers was of specific race or nationality.
Just out of curiosity, does the text at the top of the current thread not do a good job of explaining it? I edited it from a bunch of materials the founders gave me (this is the standard Launch HN process for YC startups). I thought it made sense; it does to me at least!
Jon here. I’m the executive director of RILabs and the former GC of Stripe. Our guidance obviously takes a pretty strong stand on suspending services to Russia. We recognize reasonable minds can differ on this, but feel strongly that tech doesn’t exist outside of the rest of the economy or society and should play its part to support the effect of sanctions.
You can talk in prison on the recorded phone line.
Just like a session cookie is long-lived? At least with a refresh token you can keep things like specific roles etc. out of it and treat it much like an opaque session cookie (perhaps just containing nothing but the user's ID, which can be looked up to get the real roles/permissions for the short-lived access tokens).

I think it's dubious to call refresh tokens "difficult-to-revoke" but call sessions easy to revoke. Both require some kind of state. The difference is that you are (hopefully) doing far more grants and checks on tokens than you are doing revokes - so why not optimize for that flow?
It is not performing a desired action. For example, I have no need for making a request to https://www.youtube.com/generate_204 because I search, browse and download from YouTube via the command line, without using youtube_dl. Making that request, repeatedly, for no content does not benefit me in the slightest. Thus I do not make it. Why would I.

Other users may operate the computer using popular software running under default settings where, e.g., visiting a website automatically runs a number of Javascripts unseen by the user and the user implicitly trusts that, whatever these scripts are doing, it is necessary and for the user's benefit. We know that is not always true. (This blog post shows us a number of instances where JS is used unncessarily.)

There could certainly be legitimate uses for the non-JS 204 no content data sending technique. If I was using a website where this was useful, of course I would not block it. I am not yet aware of any such website among the ones I visit. Every use of requests for no content I have seen has been unnecessary. Usually it is some form of telemetry, sending data about user behaviour to a server without any prior user consent or affirmative action. I suffer no loss of benefits by not making or blocking these requests. For me, this is the most sensible approach. YMMV.
1. We are in beta right now! We have the data and analysis, and are working hard to make it easy to integrate project specific views into it.

2. https://socket.dev/roadmap See https://socket.dev/npm/issue for analysis we have developed on a per-package basis. We are working on integrating these with our GitHub App to provide custom tailored project views into this data. More info here https://socket.dev/blog/inside-node-modules

3. It will be a paid product, but is free while it is in beta. We plan on keeping it free for open source.

We are looking into providing support for the Deno ecosystem down the road as well. The capabilities stuff they have is super great, but you lose all of that benefit for every dependency as soon as you turn it off, so we think there is probably room for this kind of analysis there. Hopefully Socket can provide a similar signal that --allow-net provides, but for all of npm!
Doesn't Russia have their own maps service offered by Yandex?
>Now this "Swiss" puppet company, which is also owned by Russia, is folding like it was caught by surprise.

Ed Snowden appeared to have been caught by surprise at the invasion, too.
HomeCorrupter – audio fidelity reduction plugin VST
call me stupid but every single thing listed in the AI section doesn't require AI to do well?

some graph optimization, i guess. but channel, antenna tuning, network selection? what, isnt this all simple closed form "pick the best number"?

if its just flexing its ability to be used as edge compute as well thats cool too
This in itself is an incredibly racist statement.

It is like saying "an asian hiring another asian" while completely ignoring any sub-groups. "White men" are more diverse than you think and have only in modern times put things like hibernophobia behind us.
He’s looking for remote which would help but wether that’s a smart move for a new grad is a different topic
I think people are underestimating Putin and Russia. This is a regime willing to poison dissidents in foreign countries with nerve gas and radioactive isotopes. If you think Russia won’t bring that heavy hand to Ukraine you’re kidding yourself.

My prediction is the West will give material aide, but Ukraine will fall and we’ll enter another Cold War.

To suggest the West will go to war is just wishful thinking. Ukraine will be sacrificed for a temporary and unstable peace in Eastern Europe. Putin called NATO’s bluff and NATO won’t push harder.
This appears to be the original source: https://twitter.com/AgainstTheWest_/status/14987288450416721...

I'd love to have an analysis of what holes in their infrastructure contributed to the breach.
I'm a Joplin user but I've been slowly learning Obsidian too. Level1Techs [0] did a fantastic primer on Obsidian and gave a thoughtful reflection on the zettelkastan method [1]. Josh Duffney's youtube channel [2] on Obsidian is also worth the watch too.

[0] https://www.youtube.com/watch?v=H69tRdemJiM

[1] https://en.wikipedia.org/wiki/Zettelkasten

[2] https://www.youtube.com/channel/UCCV1T7JbfzbE2O7P3kydmKw/vid...
^ This is BS. You don't write your name at all, just your student id number.

Also, this is the reason students in their board exams (+2 / Twelfth-grade
tests) were forbidden from writing their last name in the answer sheets.
Teachers in India openly discriminated against students from other
castes/jatis/varnas by giving them lower marks.

