skysight-inc/HackerNews huggingface dataset:
> your oven might smartly switches off and on during baking, to help stabilize the grid

I think you're being needlessly pessimistic. Consider a few points:

1. By the time any "smart" oven is mandated by law technology has probably moved ahead so far of where we are today that all the asinine intricacies people are complaining about have been remedied. Just look at how far wifi has come, only 15 years ago you couldn't imagine an office that could connect to the internet reliably without anything but RJ45 cables.

2. Read the comments on the internet from the 90s or early 2000s about almost anything and see how pessimistic everyone was about the future of new technologies. This is probably even more true of nerds who live on the cutting edge and see things at a closer range but also at a slightly skewed angle.

3. So what? Seatbelt laws induced the same type of reaction initially, but over time people adjusted, and no one even notices the annoying chime every car makes if you start it without putting on your seatbelt first and not to mention giving away your freedom not to wear them because we decided for you it would be in society's best interest to lower the cost of auto insurance. And now not just because it would be illegal not to but also because the societal norms dictate that you wear your seatbelt every single time.
It's typical rhetoric for (what I'm calling) the neo-reactionary movement worldwide. You'll notice they all use the same tactics.

The words are not meant to convey meaning, they are weapons, meant to disrupt you. If other words or the opposite words disrupted you, they would use those. The trick is not to look past the words at the speaker: Why are they saying it? Who does it benefit and how? The words themselves are meaningless; they are wadded up pieces of paper thrown at you; they are as meaningful as text printed on a bullet aimed at you.

So have heart, the people are not crazy. They don't believe those things, they just are tactically saying what is most disruptive to you - which in part is done by making others think they are crazy beyond control or reason.
Yes. In some cases overpaid. That’s how the federal civil service system works. Not sure why that’s offensive…
If there were court orders (i.e. the judicial system was given the opportunity to say no), what else would you call this?

The power of the state is large. It is reined in by some of its own components, but it is foolish to imagine that in a society that is not explicitly anarchist that it would somehow be limited in the way you seem to imagine.
We don't import that much from Russia. It's little enough that finding other sources shouldn't take long. Oil and gas are highly fungible.
> Many big companies have what is basically a MITM attack on SSL. They resign everything between you and the network endpoint using an enterprise certificate. It's still encrypted but at some point it's decrypted, inspected, and then re-encrypted. It's mostly seamless but sometimes you have to get a copy of the certificate to add it to things like pip.

Yes. And this is a good thing (in an enterprise environment) for a couple of reasons (a few others too, but these should make the point):

Proxying connections is inherently more secure
than packet filtering/stateful inspection;

As was pointed out in another comment[0], most
traffic is encrypted these days. Any traffic
traversing the enterprise network needs to be
visible (unencrypted) to network administrators.

This allows them to identify, investigate and,
potentially, block suspicious traffic.

Any large organization (or even smaller ones with the need and the resources) should be able to decrypt and read every packet traversing their internal network and the ingress/egress points to/from that network.

That requires ubiquitous use of proxies for all connections that have an external endpoint.

It's likely that some sensitive internal networks/servers/applications should do so as well.

While that's very intrusive, it's not your home network, nor is it (semi-)public wifi. It's the wholly owned property (I'm not addressing "cloud-based" resources here -- that's a different long discussion) of that organization.

As such, they have every right to read every packet on their network and every byte on their storage.

Which is why many organizations have "guest" networks which not only has no access to internal resources, but also only allows connections to external networks and bypasses all the proxies/firewalls as well.

This allows employees, contractors and others to maintain their privacy on their own devices without impacting the security of the internal network.

Of course, this requires device authentication at the network layer (e.g., 802.1x) to ensure that only authorized devices are permitted access to the internal network.

None of the above is particularly new or particularly controversial.

[0] https://news.ycombinator.com/item?id=30574794
I was expecting a much much faster site. Instead I thought the site was really slow. StackOverflow manages sub 20ms response on nearly all pages time with zero caching. While I dont expect Ruby Rails to ever achieve that performance, 500ms response time is just painful. The bar needs to be far higher. Even for non-caching web site. ( May be I got too used to HN's speed )
Can you elaborate more on the firewall perspective? Your description makes it sound like for a three tier webapp[0], the entire pdf is suggesting to put a firewall around the presentation layer to limit it to appropriate sources, then the application tier to limit to appropriate sources, then the data tier to appropriate sources, etc.

While that should be done, and they are suggesting that, I feel like that's only covering section 2 at best. This doc isn't about adding other similar walls, it's reducing attack surface, limiting blast radius, and encouraging industry standards such as defense in depth, least privilege, and some elements of supply chain security. Your comment suggests you know that, but the PDF states many other things that have nothing to do with firewalls or differentiating good traffic from bad traffic.

