skysight-inc/HackerNews huggingface dataset:
Hi, my name is Wasim thoufiq. I’m a frontend developer currently exploring creative and web3 development. I've been working as a freelancer for past 1.5 years. And am currently working on creative technologies such as Three.js, D3.js and GSAP. I have a keen interest on making cool animations and working on web3 field.
If you're looking for a frontend developer who's willing to learn and collaborate effectively or a creative developer to ramp up your landing page, I might be the good fit for you.

Location: Tamil Nadu, India

Remote: Yes, preferred.

Willing to relocate: Not at the moment. But would love to if visa sponsored

Technologies: React.js, Vue.js, Node.js, Flutter, Solidity, Rust, Web3.js, Three.js, Unit testing, JavaScript, TailwindCSS, Styled Components

Resume/CV: https://drive.google.com/file/d/1CFrruXXmDHfdeiN3RV4HFQEjCLWp9B-I/view

GitHub: https://www.github.com/wasimTQ

Email: wasimthoufiq21@gmail.com
What kind of libertarianism? Afaik left-libertarianism is in favour of unions. If it's right-libertarianism you're referencing then can you share some of the "economics science" that promotes it?
The problem is that you don't have control over what third parties are doing here. You may have control over the policies associated with tokens issued by your identity provider, but how do you audit the policies that third party services are applying to their tokens?
How would that be verified? Any information the client sends to the server can be spoofed by another fake client. The stuff which can't be spoofed (say introduced by the network - IP address etc) can changed for legitimate clients (roaming between wifi and 4g for example)

Unless you use something like a "trusted" hardware module the client has no access too (which is mentioned in the article), but the article is still concerned with compromised machines.
Isn't the fundamental difference that a password needs checking against a stored per-user value such as password hash and therefore needs a database lookup, while a token can be validated through just the cryptographic signature and therefore avoids hitting the central database?
Thanks for answering the question bobabob.
>Too bad! They can be voted out, or face lawsuits if a heated attitude is too much for them that they feel the need to ignore valid feedback regardless of the emotions involved.

Only the world doesn't magically grants wishes to Kens and Karens, just because they feel strongly about something and how right they are. The person taking that board to court or trying to vote them out could just as trivially lose.
What right wing alternatives would you recommend?
No. A Mac doesn't make me happy.
Investors expect to make money from their investment, but not necessarily that it keep growing. For instance, investors in commercial real estate expect steady income and some appreciation. They do not expect hockey stick growth. (I'm talking about those buying commercial real estate, not developers).
My wife used my laptop for her work as a teacher, all of a sudden the system forces her to change her password! And I'm like what? That's not Krebs approved! Turns out is was her school's sys admin using some o365 settings (or at least I assume it was.)

I told her to tell her director that this type of control over personal hardware is not acceptable, and this year they got school issued laptops, so that is nice.
Yeah this is what I mean by hitting another home run. I think Amazon has truly successfully done this multiple times. Apple has done this to some extent - although they haven't really gone far past their core expertise. Google and Facebook not as much, they just happen to have businesses with massive total addressable markets that cover for all manner of sins.

But is that even the right thing to be doing? I'd argue Netflix would be doing a hell of a lot more for it's share holders to take the profits from the successful business they've built and hand it back to shareholders, rather than start gambling that money on building new businesses that are unlikely to succeed. This is what's happening right now with Facebook. It's a social media company gambling share holder cash on becoming a completely different business with almost 0% chance of success.
No way. My people leave because they gain skills and go to FAANG or fintech for way more money than we can offer.
What are some of the interesting tradeoffs this language has made? Ideally with super small code samples
I live in one of the busier parts of the Netherlands and have a choice of bike, public transport and car. And also the option to WFH.

Bike maintenance is really low, btw. I might bring it by the bike shop once a year, pay 100 euros and be done with it.
It could be used to tie that logged in user to other web sessions that are currently anonymous.
I find the behavior as implemented entirely unacceptable. My work has Google apps and that caused a Chromebook I was using to immediately jump to managed by the company as soon as I logged in with my work account despite having no intranet/etc and no one intentionally configuring anything. It would never allow me to do regular processes for the chromebook's management even after full resets.

The whole point of a restricted boot environment is to have multi user with proper separation where one user can't accidentally compromise the system. If an org is still unhappy mixing with other accounts or being on user provided hardware they should be able to block that. Stealing hardware and implementing anti-theft rules that should apply to verified org provided hardware on first login is a crime.

Years ago, I debated Chromebooks as a solution for older relatives. Now I shudder to think what would have happened if I had and one of their nieces/nephews or grandkids had something to show them from school.
It's a small sample, but I've worked for two small software houses and one medium sized software company. All these use Google for nearly everything except IM. AFAIK, all my university contacts have went to companies where the story is the same. (Actually the university itself was the only exception, they moved from Exhange to O365 during my studies).

