skysight-inc/HackerNews huggingface dataset:
I do wonder what percentage of folks are actually in a position to choose? For a lot of people they’re going to be interacting with JWTs because they’re dealing with someone else’s auth, so the more they know about this structure the better.
The CTO of my last company has a degree in anthropology, so this tracks.
Why not? The article does not really answer why not.

> This is a problem because the ability to read your user profile isn’t a good identity proof. You might grant that capability to applications for reasons having nothing to do with whether they can “log in with Twitter” to a dating app. People found a bunch of vulnerabilities.

> Enter OpenID Connect (OIDC). OIDC is the demon marriage of OAuth 2.0 and a cryptographic token standard called JWT. OIDC’s is unambiguous: it gives you an “Identity Token”, JWT-encoded, that tells you who’s logging in.

Ah, so it’s more of a case “don’t use jwt… incorrectly“.

I also recommended looking at UMA2 and resource servers. Keycloak has, what I’d call, my to go reference implementation.
If it's in an app you don't necessarily get full browser functionality. You just have to trust the app.
2 (Sidebar) is not usable on mobile, because there is no good hover event. Since mobile-first is almost a necessity, it won't work this way.

Accordions make most sense as a table of contents, although they are often used in FAQs. But in FAQs, you can't use the browser's search on page to find collapsed words. So you trade better scrollability for searching on the page. Not sure how many people use "search on page" on mobile devices though.

1 + 3 are great though.
> Unisoc SC9863a

Interesting. There seems to be some upstream Linux support for this submitted to the mailing list by Unisoc engineers.

I'm not very knowledgeable in this area so I'd love to have some info from people w ho are, but is there any decent chance this could be end up being a fully upstream ARM Linux phone? I'd love to have such a device.
On iOS, you get a system-level modal promopt that confirms what domain you're going to, and the domain should be in the title bar of the web view.

It's not totally foolproof, of course, an app could bundle its own HTML engine or fake the UI some other way.
It's fixed now, so you should be able to read it fine on mobile.

The reason it was broken was because when writing the toy examples, I went in with the mindset of creating an example rather than production code, and set them all to a static `width: 25em` - forgetting that these toy examples were going to be inlined into the page. Silly mistake, should be checking each post before publishing, learnt my lesson now!
This is often the result of browser extensions. Specifically, CDN replacement extensions like Decentraleyes or LocalCDN.
Most organisations (and indeed people) can be a lot more accurate about their enemies than they can be about their friends.
1. Does Microsoft not disable printing, also?

2. If not, do your parents know how to print to PDF?
such a claim is tantamount to saying ordinary Russian people are sociopaths who only value things in terms of how it affects them

I do not think that is the case

they're people, just like everyone else, and your ordinary person can obviously tell which of the two aforementioned scenarios is way, way, way worse than the other
He's doing a pop-up in Singapore currently, it's reopening in a month or two.
Germany, England’s deepest rivals? In reality it’s not a rivalry at all (2021)
We Have Opened the Door to a New World of Pharmaceuticals (2021)
Yeah, the assumption underlying this case — that there's a single entity who discovered it or invented it — is fundamentally flawed. No to mention other problems.There's so much about this that's a textbook example of everything wrong with intellectual property and academic credit in our era.
self host your email. mailinabox makes it less than half an hour job. plus occasional updates every few months, nothing big. the upside is, you get to control your emails, your server.
the bad thing is, if you get a bad IP (which you can have replaced for example at the start from vps provider) or you do something fishy with your email like spam gmail/yahoo/outlook users, you would be banned but other than that it really isn't all that bad.

sure i have to "sometimes" ask people to check spam and set it as not spam but that is becoming more and more remote.

i do understand the appeal of protonmail and other privacy centric emails but you can do that yourself if you put in the elbow grease. plus you get to learn about a lot of stuff and its a fun exercise.

you also do not have to pay through your nose if you want more features/more storage and stuff (well the storage/server depends on your vps in toto but still)
Next post: 5 Things you don't need GitHub actions for
For more or less the same reasons that the invention of the telephone did not eliminate the use of memos and letters. Asynchronous long form communications is important and useful.
I don’t like the separation between template and code, I don’t like the developer experience (slow and often malfunctioning VS Code extensions and slow builds, bad in-browser debug helpers), I don’t like how creating “ad-hoc” components is basically impossible.