My take on it is I see this document more as a source to point at internally at the NSA for best practices or a minimum bar to meet, not the best that the industry or the NSA has to offer. Even then, I'd assume that some organization externally will use this to say they aren't "up to the NSAs standards", and push for changes to fix their practices.

If it means that more folks learn of common practices in the industry and increase their security as a result, I'm all for folks sharing these practices, whether it's the NSA sharing it or a private organization.

[0] - https://www.ibm.com/cloud/learn/three-tier-architecture
It'd be interesting to have a reference for the kind of wine mentioned in the book: wines in antiquity were much thicker and sweeter than modern wines, and were usually diluted with water and flavored with herbs before drinking.

That doesn't explain the sugar, though!
The rest of the world does and thus the price of oil will go up for everyone.
Hmm... commentor raises concern that string manipulation dressed up as prepared statements is potentially a source of SQL injection vulnerabilities. Maintainer dismisses concern as "FUD". Eight years later, article is posted showing an exploitable SQL injection vulnerability.

I'm thinking they should have listened rather than getting defensive.
Oh, you have the 365 in the numerator instead of the denominator. That would do it. :-)
i am using it for four months. its configuration is really complicated and many default values do not make sense.
for instance when you are using solo there should be a default hard task timeout smaller than effective heartbeat value otherwise it will fail and retry the same task forever.
Grepping and replacing import paths isn't a good tool for finding subtle behavior changes. Especially in big projects.
I wish I had a good source, but from what I've seen firsthand (well, by following the Japanese car community and having friends in it) there's a pretty large export market for stolen cars. Either the full car is exported or people literally chop off things like front bumpers for popular cars, remove special limited parts, etc.

There's probably some Japanese car website with actual numbers, but it can be unnerving when some of these are caught, and more so when I see new ones being reported.

one relevant news article: https://jalopnik.com/facebook-group-catches-american-shop-th...
Steve Baer (Zomes, Nightwall, and many other inventions) noted in his book "Sunspots" that:

* if a person replaces a solar powered drying technology like a clothes line or rack with a fuel-powered dryer, the GDP and/or other similar measures of economic health improve

* if a person replaces a fuel-powered dryer with a solar powered dryer like a clothes line or rack, the same measures apparently get worse

His conclusion (in the 1970s/early 1980s) was these measures are clearly fucked.
The thing is lots of people actually actively pursuing such so called smart devices, I personally know a few. They feels so good that they can control things from remote on their phones. For those people, they would happily connect their oven to WIFI for sure. And some self-claimed smart product managers will of course take a step further by making WIFI connection mandatory: you are going to need to connect them to network anyway!

We need to have laws in place to prevent such trend going further. It's super easy for vendors to put BS in but extremely hard if not totally impossible for ordinary users to disable or circumvent.
In case anyone was confused like me about what Shiny is: “ Shiny is an R package that makes it easy to build interactive web apps straight from R. You can host standalone apps on a webpage or embed them in R Markdown documents or build dashboards. You can also extend your Shiny apps with CSS themes, htmlwidgets, and JavaScript actions.” [0]

[0] https://shiny.rstudio.com/
When are we going to stop pretending that mass transit is politically (or even physically) viable in the vast majority of the US landmass?
My less than one year old brand new LG washer dryer has a perfectly functional set of buttons to configure it, but it will not allow me to do so without connecting to their app on my phone over Bluetooth and giving them permission to read my web browsing history.

These machines were over $1000 and they changed the terms on the app a week after we bought it. Not that we'd ever connect it to our phones anyway.

I, for instance, cannot tell it to dry on low heat for a long time until it's actually dry. It is impossible to configure it manually, it beggars belief.

And of course they know full well how much of a nightmare it is to return appliances that heavy and expensive, so it's always a surprise. Why would I even think to look for such a ridiculous anti-feature? I'm not creative enough to think of these regressions since the 90s, what's next, I can't turn it on at all without a face id? The features have barely even changed in that time...

Same with my new television that wanted me to agree to terms and conditions after spending over an hour mounting it on a wall. They seriously weaponize the inconvenience of returning these things... thankfully I had an extra computer to connect to it instead but most people don't.

I think a regulation on appliances saying they must have all features that are standard or advertised available with no extra steps is a good start. Yeah, this person has an issue with builder kickbacks too, but the core issue is hardly limited to new construction or contractors.
Unrelated, but love that I can infer how you pronounce SQL by the title of this post
I'm not sure I entirely follow your comment, however I was merely pointing out that reckoning with parameter uncertainty by "computing or approximating the posterior...", as you said, is not always applicable in probabilistic ML.
Yes, I've always thought it was only a matter before this eventually happened. I completely understand why they would want to scramble to prevent that.