Sad to see it but not much love for Sendmail or Exchange.
Wouldn't you just store it in the same place you're storing the main authentication data (eg. password hashes)?

[edit] I guess that database would get hammered pretty hard on every request, unless you use caching... which might be what you're getting at.
For sure, but then the user assume they know what they are doing. It is to prevent cookie hijacking.
I don't understand the argument here, if you're not issuing the tokens then they're not your responsibility.

Can you give a more fleshed out example, why should you audit third party services?
> FAANG workers are really entering and sometimes fully into "just following orders" territory. The lame social media posts from fellow tech workers about how things "should" be regulated gets tiresome. The real solution is to simply not work for them.

The thing is, Amazon, Walmart and fellow profiteers set up shop precisely where people have not much other choice than to work for them - in short, they set up shop in areas with somewhat decent traffic infrastructure, cheap real estate and lots of unemployment (and the latter two often come together).

So yes, the answer to the problem that is exploitative labor practices is government regulation, as it has been for the last two centuries.
If someone's in a position to exfiltrate the JWT, they're almost certainly in a position to extract all the information they'd need to reproduce the fingerprint. It'd be a short term strategy until attacker tooling caught up.
AsyncSSH: Asynchronous SSH for Python
Society is a collective problem, not an individual one. It's fine for me to turn off Twitter but if suddenly my neighbor starts electing neo-nazis because they've been radicalized by far-right fake content mills on Twitter then we've got a problem.

And this is especially a problem on social media, because everyone sees a different algorithmic feed - which means I might not even know that my neigbour is being slowly radicalized. It's one thing if Tucker Carlson starts praising Putin, we can have a conversation in public about what Carlson thinks and whether Russians committing genocide should be praised. It's out in the open for us to see and discuss. But if Alex Jones' clips are being drip fed into the newsfeed of people without ever facing the scrutiny of public discourse we have a problem. This was very well established by Youtube, and eventually addressed to some extent by youtube.

Do we think Musk is going to have thought this through, or are we going to see more "Move fast break things".
Well, it's been eight years, and development is still going strong!

The developer is currently working on the String implementation for the programming language he invented[2], which he's using to write the other programming language he invented[3], which is eventually going to be used to write the game.

Haha, sorry but was that intentionally snarky or just happened to be?
>yeah, I always wondered why there isn't a standard field in the JWT containing a fingerprint/hash of the client's machine/browser/etc.

Good that you brought it up. That's why I still bake my own verification session system.
>Of course! And this would make it a pointless and futile debate then.

I'm not so sure about that (but then, I would say so, no matter what).

For it to be pointless, something like a "thing having a point" / deeper meaning would have to exist, but none does in a predetermined universe. So, it's not pointless as opposed to pointful, it's in a universe devoid of point-ness altogether.

And in a sense it's not futile: in a deterministic cause/effect universe, having that argument is going to affect all future futures. If that argument didn't happen, the universe would still be deterministic (assuming it is to begin with), but the flow of events concerning the people having the argument and anything they affected would have changed.
The right to free association and the right of the majority (power holders) to repress the minority (employees), yes.

And yes, I am in favor of limiting that. It has been used for many, many abuses through history. "Free association" really only exists when both sides have equal power, and oh boy is that not the case in most cases.
Probably because there were a lot of people either complaining about the state of the restrooms (when people have to literally speed-shit because their lunch breaks are so short and the loos are on the opposite end of the warehouse, they won't clean up skid marks) or that they could not use restrooms at all due to said time constraints.
This summarizes it well. Two more (in fact, the most frequent ones I saw) are:

(1) He moves a piece, accidentally another piece tumbles down on the board, he adjusts it, and meanwhile, one of the opponent's crucial pawns magically disappear.

(2) Same as above, with opponent's pawn (or his pawn) magically moving to a better location for him.
You can hash all that info, so if the user provide the right info (ip, browser string whatever), then the session key would be reconstructed as true.
Hypothetical: I have a Github Enterprise org. Users log in via my identity provider to gain access. Github then issues a long-lived oauth token to the Github Desktop app. An attacker compromises a user's laptop and copies that oauth token. That attacker now has access to all my private repos until I notice and revoke it.
I like how capitalism can boost innovative ideas but I also hate how it's eager to burst them into flames just to jump on the next thing to make more money.

Almost every service I know quickly moves from the "it's cool" phase to the "get this other feature you don't need" phase just to get a 0.6% extra of growth.

So many great services are now packed with ads and useless features that just make the experience worse and filled with annoying bells and whistles.

YouTube and Reddit are just two examples, they're increasingly more annoying to use and if there were decent alternatives in terms of content I'd jump to them in a blink. Instead, for now, I just pretty much stopped using Reddit and go to YouTube only when I truly need, for how much I despise the quantity of ads and smoke they throw at you.
The point is that not only is it impossible to infer the structure of the world from text, deep learning is incapable of learning about or even representing the world.

