skysight-inc/HackerNews huggingface dataset:
The TextMetrics thing is so confusing because the docs clearly say that it's supported, but I tried to use it as recently as last year, and it's definitely not working.

edit: getting access to the font bits sounds enticing to me actually, because I'm kind of a masochist :)
>There are many people dying as a result of an unjust war, but I have yet to see evidence of "industrial scale genocide".

Indeed; Russia was expected to completely flatten all major Ukrainian cities by air in the first day of the war. All those clips of angry Ukrainians jeering nervous Russian troops wouldn't exist if the troops simply gunned down all hostile civilians.

This is also why I am reluctant to call the war "genocide" or a "war crime". They are both terms with pretty specific definitions. Not all wars are genocidal. What Putin and Russian troops are doing is bad enough without misrepresenting their actions.
I did not know that, that makes it even more painful.
This is a comment on an article about Go package management, which enforces that packages a versioned with a semver-esque string.
(2012)

(about an event in 1957)
Me too - even joined a Crossfit class but there's not much interaction. Maybe I should try BJJ or a running group...
I don't really see the issue with people writing their passwords down on sticky notes.
I commented several years ago:

It was flamed pretty badly when first introduced to HN, but I still think Steve Howell's Shpaml (http://shpaml.com/) completely removes the pain of writing angle brackets and keeping track of closing tags. Plus, it makes writing arbitrary XML really easy, just the thing for writing DocBook, I'll bet. And no need for a specific editor, just use your favorite.

I should add that you don't have to run Django to use Shpaml, just the Python script itself.
I like Go but Go has made some serious misteps (IMHO), which the author touches on. Dependency management in Go is so incredibly bad it's hard to fathom. Did no one on the early design team ever deal with depenencies? Java is so much better here and came years earlier. Go would've been so much better had they just copied any of the Java options from Day One.

So this versioning thing is just weird and I agree with the author. It's a strange thing to have opinions on and an even stranger opinion to have on that thing.

But the thing that gets me is the whole putting "github.com/username/module" into code is just awful.
Why is it Mon,Tue,Thu? Weird to have flexible Wednesday in the middle.

Why not Tue,Wed,Thu with Monday and Friday flexible?
Its grammar is extremely simple, which effectively neutralizes issues with parsers interpreting it differently or having unexpected behaviour which is in line with spec (like yaml or xml).
Solving self-driving in a select group of cities with permanent 5g connectivity, hi resolution gps, and 30k worth of sensors is a massively easier problem than solving “Tesla fsd”.

For this bet cars can deal with unusual circumstances in all sorts of suboptimal but harmless ways. Pulling over, stopping, going very slowly and cautiously is all allowed. You’ll still get to your destination safely.

I’m with Carmack on this one.
So then the violence, looting, burning, and destruction of property that occurred at the same time and place as the BLM protests are somehow conveniently NOT the BLM protests?
>If I were Putin (a sociopath with no regard for my own safety), I would drop a low yield bomb on Eastern Ukraine.

Given the widespread reports during this war of Russian equipment in poor condition, I've been thinking about this possibility for a while:

* Putin fires tactical atomic weapon at some empty plot of Ukrainian land, and announces it as a "demonstration" of Russian might.

* The weapon is a dud.

I'm not sure whether this outcome might not be worse in the long run, in terms of geopolitical stability, than if the weapon performs as expected!
Hackerone is a joke, anyway. Organizations will just respond with "it's a feature, not a bug" to get out of any bounty. I once reported that you could log on to certain PP accounts with just username and CC number, bypassing configured 2FA, and allowing to wipe the 2FA. Guess the response. Lo and behold, it's fixed now.
agree; when I look at https://www.calculatedriskblog.com/2022/03/friday-february-e... I don’t come to the conclusion that now is the best time.
Why not v0 instead? It's better suited for that purpose.
Yes but ... In my county the census of homeless persons counted only 17% of chronically homeless who primarily attributed their situation to mental health. By comparison half of chronic homelessness was blamed on lack of money, i.e. the cost of housing. Treating their mental health conditions may not solve their overall problem.

https://everyonehome.org/wp-content/uploads/2019/07/2019_HIR...
Not a copy writer, but wanted to highlight the shortcomings of traditional agencies. Also felt compelled to oversell what we do / who we are since I can't showcase most of my portfolio that's tied to existing agencies.