I think Zone.js is insane.

I know Angular very well. That’s why I’m confident I can create high-performance applications using Angular. I firmly believe Angular has far too many pitfalls for inexperienced developers.

So yeah, I hate Angular.
This is really interesting. I'm happy the author covered the effects side of things because this is where I've had some challenges with non-trivial React apps. Sometimes effects can be very complicated and result in React getting stuck in an infinite loop.

Before you say it's because I'm "doing it wrong", Material UI's website had this problem for quite a long time. That issue required doing manual refreshes to not trigger the infinite loops (something you would only see in the debugger). This problem in reactivity is a issue in React that even the best devs can struggle with. My solution was simple... use useEffect less. Depend less on reactivity.

The bottom line for me is that I feel like I can accomplish anything in React, but the devil is in the details. There are so many scenarios that I would need to vet with Solid.js, but if it works better at managing a complex app's reactivity, it could be very compelling.
If you feel "overwhelming pressure" to read Goodnight Moon to your kid you must have lived a very pressure free life up until now
Yeah I agree that the sidebar isn't a very useful example given that it's not even close to something you'd implement in production. The same technique can definitely be made to work with mobile, which is how the burger menu at the top right of the page is implemented - ie just using `:focus-within` rather than `:hover` and using media queries to only display that menu on mobile.

I'm glad that you enjoyed 1 and 3 though - it's been really interesting seeing each person take something different away
lol, I'm in this boat (although no idea if my project is amazing or if it's just a really stupid idea). One day I'll probably post it.
It's interesting how words can be strung together to avert scrutiny of relevant facts pertaining to the message being communicated—and sometimes even used to mask dishonesty.*

The terse form of the advisory states:

> To help keep your account secure, starting May 30, 2022, Google will no
longer support the use of third-party apps or devices which ask you to sign
in to your Google Account using only your username and password.

It's the innuendo that's interesting. The message in the subtext of this
statement is, Look at these apps! They want you to use them for e.g.
checking your email, but look at what they do! Isn't it awful? In order to
let you check your email, they make you give them the password for your
_whole_ Google account!

Of course, the only one who's responsible for the current arrangement is
Google. Google, not third-party developers, are to blame (and _solely_ to
blame) for why access to the various Google services is consolidated into a
single account. Google, not the Thunderbird team, are to blame for why your Gmail
password is the same as your Google Vault password, which is the same as your
YouTube password, which is the same as the password you use to mark your phone as needing to be locked out of your account after it's stolen.

* This is why I'm skeptical of the whole "writing forces you to be honest
because it means you have to actually think things through well enough to put
them into words that can be put into coherent sentences" meme. Nobody seems
to talk about how writing and the revision process that's inherent to it also provides the opportunity to finesse words.
Some idea can be made to appear as if it's sound and backed by solid reasoning even when the truth is
actually much less straightforward—or even contradictory.
Suggestion? Start now. I moved my primary email to a custom domain a bit over a year ago, and it takes a while to slowly migrate everything over. You don't want to be doing that while under pressure from whatever it is that forces you off.
They do, they recognize the revenue at FSD milestones, not all upfront.
I would be very happy if we lived in a world where a code using SIMD instructions and hand crafted cache-blocking and threaded code was a "naive implementation" but we are not. a "naive implementation" is a simple nested loop.

The rest are complex and they become even more complex when one tries to implement them in a way which compile efficiently on multiple CPUs (from different caches to different architectures).