The reason language makes sense to us is that it triggers the right representations. It does not make sense intrinsically, it's just a sequence of symbols.

Learning about the world requires at least causal inference, modular and compact representations such as programming languages, and much smarter learning algorithms than random search or gradient descent.
I actually took a look at those full resolution pictures. The soldering quality of the Satechi dock was awful. Given the price, I was expecting something much better than that.
Not localstorage. :)

I've seen them in http-only cookies which is sent with every request but not inspectable by js. The server can automatically refresh the token every-so-often transparently without the client even being aware or able to influence it in any way.
There are users. The issue is the service. In DE there are almost no politically incorrect movies on Netflix. The quality of video is bad ( with HD and good internet connection), STNG not available STDS9 available in MPEG1 quality ( though MPEG 1 is sharper) and the sound is just terrible. Why pay for something like this ? And now ads ? So they want more money but the only evolution of the service is from crap to crappier ?
I think it's one of the first industries, if not the first, that has the perfect combination of scalable output from workers, workers being potentially smarter than their bosses, and success being much less about relationships than skills, compared to many other industries.
Seeing as the businesses in the south end have practically died over the last few years - they can redevelop there rather than the park lands. ;)

The park lands and the botanical gardens are an absolute treasure that should be preserved. Dont turn the place into another Melbourne or Sydney.
This post is also me! From time to time such pieces emerge on HN, some examples:

https://news.ycombinator.com/item?id=26269832
https://news.ycombinator.com/item?id=29692087
https://news.ycombinator.com/item?id=25623010

I'm actually also halfway writing one! Two remarks:

- It's really interesting to see strategies, but the overarching themes are often mixed up in a subjective soup. All sentences begin with "I" and this is understandable, but it's harder to grasp this angle. More constructive, one could separate better known general topics like "personal media/memory keeping", "mind/thought mapping/notes", "data hoarding/sorting (for general media)".

- On the other hand I'd also love to read a research/analysis on such articles. What are the general ways on how users approach digital data management, how do people juggle between these topics above? I wonder if a holistic view on this is possible, without the subjective decisions and narrativizing elements. I feel there is a niche between best practices (strategy given a specific scenarios) and personal stories (how I distilled it to my life).
So why would I need to register with unifi at all?
Primarily these types of software's are used for safeguarding purposes. For alerting teaching staff about children who are being abused, bullied or at risk of self harm etc.

I think a better lesson would be here that if you use an account that's not managed by you, it may be used to install software that you disagree with. This is a good lesson for using IT in the workplace. OP shouldn't expect his son's school provided account to maintain privacy when he's using it, because schools have statutory responsibilities to look after the safety of their students.
I wish that most screws and hand screwdriver heads (I have more electronics than mechanical experience) were designed to not slip/strip in the first place. Torx is great, Phillips is not, I hear that there are alternative cross-shaped screw heads which don't strip, and I don't know if they work on Phillips screws or not. Though I don't have expensive hardened screwdrivers, and most products' screws aren't expensive and hardened either.
Tell HN: Facebook content control in the context of the war in Ukraine
Facebook's enforcement of Community Standards is usually inconsistent, which is normal, given that there are different people evaluating reports behind, so controversial content can go both ways. Also, it's an open secret is that Facebook tends to use the cheapest native speakers of a language at best, automatic translation at worst, for evaluating things like hate speech [0]. It isn't too bad for English, as there's way more effort in making it fair, but it breaks down pretty quickly into significant biases for anything else, especially if it's a language spanning multiple countries and ethnic groups.

Speaking several languages and routinely reporting questionable content, I have my fair share of anecdotal evidence in terms of how this causes biases. For example, in French, hate speech is particularly sensitive in terms of racism and Islamophobia, since a significant part of the reviewers are francophone Muslims in Africa, and content can go down for anything slightly critical of immigration or Islam. Similar statements in English are fair game and not taken down. Other languages like Spanish have wildly different vernacular varieties, with differently loaded words and expressions, not always identified as what they are by reviewers from other areas, but on the other hand there are relatively few "false positives".

With that context in mind: the war has made this bias so much worse.

What I've found is the increasingly common content in Russian implicitly (and even explicitly) treating Ukrainians as subhuman and advocating for killing them is seldom taken down as, I guess, most reviewers for Russian content are Russian speakers based in Russia (or other CIS countries). I won't reproduce anything out of respect, but it's stuff that could pass as from the 1930/40s if you swap ethnicities, and would get you instantaneously suspended if you wrote it in English.

Given the current context where any information about the war in Russia is tightly controlled, and the state media straight up justifies violence and ethnic cleansing[1][2], so it's not exactly surprising that reviewers review this way; it's not hate speech when the reviewer agrees with it.