Something to consider though.
> Newsom told the San Francisco Chronicle that there was no more time to debate people’s civil rights when communities were faced with “people with their clothes off defecating and urinating in the middle of the streets, screaming and talking to themselves”.

That's pretty much what I saw when I lived in, and traveled to CA.

IMO: A major contributor to homelessness in CA is the absurd cost of living.
> I would suggest that that is pretty much the definition of being proactive.

So, now we are surveilling people for precrime? The police are able to track your cell phone and put you on watch lists because you protested or are even suspected of protesting? This is authoritarianism plain and simple, a militarized police force way out of scope. Violence is bad, and surveillance is also bad, and we should not treat people as criminals until - and no sooner - they have committed a crime they have been lawfully convicted of.
Third paragraph: "We are announcing today that we will suspend all new sales of Microsoft products and services in Russia."
What American Pundits Get Wrong About Ukraine
It was certainly not created to sell more telephone service. It was a research project that found applications to run on it, most of which had little if anything to do with telephone service at first. Much later UNIX was adapted to run telephone network equipment.
US prisons don't rehabilitate. The numbers have demonstrated this for decades.
why does everyone think this is a pipe dream when waymo has been already offering driverless rides? they were sae level 4 already IIRC.

the key part of the bet is the "in major cities". you may have complications on some road without much data, but major cities will be tested to the inch multiple times by then.

of course waymo has huge sensors but 8 years to shrink those doesn't seem impossible.
The problem here is that much of a union’s work is improving the general work culture and policies to be more labor-friendly. Letting people pay union dues optionally means they get a lot of the benefit of the union without paying for it. Classic free rider problem.
My first thought is, with the current sanctions, how would you pay the remote worker? I can't imagine any company right now thinking it's optimal to hire somebody residing in Russia.
Bypass Paywalls: a browser extension to help bypass paywalls for selected sites
What about Whatsapp and other Meta products?
Sounds like you're involved in this effort, so I'm taking the opportunity to ask...what about the TextMetrics API? It's listed as supported by Chrome, but I remember trying it last year and it's definitely not supported. Has there been progress on that front?
It's food and fun, not sacrifice.
A lot of current news feels very biased, even from sources I previously found unbiased. Fortunately I was recently shared a link to John Mearsheimers 2015 YT video where he very clearly explains what has led to the current situation. In that light I now feel it's a lot easier to filter the news.
Twitter Banned in Russia
(pardon for linking Russian website, the announcement just came 10 minutes ago)
You can walk and chew gum at the same time as the expression goes. I've written to representatives specifically about cutting off arms and intelligence to the Saudi effort in Yemen, and as I said I'm against prosecuting Assange.

However bringing up Afghanistan, Iraq, Syria (where Russia is inflaming the situation too), and Yemen is whataboutism. The discussion was about Russia's shitty record on press freedom.

But if we are trying to dig into the current conflict, the US hasn't invaded anyone for territorial expansion in a long fucking time. Russia has recently invaded Ukraine three times, Chechnya twice, and Georgia.
Because we mostly don't like gods, at least here in CZ.
I recommend a TKL from Aliexpress. Gateron Yellows are fine switches.

(For example - recently I tested a Keydous NJ80 - didn't get used to the layout - but loved the quality. Most mech keyboards are great unless you try the really high end stuff first... I'd say you get what you pay for and around 80-100 USD you can get a good enough keyboard)
I agree - it was abundantly clear Isaac wanted to push the prevailing narrative, had no interest in alternative perspectives, and wanted to score some smartypants points in the process.

Mearsheimer sounded cogent and intelligent, and I think he made some very interesting points.