Didn't you notice the past tense? Also, this defensiveness without properly reading what I wrote is part of the problem. This maybe BS today, but it wasn't 25-30 years ago.
Happiness is tied to meaning is tied to family is tied to housing and economy.

It’s no surprise that a society living increasingly alone (due to costs/culture) is destroying itself mental-health wise.
I really like obsidian for writing text files. Technically they're markdown, but I almost never look at them as markdown files.
Ambedkar was an intellectual giant who wrote the Indian constitution. Glad to see him profiled here.

https://en.wikipedia.org/wiki/B._R._Ambedkar

Jurist
economist
academic
politician
social reformer
anthropologist
writer
"Length of convoy" is such a weird metric for all the news agencies to use.

We don't they just count the vehicles, I would imagine even basic computer vision software could do that with reasonable accuracy.

If 100 vehicles are in a 10 mile long convoy and then they space out more and are now in a 20 mile long convoy, it's still 100 vehicles.

I do enjoy reading each day the different lengths and distances to Kyiv.
Among Indian and Pakistani Muslims, even though the caste system as a system no longer exists any more for them—neither in law nor custom—the old patterns still exist. Certain professions are more respected, as are certain families and certain skin colours.

It takes time for any historical pattern to be reversed. Centuries, maybe even millennia. Even among people who actively reject the caste system it won’t be so easy for it to go away. Maybe technology can help.
Thanks, glad you like our approach!

Sorry about the confusing page. We're still working on some of the pages on the site. You might find these links more informative:

- Launch post: https://socket.dev/blog/introducing-socket

- What's Really Going On Inside Your node_modules Folder? https://socket.dev/blog/inside-node-modules

- And maybe even the launch Twitter thread: https://twitter.com/feross/status/1498676284590800903
How do you innovate when the concept is confusing and user interest isn’t there?

How does a browser with 10% marketshare somehow make a difference regarding adoption?
The directions for manual installation are listed directly after that. The first page of the documentation even explains how to install it directly from the repo. Also, it's funny that "curling to shell" is what crosses the line. As if any of the installation options even approach the risk of appending .gdbinit with over ten thousand lines of unaudited python, especially in a privileged environment like a debugger. Curling to shell is not particularly dangerous than the alternatives.
Been using obsidian for two weeks and the tagging / linking to documents is top notch, saving it to my internet drive at work brings out the best of all worlds
I’d say this.

Mirroring people’s communication preferences to build rapport works and generally you can assume that people communicate in the way that they want to be communicated to. (In our pod we call this ‘show not tell’.)

Usually when people present this idea they bring in a specific model of communications which may or may not be valid. For instance in Neuro-linguistic programming, Bandler and Grinder posited that when people say

‘I can see what you mean’

‘That sounds good to me’

‘I have a good feeling about this’

They are using visual, auditory or kinesthetic representations in their mind. This may or may not be true but it is true that if you use similar vocabulary to people you tend to build rapport.

Hypnotist David Snyder is one of my favorite YouTube personalities and he says that to build rapport with people you should listen and repeat back the same words in the same order that they do and I think that is right without any reservation.
Pretty much, yes!

For my own projects, I have:

- Gitea
- Drone/Harness CI
- Taiga (issue tracker, project management)
- Minio for Storage/Static site hosting (project site/blog/documentation)
- Synapse (Matrix) for group chat, bots, video conferences.
- Discourse (for support/community forum)
- Redash
- Syncthing for documents/assets, and basic Desktop apps (LibreOffice/Gimp/Inkscape) to edit them.
- Wagtail for CMS (mostly Django projects), but also used Strapi before and it worked well.

I also was just this week experimenting with Baserow (https://baserow.io) to leverage a no-code platform to build feedback-forms, landing pages with contact forms, etc. Not 100% ready for it, but I'd guess pretty soon it will be.

Anyway, it's mostly me nowadays for these projects, but if lightning strikes and I need to grow a team, it wouldn't be hard for me to add Authelia with an LDAP server to provide SSO.

The big question for me would be (a) if I am too peculiar with this setup to the point that other people would not accept using these tools and (b) if the joke was just an exaggeration or if there is actually a market for funded startups that would be interested in saving some bucks per month by using F/OSS alternatives.
How about the https://www.espressif.com/en/news/ESP32_C3 ? Not sure if it supports USB or Ethernet (IIRC previous versions supported ethernet and also USB to some extent). This would be less powerful than a rPi, but on the up-side is available right now on Amazon for about $20 with good support.
Star Citizen discovered a way to sell the imagination of being fully engaged in a game to people who don't actually have the time for playing that much (but have fond memories of wasting countless hours). It's a rather brilliant discovery. I wonder though how much of that has already been ruined by whatever beta versions exist.
another full throttle thing:

Viktor Kharitonin and Roman Abramovich are linked to the ownership of the Nurburgring race track. Both are on the sanctioned oligarchs list.

https://edition.cnn.com/2018/01/30/politics/full-us-list-of-...