Interesting article but the authors' conclusion is completely misguided.
Russian banks are joining CIPS now, and likely other countries will as well.

You're getting money to Chinese banks because presumably you are buying something from someone that has an account there, not for safeholding.
> I'd send an encrypted zip file.

That itself has a standards problem. Most people don't have anything more than the archive reader installed with the OS which for Windows means nothing better than ZipCrypto is supported IIRC. ZipCrypto can be broken so trivially, that it isn't worth bothering with. 7zip and other tools support stronger methods, even with .zip archives, but many people can't read the result.

There is also the good old key exchange problem as you are using symmetric encryption: you need a second channel to send the key over. Fine for friends and others you already have more than one contact route between, there are a number of ways to communicate after all, but not for general comms. It is scary how many people in a supposedly security aware industry I see sending encrypted archives by mail then sending the password in another mail, or sending the password and a link to the content hosted elsewhere in the same email.
In other words, Gmail is no longer compliant with Internet email standards like POP3/IMAP.
After years of using Knockout and Angular/RxJS, I'm not at all convinced that adding Observables to React is going to lead anywhere interesting.
> It's hard because "everybody is lying" might be one of the lies.

This seems very obvious. A gereralization about everyone is almost never true. In my interpretation you're implying that people will interpret that as more than "i don't know whom to trust" with an emotional undertone, which seems odd to me. Do people accustomed to critical thought take such statements literally?

My rule of thumb is if media engages me emotionally... then I doubt it's meant to be informative. I have a distinction where I try to identify if my emotional response seems wanted by the content creator or is "my enthusiasm for the topic" or a touchy subject for me...

I don't think you can expect to take anything that comes your way by a medium directed at masses as "truth". This is something that people seem to forget in times where life generally goes well.
It's called "don't ask, don't tell" and "parallel construction".
>You've just deoptimized your app, and your whole component will re-render on every change.

If you have 3 useState each of those will use 3 useReducer internally (every hook is implemented on top of useReducer), If you consolidate them into one useReducer then you will end up with the same thing performance wise. Maybe even better. Whenever an event is pushed into the hook's queue it marks the component as dirty. The next call to useReducer will then reduce all unprocessed events into the current state. It's entirely possible that having less hooks and therefore less metadata in the background can improve performance more than avoiding the theoretical cost of rerendering a component that most likely would have to be rerendered anyway.
Did you miss the data i provided?

The point here is trying to understand the motives behind the current Russia/Ukraine war without trying to justify it (i.e. "don't shoot the messenger"). A geopolitical game was played between NATO and Russia with Ukraine as the sacrificial pawn. See also https://www.dawn.com/news/1677138/ukraine-crisis for some more data. The relevant research by the professor referenced in that article can be found at https://www.jrishifrinson.com/. There is more; In one of his papers (George H.W.Bush: Conservative Realist as President) i read this:

Acting Secretary of State Lawrence Eagleburger observed in an accompanying memorandum, “It is in our interest to see the peaceful end of the Soviet Union as we have known it since 1917—a strong, totalitarian central government able to mobilize the vast human and material resources at its control. . . . The sine qua non for eliminating this threat is substantial devolution of economic and political power [emphasis added].” Even more direct was Secretary of the Treasury Nicholas Brady, who argued in a June 1991 meeting of senior policymakers that “A real reform program would turn [the Soviet Union] into
a third-rate [military] power, which is what we want;” judging from their comments at this meeting, Baker, Scowcroft, and others seemed to accept this point of view. Put simply, the spread of freedom, liberty, and U.S. values into the Soviet space was normatively attractive, but it also carried starkly advantageous geopolitical consequences for the United States.