His article from 2014 seems like it could have been written this week with how prescient it is: https://www.mearsheimer.com/wp-content/uploads/2019/06/Why-t...
> My point is that if it were designed from the ground up with the hard security boundary in mind, would we have ended up with containers in the first place?

Yes. The only difference is the Linux based systems and tools as opposed to Zones or Jails were the first pivot to a developer focused view rather than that of the sysadmin. This utility is why containers gained critical mass, not because the security focused foundations of other implementations was an impediment.
It would be way cheaper and more practical to just to have everyone work from home that can or live close by to where they work or have cities invest in better public transport and biking infrastructure.

Sure none of those are as cool as the JohnnyCab but they already exist so require no R&D.
>> it’s all rural Trumpist counties at this point

Do you have any idea how parochial you sound when you make generalizations in this manner?
And yet they are causing the majority of issues.
It has always been nice to be one of the elites, minus the armored cars and 24/7 security you also need.

What is a wonder to me, is that China, Brazil and most of Asia seem content with being passive bystanders.

Aggressive sanctions applied especially by China would be very effective in ending this conflict.

But i guess you don't sanction one of your own.
So now the deplatformers become the deplatformed.
Fair points. I think the main pain points companies have, that I touch on, are turnaround times, cost and creative ability. I could lay out those ideas in an easier to consume format instead of just large paragraphs though.
Aluminum hangar as a shelter? From artillery?!?

Ukrainians just shelled the area, some shells hit hangar with the plane.

> my understanding is all these paratroopers were shortly eliminated, so it was a huge waste of life all around

Huh?!?

How come Russian TV 1st channel were translating from Gostomel, with display of battlefield, broken hangar, burning An-225, ...? Do you think UA army would allow (only) Russian reporters there?
This left me more confused - there are two cases :

- the typeface is used in media, or otherwise distributed

- the typeface is used locally in some app

Which license supports which case?
> Why can people not just have the browser block stuff if they don't want to be tracked?

Because some information needs to be given for the website to function - you can't block it without losing functionality so you need some way of giving the information while also letting the website know for which purposes it is allowed to use said information.

The GDPR is not limited to just cookies - it covers all personal information, whether IP addresses, browser fingerprints or even manually-entered data (as part of a checkout form for example).

> Why don't they focus on building more private alternatives first before fighting what's there

You can't compete with free. Let's assume that you're running a business in a country where not paying taxes is common - in this case you will either not pay taxes either or go out of business because the non-tax-paying competitors undercut you. You also can't compete with a monopoly.

Fixing the problem by levelling out the playing field will allow paid alternatives to compete.
Oh knowledge panels - that is actually a fair argument. I don’t know much about the topic but your point makes more sense now.
Podman and other container tools are now using user namespaces by default. I think it is clear there are some extra precautions needed, but ultimately the goal with running rootless containers is to improve security.
Ask HN: Education Stipend – What to Spend On?
I have an education stipend. I've had one at previous jobs, but often just let it go to waste. I'd use it on an IRL conference, but given COVID-19, that's off the table for personal reasons.

How do you all spend this benefit or recommend I spend it?
I totally agree. That is the problem . That is why I said:

>A much better solution is simply to enforce laws on the books and set up jails and prisons to do actual rehabilitation
Except, the article says tables aren't supported, right?
You finished your last answer with a question. The question was answered. TFA don't define in which directions the discussions go. We, commenters, do. Feel free to just ignore further comments.
WhatsApp and Instagram are still enabled
Sweden is not a NATO member, and is not a "Western power" (implying some substantial/unusually high military potency). If Sweden were invaded by Russia the West (meaning NATO) might intervene on its behalf, but there is no treaty or law requiring it to do so.
This is a good point, arguably even fixing any bug breaks compatibility, at least if you're a kernel maintainer. An (in)famous Linus quote:

If a change results in user programs breaking, it's a bug in the
kernel. We never EVER blame the user programs.
If the roads between cities are paved and marked, yes. Easy.