The point made by the discord.py creator elsewhere is true: this is more likely to happen with invisible self-bots than bot-bots. But it would be far more catastrophic if it happened with an actual bot, since lots of small, private servers and channels make use of those. It's the difference between leaking things most everyone involved kind of already knew they were broadcasting publicly vs. potentially leaking enormous amounts of data that everyone involved assumed would be private because they didn't consider the scenario of a popular bot secretly spying on them.

This is one of those counterfactual scenarios where everyone would be furious at Discord if this happened and they didn't take steps to prevent it. And frankly, it seems quite possible it already has happened but the bot owner has just been using the data for some nefarious intelligence or profit purpose and has no intentions of burning their trick by leaking anything.
After you grind in the kitchen on 100 hot chocolates and 50 bags of popcorn, you have enough XP to level up. The software developers just forgot to lock out that feature. Personally I’d rather morph into an air fryer.
Several years ago, I wrote a Greasemonkey script to do this. I haven't used it in years, and am not sure if there's an alternative for Brave browser (my new standard).

It basically looked for all the "a" elements in the DOM and:

1. Set the href to call a JavaScript void

2. Set the element style's text-decoration to none

3. Set the element style's background color to #f3f315
Yes. Zemax, CodeV, and other optical design software is fundamentally optimization as a design strategy.
Ask HN: How to Persist Assets?
Every time I spin up a new project, I am confronted with the challenge of persisting its assets – audio files, iconography, artwork, video, strategic writings, etc. Where does everyone store these potentially high-value resources?
If IPv6 reputation is done at the /48 level but you have, say, a /56 then you're sharing reputation with up to 255 other customers.
> I hope to God you are not creating production systems anywhere.

Good luck building production systems without compromises.

Also, I think everyone would appreciate it if you didn’t hurl personal insults about. This aint Reddit.
Unfortunately for Russia, if it does need to significantly dip into it's gold reserves it is likely to crash that market. I think China will get to negotiate a sweet discount to convert it to Yuan, if for no other reason than China seems to be the only place the gold can be laundered at the moment. I think I heard about $US 180bn worth?
Trailing commas have only been allowed in Javascript object literals since ECMAScript 5 in 2009 — JSON dates from 2001.

Re comments, Crockford said: "I removed comments from JSON because I saw people were using them to hold parsing directives, a practice which would have destroyed interoperability." See: https://archive.ph/20150704102718/https://plus.google.com/+D...
You have this half-backwards: Arizona, California, Colorado, Florida, Hawaii, Illinois, Indiana, Louisiana, Maine, Maryland, Massachusetts, Nevada, New Mexico, North Carolina, Oregon, Texas, Vermont, Virginia and Wisconsin - these states all have "right to dry" laws.

> Now, amidst growing concern about wasteful energy use, clothesline proponents argue that the traditional method of drying laundry is not only cheaper but better for the environment. Lawmakers in some 19 states have agreed, enacting “right to dry” laws that prohibit clothesline bans,

> The exact nature of “right to dry” laws varies from state to state—while some prohibit clothesline bans directly, others recognize a right to use solar power that implicitly may preclude those in authority from preventing a homeowner from drying laundry in the sun.

https://www.abajournal.com/news/article/20_right_to_dry_stat...
Hey, have you considered https://www.e-resident.gov.ee/ can be an option to receive money outside Russian bank system.

My friend in Georgia (Russian) told me that while TBC refuse to open accounts, Bank of Georgia still do. Also seems like leading party pushing against this discrimination.

Situation may change fast (already?) so check Bank of Georgia asap.
> Oil and gas are highly fungible.

Crude oil isn't completely fungible. Refineries are built to handle specific grades.
> What guarantees do I have that they won't just up and leave again?

None. It's open source.
Downloading the resulting files is a really strong argument against the original "dash encoding" as proposed, because if I try to download the example /legislators/legislator_terms-/1.json path I'll end up with a file named `1.json` on my filesystem even though I'm download the file corresponding to the whole `legislator_terms/1` table. Or perhaps if I fetch a URL for the table `foo.json` and I don't add my own extension, I'll be viewing a URL ending in the component `foo-.json` even though it's not JSON data.

Percent-encoding really would be the right solution here if only middleware would leave it alone instead of decoding and re-encoding it. In the absence of that, whatever encoding scheme is used must ensure the results do not leave any slashes or periods in the resulting string. As you've pointed out, other encodings (using the base dash character) can still preserve lexicographic ordering so there seems to be no reason to retain the actual period and slash characters.
https://en.wikipedia.org/wiki/Mir_(payment_system)

Lots of them are co-branded with UnionPay.
Get a Niagara. 0.8 gallons per flush. Best flushing toilet I have ever used in my life, at any gallon per flush level. Sustainable/conserving doesn't have to suck.
> That means all source code reformatting actions which do not change the meaning of the source code also do not appear in the diff.