Viktor Kharitonin is #43, Abranovich is #2.

https://www.autocar.co.uk/car-news/motorsport/russian-billio...
It feels like you’re arguing that, technically, GPG _can_ be used to achieve the same level of security as modern messaging platforms. That’s probably true. (I say “probably” because I’m not a cryptographer, so I’m not qualified to speak to the cipher algorithms used.)

My claim was never that, though. My claim is that in the “normal” usage of PGP, it’s substantially less secure than modern alternatives, and that this is a mostly inherent byproduct of the use cases for which PGP appears to be constructed.

Succinctly: it’s hard to use PGP securely.

Can you do it? Probably. Could PGP be the default if everyone gave up on the easier to use, more secure alternatives? Well, on this point I am skeptical: before Signal, Wire, Threema, WhatsApp, etc—some of us remember those days!—the “default” was plaintext email. Not PGP.

PGP had 30 years to become the norm. During the first twenty or so, it had no real competitors other than S/MIME. And, here we are.

There are a lot of areas—fountain pens, for example, or vintage sports cars—where old technology has its own appeal, but encrypted communications isn’t one of them.
Ukraine Seafarer Charged in Partial Sinking of Russian Oligarch's Superyacht
A few hundred, sure; a few thousand, it’s starting to get a bit iffy.

It depends a little on the complexity of the rendering for each item, and where you are fetching the data from, but when you’re into thousands of records you’re very likely to need at least some partial rendering. Suppose each record’s data is one kilobyte (I’ve seen far lower and far higher), then one thousand records is already one megabyte, which for many people will take multiple seconds to transfer, so you’ll still want to load the visible records before fetching more, or do streaming parsing of the records as they come in. And that’s ignoring the backend’s performance on fetching records, which must be taken into account too.

People are certainly often too eager to reach for virtualised lists, or worse still lazy loading without reserved scroll height, but even at a thousand records with simple rendering they’re still probably generally warranted—fast computers can cope with comparatively little visible difference, but on slower ones (especially older and cheaper phones) you’ll easily feel the difference. Memory usage can also be a concern for larger quantities of data and DOM (1000 × 100KB = 100MB).

I’m saying all this as one that scorns React and VDOM stuff in general as unnecessary performance overhead, and likes to use Svelte and plain JavaScript and things like that (or better still, to eschew JavaScript); and who worked on Fastmail’s webmail, which certainly uses such progressive-loading lists, on a precise-DOM-updates framework that cares significantly about runtime performance. React and its ilk are certainly particularly prone to using virtualised lists as a crutch to work around their shortcomings.

All that being said: yeah, I wish things like Discourse would stop doing aggressively lazy loading when there aren’t even several hundred comments in a thread. Render just the things on screen to begin with, if you must (though it’d be better to just send real HTML from the server and let the browser take care of all this, even if it complicates your JavaScript loading), but then load all the rest straight away so that I’m not penalised just because I’m on the other side of the world from the server, and let the browser handle in-page search.
How much did Apple pay DoorDash for this blog post?
>in 2022, as a white man without Mediterranean roots, I'd probably not say your username out loud in either country :)

If you'd like, I'd be more than happy to print you off a W-word pass. :P
Ask HN: As an American, why am I sanctioned by Robinhood?
I am locked out of my Russian ETFs. I received the following email from Robinhood:

An important update about securities you hold
Hi xxxx,
We wanted to let you know that our execution venues have informed us that they will stop supporting buy or sell orders on certain Russian securities that you hold, effective as of market close today, March 1, 2022 at 4:00 pm ET.
Why is this happening?
In response to Russia’s attack on Ukraine, the US Treasury has announced economic sanctions to disconnect Russia from global economic access, including restricting access to capital. Below is a list of securities that you will no longer be able to buy or sell:

GZPFY
LUKOY
NILSY
OAOFY
OGZPY
ROSYY
RSHYY
SBRCY
SGTPY
SGTZY
Please note that this list is not exhaustive and is subject to change based on government action, updates from stock exchanges, or changes at our execution venues.
Do I need to take action?
Your shares will continue to be held at Robinhood, but you won't be able to buy or sell until further notice.
This is a rapidly evolving situation and we are here to support you.
- The Robinhood Team
> Before the invasion Zelensky wanted a nuclear weapon for deterrence and the German foreign minister said the accord it's signed was not legally binding giving a go signal that yes you can develop your own nuclear weapon. The west just don't care and wanted war because it will benefit them.

One does not avoid a war by starting a war
"Upset over" is kind of an understatement for invasion and occupation (condemned by the UN even).
Condolences for Russian workers, this is tragic! Putin will now face accountability.
> "look, we have one and she's not mouthing 'get out' so we're a good employer".

Yes, we have done this in the past with minorities...
Typically in debug mode "Active Architecture Only" is set to "Yes." This means for most local builds you'll only have been building one architecture regardless of platform

This applies to incremental and clean builds running locally with default Xcode settings

When you archive and build for the store then your compilation will include all architectures
Did you just man-splain someone’s own religion/community?