Personally I can't come up with a solution but it's extremely disturbing and concerning to see this every day.

[0] https://thewire.in/tech/facebook-content-moderation-language-gap-abusive-posts

[1] https://twitter.com/TadeuszGiczan/status/1510908227202002947

[2] https://web.archive.org/web/20220404063038/https://ria.ru/20220403/ukraina-1781469605.html
Not to mention “Down and out in Paris and London”. Again, as you say, intensely classist.
I'm sure tptacek will be along shortly to elaborate.

One would think it gets stored in the database, but man all these hashes are so slow to generate. And which library are we using again for that? bcrypt? scrypt? Seems unnecessarily slow. I bet SHA256 is good 'nuff, and way faster.

Lets just meanwhile call the cloud consultant to move this to a separate service.

Have you heard the good word about AWS Cognito? I heard its web scale.

Nah, too expensive, we should just write our own real quick how hard can it be..
So what is the option, actually? TEEs and TPMs which the end-user and device owner/operator/admim have zero control or insight into (or is this also under the scope of the "local enclave"?)

OP doesn't propose any in their opinion better alternatives. I'd argue for (roughly, on the move) client-side keys and cryptographic signing (mutual certs basically) and issuing session certs which could be counter-signed, with a short lifetime, but it sounds like they'd be against that too.

Under ZT, how precisely is one to confidently verify local state otherwise?
There's a lot of value in the ZT paper and movement, but this particular aspect is both spooky and confounding.
I'm on the lookup for TB4 dock myself. Caldigit stuff is out of stock. Stumbled upon this promising cheap alternative https://www.aliexpress.com/item/1005001486390431.html?spm=a2... that is a little north of 100$ and has m2 slot. Not sure if drives dual 5k displays, but it seems it should.
Of course it is. Happens _all the time_ in business that the competition catches up and surpasses.
He does use the word 'guess' for his belief and makes no attempt to put any kind of error bars, confidence interval or lower bounds on that, which seems a bit rhetorically weak.

He also suggests that he broadly agrees with the post he links to and that it gets a lot of ideologically motivated political pushback so this seems like the Ying to his Yang, an example of politically motivated disregard for solid science just going in the opposite direction.
Somatic Evolution
Open source hardware is quite limited so far, what have we got besides 3D printers and drones?

There is no opensource car or house or motorbike, is there? How about an oven, microwave?
>I slightly object to the idea that the East Coast brusqueness should be interpreted as less "nice." If we're mapping "kindness" to "actually solving real problems" and "niceness" to "being polite about things" -- politeness is a cultural idea.

I agree. This was pointed up in a cartoon I saw a bunch of years ago. It had two identical panes of two drivers in their cars.

In the pane entitled L.A., one driver was saying to the other "Have a nice day!" while thinking "Fuck you!"

In the pane entitled New York, that driver was saying "Fuck you!" while thinking "Have a nice day!"

As a native New Yorker, that really resonated. As such, a big "Fuck you!" to everyone! ;)
> Ive had a teenage girl mentionthe series of an example of "how things were".

Hell, there are people who say that about Game of Thrones. Enough for it to be a somewhat regular topic on ACOUP.
I would not have picked there of all places but the quiet nights there would make for a good background of silence to emphasise the flights.

Have you considered Davenport? :D No flights but endless shipping going on.
Not facetious.

Allow me to introduce the Commonwealth Places (Application of Laws) Act 1970 to you. [https://www.legislation.gov.au/Details/C2016C00956]

Section 4 has the effect that (leaving aside taxation laws), "[t]he provisions of the laws of a State as in force at a time (whether before or after the commencement of this Act) apply, or shall be deemed to have applied, in accordance with their tenor, at that time in and in relation to each place in that State that is or was a Commonwealth place at that time" (s 4(1)) - unless the State law already had that application, in which case the State law applied untouched (s 4(3)).

There is also express provision in s 5 concerning the operation of some Commonwealth crimes provisions.

But as a general matter, if smoking is illegal just outside the Commonwealth place, it will be illegal inside it.

eta: oops, I left this open for a while before posting, and just saw others have answered.
You can put that movie straight in the pool room.
I second that. It is pretty inevitable that teenagers get to experiment with alcohol, it is best to do that in a safe environment. My mother told me back then, that if I have to get drunk (and sooner or later one will get, especially when inexperienced and getting carried away), please do that in safety at home.

While one shouldn't exactly encourage drinking, responsible drinking is part of our culture so allowing that for teens at the appropriate age (in Germany 16 and above) at home is the best way to give them the necessary experience and also being able to give advice where needed, as this then isn't a "taboo" topic.
Sustainable service is valued, at the rate of inflation. If you want 20% annual returns over inflation, then you need to provide commensurate growth.