skysight-inc/HackerNews huggingface dataset:
Taylor could have published an article about the alleged harm the account is doing.

Taylor perhaps could have even doxxed the account if the writer was in fact a public figure: that would be newsworthy.

Taylor doxxing the identity of what turns out to be a completely unknown private citizen is not newsworthy; it adds nothing of value to the story, other than allowing this person to be harassed and intimidated for her views and actions.

Her decrying her own harassment, while enabling the harassment of others, is pure hypocrisy.
Can you point to another article that explains all that? Or do you have some unique knowledge of the situation?

Not saying you’re wrong but we need a better article if this one is incorrect.
And it becomes super annoying when you can't paste into the second field. Had to implement this once - should have rage quit immediately.
Java 15-18 ECDSA doesn’t sanity check random; breaks JWTs etc.
If they do they are going to lose massively subscribers.
So does sending the verification email, so it's a wash. Thinking about implementing email validation + verification is a great opportunity for developers to do two things:

1) Consider if you really even need to verify that email address. Why are you collecting email in the first place, why do you need it? HN is a great example of this - email totally optional, if you forget your password it's on you. Lot of online services going in the wrong direction with requiring a phone number.

2) Trust the user. Okay to give them nice nudges ("you probably meant gmail.com and not gmail.co") but if I really did mean gmail.co, let me through if I insist.

Don't throw up a garbled mess of a Regex[0] that only serves to frustrate me when I try to sign up with my vanity email. I'll abandon the sign-up entirely.

[0]: https://stackoverflow.com/questions/20771794/mailrfc822addre...
For that matter, I'll believe "guys" is gender neutral when I start hearing straight men talk about all the guys they've dated.
Pretending to be race blind just means giving racists free rein. "I don't see race therefore no racism could have occurred."
Mods on reddit have dictatorial status on their subs (within reason). However anyone is free to start a new sub to be more open than the one they are banned/shadow-banned in. If the topic is important enough people will move there.
I once suddenly couldn't log in to a paid bike renting service app because it wouldn't accept my (valid at sign-up) email on login as it had a '+' symbol. There was basically no way to contact the developers and it was impossible to get the support people to understand what my problem was so I literally never used the service again. Don't try to parse email with regex, it's just not worth it.
They are getting onboard with open chip design, because they need to get onboard with open chip design, and borrow to even be competitive and survive. You only get to use the black rocket when you're not in the lead.
There's no such thing as plain text
This was submitted before, but I think it really deserves some attention. Dylan gives a boatload of context to how and why UTF-8 came along, and how/why he learned about it. Watch this, and you'll understand so much more about text encodings.
This is horrible advice. If you don't check input for correctness at all, an attacker could inject all kinds of nastyness into am underlying system, which may expose bugs.

For example, control characters, line breaks, shell escape characters, SQL injections, or simply uploading an ISO image into the E-mail field.

There is the RFC, and there is what we would nowadays consider a sane E-mail address. Nobody has addresses with spaces, nor does anyone have an address with an IP literal in it. Why? Because no other system will accept it. Think bank, etc.

TL;DR at the very least you need to validate field length, control characters, quote signs, and backslashes. Those have no business being in am e-mail address.
> Project Censored and Boing Boing have been reporting on this horrific situation that is unfolding in the African country:

Uh, Project Censored and Boing Boing? I'm not finding any reporting on this purported nuclear waste dumping in Somalia. I'm seeing reports of toxic waste, but not nuclear waste.

Furthermore, The USSR and United Kingdom both dumped massive amounts of nuclear waste into the Arctic and Atlantic oceans respectively [1]. There are no observed adverse effects of this.

1. https://en.wikipedia.org/wiki/Ocean_disposal_of_radioactive_...
The DMCA is very very tame compared to the new EU copyright rules though. By an order of magnitude imo.
That's very unspecific, but in a "you seem to be thinking of something specific" way.

I'm not sure what your point is, most people who watch Libs of Tik Tok also seem completely fine with that. I didn't say humans are not biased, in fact I said they're too biased.
Do we have a long term solution for all the toxic waste that coal power plants are blowing into the air and the radioactive ashes that remain?
Nuclear waste seems like a tiny problem to me in comparison.

Also, people seem to be more interested in nuclear waste than in coal waste, so I expect more sophisticated solutions.
I think you are illustrating my point, thanks. Gas engines are surely but slowly being replaced with much better, cleaner, and more efficient alternatives. Wall socket formats are there to stay but increasingly low DC loads are coalescing around USB, with USB-C really accelerating the change.