It is well known that ever since Putin came to power, he has been on a mission to restore the "Russian Empire" by any means possible. One doesn't have to agree with it but it is what it is. You should now be able to connect the dots between NATO's actions/Putin's response and the resulting vicious cycle which has lead to this point; There is enough blame to go around.
No we should not. Logging in from anywhere and seeing all mail without problems, server side search improves the usability immensely. People who need encryption for sensitive stuff should have this capability, but forcing mandatory encryption for everyone like various do-gooders do want to will lead to far too many problems for regular users.
https://web.archive.org/web/20220301042109/https://www.nytim...
She has admitted several times that her team tried and failed to make the leap to human cells.
I'm not hairsplitting. This is the only justification here.

I care about this conflict just as much as the others. If you only care about conflicts that affect you personally, stop pretending that you are a human rights warrior doing this for higher ideals.
Spot on. "Data science" and "Machine learning" are indeed hyped up terms.

Most of the work is basics statistics, some SQL and poking at a ML library until you get the output you wanted.

Unsurprisingly, the day to day work can be very underwhelming.
we're both blind, was the exit door for me..
NoiseCraft (formerly Zupiter) open source JavaScript modular synthesizer
10.3" is too small for a paper replacement - writing notes on such devices is too imprecise if one e.g. annotates PDFs etc. I got the latest Onyx A4 and that's the size that can be finally used to replace paper for all types of documents.
For current events, my strategy is largely to stick to Associated Press (AP) reports. I ignore anything that's not super reputable, and don't have social media accounts.

My understanding is that, for many years now, the AP has been an organization for journalists to publish news in a neutral-enough way that it could be republished by other outlets with whatever context/framing/spin it wants.

A lot of the time, when you read a news story in politically-motivated new source, they're just taking AP stories and then adapting them to a narrative that better fits their audience.
Here’s some anecdata. About a year ago I posted on ProductHunt and a few hours later I received this cold DM on Twitter:

—-

Hi ,

Amazing product, Congratulations on the launch of your product, in product hunt .your product post deserves to get top 5. I saw your product hunt post, it got 23 votes. But still don't get any badge. I am Interested to help you to get, product of the day #1-5 badge 100% Guarantee. I can boost & promote your Product Hunt campaign & also can make your product, Product of the Day #1-5 Position only for $100. After successfully completing my work you can pay me. Increase more sales and engagement. You can be 100% sure that I won't violate PH's T&C. The product will be 100% safe. I hope that you can see the rank improvement within 1-2 hours after starting my work. Let me know if have anything else you want to know.
Best Regards
Sorry, I should have proofread it. A french-anglicism for nested-loops ("boucles imbriquées") slipped through.
> Mostly because the big boys want control.

I'd rather say the issue is that the big boys' business is NOT mails, so their goal is to provide the minimum viable mail service, and not spend one dollar more on it.

While once upon a time, when companies were actually providing email service, they had to innovate to keep on top.
From the client's point of view, it's like a password. Just not your password. (edit: talking about app passwords, unrelated to oauth or stuff like that)
This works only to a degree. Reserving judgment can't entirely stop emotional reaction which is the target of many of these info nuggets. Also, it can be really hard to notice that you are in an echo chamber, when e.g. you see a highly liked tweet claiming X, then some reputable newspaper reports X, then someone you personally know and respect says "have you heard that X", and X is also generally consistent with your worldview, it is very hard to reserve judgment.
Good for Huawei. Finally, an affordable alternative to Remarkable.
I'm being blunt (not edgy).

A crime is a crime because a judge says its a crime and setences the criminal, barring natural law.

In the case of war crimes, the judge is the victor, and victor tends to decide their efforts were justified and necessary, while their enemies were unjustified and unnecessary.

If Russia wins, NATO does nothing, who's running the war crime trials? You can't hold those trials without getting an unconditional surrender, and you aren't getting that without a full out war, and you won't see that not escalate into nuclear war.