The method I described does exactly that. Most modern formatting tools parse code into an AST then rewrite it based formatting rules. So as long as you format both files to the same rules before diffing, only AST changes will show up.
Task queue pattern is not unique to python.

Consider where you see physical queues of people in real world: e.g. people lining up to be served at supermarket, to board aircraft, to enter a concert. The purpose of the queue is an orderly way to manage situations where there is more demand for a service than can be immediately processed. If the system tries to serve all the demand simultaneously, perhaps that leads to chaos and no one getting served.

Similar situations happen in computer systems, in some of those cases queues can be used to manage load.

E.g. When you make a purchase to order something online, there is a good chance there is a task queue or something very similar as part of the machinery helping that to happen. When you click "purchase" your order or request is persisted in some queue or DB, before any attempt is made to fulfill it. The UI can give you immediate feedback telling you that your order was received, here's your order ID, sit back and relax, we'll send you an update. When some machine (or person) is available with free capacity, and no higher priority orders to process, they will grab your order and start processing it.

Some worker queue implementations offer additional benefits in terms of increasing robustness of system. e.g. if worker node A begins processing task T, then worker node A explodes before T is complete, the task T may be returned to the queue after some timeout, and surviving worker B may be able to grab T and process it successfully. This can be very valuable in situations where you want to guarantee that task T is done correctly and not half-done or forgotten -- e.g. processing and provisioning customer orders. This gets considerably more challenging to implement correctly if task T involves performing side effects and modifying the state of the real world (transferring money, dispatching vehicles) and the failure occurs after some but not all of the side effects have already happened.

Queues introduce new failure modes: if something stops workers from processing tasks, and queue gets longer and longer, how do you find out and fix it? Queue needs to be stored somewhere, there is some max capacity, what happens when that is exceeded -- does the queue give up and drop all the tasks on the floor, or explode, or so on.
I don't think you're wrong in general principle, but...

> The fix is to make news the forth estate officially

It's difficult for me to see how formally establishing the main-stream media as a branch of government would do anything to improve the credibility of the news.
The traditional word for those is "files" and traditionally the system for persisting files is called a "filesystem". Several of them are available; I typically use ext4fs and, for compatibility with the guy down the street who prints them out on paper for me, VFAT. Git can be helpful for synchronizing them between computers, keeping backups, and tracking changes in them, though you might want to use something like git-annex for large files like video. If you're not using Git, rsync and http are also effective ways of copying them around; tar or zip can streamline this sometimes.

With respect to terminology, I think you're counting those on the wrong side of the ledger; I think they're liabilities, not assets.
Spotify made a cowardly choice: to submit to the Kremlin
At some point I should really revisit and see how good it’s gotten.
HDF5 has such an odd license. What's up with that?
There are no doubt companies that fall into this category.

But to lump all office-bound companies by this metric is to miss the nuance and deliberation that (in many companies) goes into this decision.

There are upsides to remote work (mostly, but not exclusively for the employee) and upsides to office work (mostly but not exclusively to the employer) and most companies are somewhere along that spectrum.
Yeah, but we could also recognise trees 200 years ago
>so I suspect we’ll see those modems in more apple gear this year.

In more Apple gear seems to implies there are Apple gear which already uses their own Mode. Which is not true. The 2nd thing it is highly unlikely Apple will have their modem in iPhone, or any devices this year.
Your (2) source does not match what you said. The Ukraine did no lie about the planes, the EU did:

> The three nations were said to be forming the core of the EU effort—announced Monday by EU foreign policy chief Josep Borrell—as they are believed to be the only bloc members with flight-ready Russian-made aircraft.

I’m hesitant to read your other sources now
Countries like bolivia, and other countries that slap very large (>50%) import duties on foreign-made cars, have a very funny side-effect.

Every 4 years it seems there is a model or brand that is cool, and that every elite seems to be driving. Is that the cool new car? The "in" brand. No. The cause is simple. Its 101 economics:

Import duties are usually managed on a country-by-country basis. Politicians will manage capital flight ("trade imbalance") by seeking higher levies on heavy industrial goods that are popular, like cars. Those levies lead to a situation where everyone seems to be driving the exact same brand new cars (and usually 1 particular make). However, its not that the brand is particularly popular, its only that the car maker offers the best value net of import duties, plus, importers are very wary of bringing cars with huge import fees.

So, the newer cars are always a few specific never-seen brands or makes. Then there are others driving slightly-older Y brand cars, far more generic. The oldest cars seem to have a lot of diversity and would resemble your average US used car sales lot.

The evolution of the duties can then be described as follows:
1) free market: very low cost to import any car
2) Some tough -but not insane- duties (particularly on US new cars).
3) Restriction / heavy levies on used car imports.
3) Very heavy import duties on most western new cars (vs Indian or Chinese makes).
Now I have the idea of a kitchen vice hmmmmm