No marks and no hard surface: Much more challenging.
An interesting question is how would you test a human driver to determine whether or not they "achieve L5"?
It’s a start at least, and better than nothing! I believe the goal is to push employees towards posting, have other states make similar laws and get to a point where they are more accurate and useable.
RNA: A bundler, server and test runner for modern modules and applications
I can understand where that sentiment comes from, but I think what really killed the playful flash web was accessibility. It's difficult enough to be fully accessible for a normal website; anything out of the ordinary is going to be significantly more difficult.
Crypto Industry’s Sanctions Woes on Full Display in MetaMask’s Venezuela Hiccup
Was the economic structure of USSR the real problem? I thought it was the power structure (dictatorship) and general lack of accountability of management.
Putting words in my mouth. I suggest re-reading what I posted and thinking hard. I'll not respond to this blackmail.
I'd like to delay integration by parts until the third year of the degree in Physics or Math, when the student must learn advanced electromagnetism or partial differential equations. For a degree in Medicine or Architecture it's probably skipable.

I'd use the extra time for more exercises of integration by substitution (but not the weird ones) and to understand what the substitution means and how it works. Integration with substitution is an important topic for all degrees with a mathematical base.
Some quick searching indicates that, unlike what the article suggests, we can compost cardboard at home.
That was 60 years ago... Also still not an invasion but yes, was shitty of the US. I'm not pro-US by any stretch, but I'm in support of anything they do to help Ukraine, where civilians are being directly targeted...

We can talk about failed US policy when Russia isn't bombing apartment blocks and nuclear power plants... Or even their lack of an attempt to stop this war when they apparently knew it was coming...
That is a fun bet, I consider myself WAY more pessimistic about self driving than most people interested in the topic, but 2030 doesn't seem totally implausible to me. I would not be surprised if either person won.
Or key logger
I'm not saying they are Nazi's but many Russians do believe this. Seek to understand their frame of mind...

Every country has more than 0 neo-nazis
I'm so glad that Covid cares about the economy.

I also hate the obsession with in office work. I know for many people there's a social aspect to being in the office, but honestly I don't consider 4 hours of commuting each day to be worth the socializing aspect of in office work.
What Dropbox did for this sort of thing is ideal. You spawn a child process that has two file handles piped to/from the parent - stdin, stdout.

That child process does the scary stuff - parsing. Parsing requires zero system calls. Reading to/from the parent requires only read and write, but not open, so they can only read and write to those file descriptors.

And exit.

That's it. Seccomp v1 is trivial to apply, gives 4 system calls, and makes the process virtually useless to an attacker. If you want to get fancy and allow for multithreading you can use seccomp v2 and create your threadpool before you drop privs, and probably add futex and memmap.

You pay a latency cost but the security win is huge.
…aside from the flooding in both places that will decrease property values dramatically over the next few decades, I guess. Less of a concern if renting and if you don’t mind the prospect of potentially getting all your belongings destroyed at some point in the future.
I'd pay something to use this on my personal machine, but I don't make printed materials, I just like a nice terminal font.

Nor do I much care to use web fonts either, so while its very pretty, I dont know that its 75 dollars worth of pretty.
Waymo still has humans watching remotely and ready to take control, right?
Commercial shiitake kit got mold on second flush, so I buried it in a raised bed. Nothing happened for a couple weeks, so I stopped checking it regularly, but then found a HUGE (unfortunately old) mushroom (and a few normal sized ones) growing from that spot about a month later. I think burying after first flush might be the best way to go - soil manages moisture and gas exchange needs pretty well already.

Excited to try growing stropharia wine caps soon! PNW is great climate for having a bunch of wood chips on top of garden beds anyways :D
Why and How the U.S. Should Stop Financing China’s Bad Actors (2019)
This doesn't seem entirely fair. My right to refuse medical treatment now depends on my housing status?

I live in California and I recently tried to help a friend get mental health treatment. We were refused because they were already at capacity and simply couldn't take on any more people. They even admitted she obviously needed help, but there was nothing they could do.