You want to hold Russia accountable? Then that means NATO needs to get involved and win. Otherwise, it's just words that Putin won't care about, because he won and the world moves on.
The roadblock for nouveau is that the chipset won't allow the clocks to be set to performant frequencies unless the NVIDIA-signed binary firmware blob is uploaded.
Non-anonymous encrypted emails are signed. So anonymous emails from people you don't know could be treated with great suspicion. In practice, widespread email encryption would be an almost complete solution to spam.
He's kind of right though.

And that was a message coming from someone whose family can be assumed to be relatively priveleged. How much cooperation will the draft man be met with in, say, our nation's black ghettos?

Our problem is that our leaders have not fostered the necessary unity to actually prosecute any sort of war that requires "all hands on deck". We can't just say, "they have bad attitudes." (Well, we can, but then we'd be foolish in the extreme to go to war with China over Taiwan. It would be Vietnam all over again.) We have to find out why that guy/gal's family feels dejected, and address those issues. We've made so many people in the US feel like they're not part of the team that it's actually become dangerous as the world enters this new, unprecedented, and more precarious phase.
This is why there should be an annual fee to renew a patent that increases exponentially, with the base proportional to the worth of the individual/company filing the patent at the time of filing.

That ties the duration of a patent directly to how much value it provides to the company over time, which is the rationale for having patents in the first place. A company could only afford to hold onto a patent for as long as it causes the company’s revenue to grow exponentially. Once the patented technology matures and growth plateaus, keeping the patent would become prohibitively expensive.
You are confusing anonymous and pseudonymous. Tor for example can afford you request-level anonymity.
Imagine if we could have runtime characteristics of solid, dsl of hiccup and simple semantics of clojure atoms and refs!
> “Most of the information on this topic is crap.” “What do you mean by that?” Crade demanded. We all looked at him, because in an instant he had become markedly defensive. Sammann raised his eyes from the screen of the jeejah and gazed interestedly at Crade. He let a few moments go by, then responded in a calm and matter-of-fact tone: “Anyone can post information on any topic. The vast majority of what’s on the Reticulum is, therefore, crap. It has to be filtered. The filtering systems are ancient. My people have been improving them, and their interfaces, since the time of the Reconstitution.

We haven't yet reached this degree of sophistication.
I'm 100% guilty of over-using GH actions, although it wouldn't have helped in this case. The issue was GH pages refusing to update the site after I'd pushed the new files to the repo.

Of course, all that would be avoided by just running a web server locally!
This comes up every so often on HN, it's been in development for a while. I do see at least some technical work happening in Taler (https://taler.net/en/news/index.html) so it doesn't look like the project is dead, but I'm having a hard time finding a roadmap.

What is the overall state of Taler today? How close is this to being something tangible that I can hand to my parents where they can actually make real payments with it for an online product? Are there any businesses supporting it as a payment method yet?

I vaguely remember last time I checked that it was still trying to get buy-in from banks? But I could be remembering wrong.
UI development seems determined to repeat every mistake we've made on the backend over the past thirty years, while adamantly refusing to ask us about any of those mistakes.
I worked in React for a few years, although not enough to ever feel like I was an expert. This article resonated with me because I also got off the bus because of React hooks.

I've been using Lit.js for about a year now and something about it just clicks. I just wish it were more mainstream.
The nouveau project need to guarantee that anyone working on the relevant new features to hasn't had access to the Nvidia leak, to make sure the resulting implementation is a clean-room one [1].

[1] https://en.wikipedia.org/wiki/Clean_room_design
Web app: have I shared fake news on Twitter?
I didn't find the word "think" in the article. Did you mean "feels like this looks cooler"? Feeling does appear to be the prevailing way decisions are made and put forward in the community. I think that's a problem. And one that won't be going away anytime soon.
No, and I'm not sure why the article suggests that. Under US copyright law it's best to avoid this like the plague and continue attempting a clean-room implementation.
Agreed, and typescript is essential. I'm still new enough to the patterns used in solid that I can't always tell whether a prop is a value or a signal, but with TS it's trivial.