The obvious solution is to increase funding for public mental health services so they actually have enough resources to help people in need. At the moment, people who want treatment can't even get it, so it's very confusing when the state seems to think forcing treatment upon homeless people and undermining fundamental human rights is some kind of "solution".
L5 is more useful for robotaxis than the general public owning the vehicles directly.

I’m not sure private ownership of L5 would ever even be necessary.
+1 for tap/click, even for mouse user
The strongest predictor for being unhoused isn't mental illness, but rather having any exposure to the foster care system: https://www.fosterfocusmag.com/articles/foster-care-and-home...
> But a computer can be expected to make that decision fast enough

I don't think this expectation is reasonable. It makes sense only if you conceive of humans as flawed computers. But certainly it is an expectation people have, including a large segment (if not majority) of HN readers, and this expectation is absolutely slowing development and adoption of the technology.
Companies like Waymo and Cruise are both working on making L4 scalable to multiple geos and it's going to take a ton of time and money. But L5 is another beast altogether.
i'm kinda shocked how ridiculous the whole situation is

Facebook: publishes propaganda

Russian state media: publishes propaganda

Facebook: blocks Russian state media so they can't publish propaganda

Russian government: blocks Facebook because Russian state media can't publish propaganda and Facebook publishes propaganda
I find nerdle easy. always 23+45=68. (only missing 0,1,7,9,-,*,/) so in one test, touched 8 of the 15 possible characters.
I have to admit, I don't like the limited tries per day thing. I like the move limit, but it's frustrating not being able to finish the thing and have to wait for tomorrow before trying to figure out a better strategy.
Wrong thread? I use tools like that, but they're not the environments, credentials, & threat models (I think) we're talking about.

I'd be curious if/how any data science teams (google/facebook/netflix/...) bake user credential & API secrets into data science notebooks. I've never seen it, but I don't get to see everyone's notebook environments. I have seen 1-2 projects attempting to do DB auth plugins/libs for jupyter notebooks, but not high-grade production ones. Instead, it gets baked into the deeper env (think Tableau, Databricks, ...), vs part of the ipynb.

Notebook security feels like 1990s/2000s browser security and the literal decades of unsafe web apis. DLP and all that is at the forefront in risks, yet most tools just do system auth and maybe a few special connector auth. The real threat model is outside of their system, so it's no surprise analysts & their data orgs fail in practice :(
Overall I really like this, but a five-pointed asterisk? Everyone knows an asterisk should have six points!

Edit: in the datasheet PDF, on page 14, I'm seeing both styles of 7 render the same. ss05 and ss06
It's a neat idea but also an impractical, unrealistic one. This sort of packaging can't be produced quickly like current green alternatives like compressed fiber. A lot of space is needed to let the packaging grow.

Just grow mushrooms for food and make packaging from other green materials.
Robertson's head turning in his grave
These upsides wouldn’t benefit car manufacturers though, since they won’t profit from zoning policy changes.
Google uses Sqlite, which is simply public domain. Did someone at Google actually purchase one of their pseudo-license 'warranty of title' documents they offer for companies (supposedly mostly in other countries that officially don't recognize PD grants) with more legal budget than sense? Google also uses SBCL, which is mostly public domain "in jurisdictions where this is possible, or under the FreeBSD licence where not." Does the entry for it in the list of third party software say Google is using it under the FreeBSD license or PD? (They also employ at least one developer who is a core maintainer on the side.)

The legal department's default answer is "no" to anything they haven't already said "yes" to, so it wouldn't surprise me if your default options are limited. But presumably with useful enough software under other PD-equivalent things they could be forced to say "yes". As an aside I'd be very interested to know the extent of internal audits Google does on its code for legal risks in un-cleared-by-legal dependencies, dependencies-of-dependencies, and presence of code derived from stack overflow/popular books/random places on the internet indexed by google.
Well defined and it also panics in debug mode. Unit tests tend not to catch these sorts of bugs tbh, but still, nice to have :)