So yes, we can overcome inertia, it just take a lot of energy.
Mismanagement, raising prices, shit shows, leaving Russia, turning shows political. It just turns people off Netflix. I used to subscribe to Netflix a decade or so ago. Played Netflix on a PS3 on a TV for my mother and father to watch movies. The PS3 crapped out and I called technical help, which told me to use my PC instead. PC was not hooked up to the TV only the PS3 was. My father had a bad time missing movies and when he died I felt like Netflix betrayed me with bad PS3 software.
If you bothered to look at it you'd see it doesn't just repost the videos.
It frames them in a very negative way.
It's also very popular if you look at the amount of activity under every post.
The worst part is Fox News routinely use them (a Twitter account, mind you) as the source for their news pieces.
<img src="stoppedreadingthere.jpg">
Except, designers tend to create the PC version first to iterate over the intial design, so not sure how one goes to develop mobile first for this case.
That's fantastic, and it's UI seems very efficient. Thank you!
Here’s the regex you should use:

.+@.+\..+

Works every time 100% of the time.
Other snippets that have been accumulating over time suggest you are correct about the algorithm(s) being relatively simple.

First hand accounts suggest they are for the most part using simple linear regression; see this comment from a few years ago: https://news.ycombinator.com/item?id=19065226
China’s demographic crisis sparks renewed calls to lower world’s marriage age
RFCs for email addresses are cool, but on the web we have our own standards!

https://html.spec.whatwg.org/multipage/input.html#valid-e-ma...

"This requirement is a willful violation of RFC 5322, which defines a syntax for email addresses that is simultaneously too strict (before the "@" character), too vague (after the "@" character), and too lax (allowing comments, whitespace characters, and quoted strings in manners unfamiliar to most users) to be of practical use here."

The regex is:

/^[a-zA-Z0-9.!#$%&'*+\/=?^_`{|}~-]+@[a-zA-Z0-9](?:[a-zA-Z0-9-]{0,61}[a-zA-Z0-9])?(?:\.[a-zA-Z0-9](?:[a-zA-Z0-9-]{0,61}[a-zA-Z0-9])?)*$/

Every browser implements this regex for <input type="email">.

Chromium:

https://source.chromium.org/chromium/chromium/src/+/main:thi...

WebKit:

https://github.com/WebKit/WebKit/blob/0d7afc5a45c140c44497a8...

Yes, do verify email addresses by sending a confirmation link if you bind users to their email addresses, though. Don't confuse validation with verification.
That’s why I still use Perl CGI scripts. They just render.
I tell everyone the same thing about access control. Don't check access.

Also, never check file existence.

These things just take up time, introduce race conditions, and can't be trusted anyway.

That said, there are reasons to want to check some things with UI-level validation because calls to a slow back end are slow. Thus the name. I get that.

So if you're doing UI validation, don't get it right. Just get it mostly right. And do it fast. Cheat!
I recently had a requirement to transform email addresses within free text into clickable mailto: links. That needs a regex.

/[^ ]+@[^ ]+/ is OK except for trailing punctuation, double @'s, and it definitely doesn't work with that quoted example. The first Rails one in this post /\A[^@]+@([^@\.]+\.)+[^@\.]+\z/ is at least better than what I came up with - I'll take a battle-tested regex if it's on offer.
you could check some common PGP keyservers for a key corresponding to the email address. if it isn't uploaded, treat the email as unverified and untrusted.

daydreams about strong cryptography
There's no need for this sort of snarky trolling.

Systemic discrimination against Black Americans both historically and today is well documented and understood. I could have written a long preamble about the many elements of society that factor into racial disparities, but I assumed I could skip that for brevity since everyone on HN is already well aware.

You need to look at this data with an intersectional perspective. An overly generalized label of just "Black" as an identifier does little to help and may actively mislead in certain situations. Considering multiple attributes- race, educational attainment, location, industry, job function, seniority, etc is critical because the intersection of these may cause dramatically different experiences.

Consider this example to maybe make it clear. Imagine a gay man pursuing a career as a Broadway dancer versus a gay man pursuing a career as an elementary school teacher in Alabama. Will being gay have the same risks and challenges for each man? Is it fair or useful to try to group their experiences into one "score" for if that attribute is an advantage or disadvantage?
Global population is crashing, soaring and moving
I was reading a thread this morning that categorized programming languages into "lisps" and "fortrans" based on how much you were directing an abstract machine vs a real hardware machine and I think this is a similar idea
Companies that use Node.js include the following:

LinkedIn
Netflix
Uber
Trello
PayPal
NASA
eBay
Medium
Groupon
Walmart
Mozilla
GoDaddy

https://trio.dev/blog/companies-use-node-js
> The author's discussion is focused on media consolidation and the slow death of local news, not Big Tech's control over what people consume.

The HN title should at least be representative of the content.
260 a year is a lot since a single there is a huge pool of candidates, and you really just need 1 of them to fill a position. in my experience, the pendulum has swung towards the candidates having leverage and ghosting. 2008 and even 2013 did not seem so.
What's wrong with a username and password?
London is a bit of a disgrace with only 3 jobs, is this website complete, although looking at European cities, Europe looks a bit of a disgrace seeing that Australia is not far behind with opportunities and there is a lot of money in the US.
> there’s only so many vacation homes and short term rentals you can sell)

There are many markets the the number you can sell far exceeds the available land to build.

I fail to see how lower demand for high end housing makes it more economical to build mid-range housing? The price for that housing will be lower and land to buiody it on will be taken up by lower density high end housing.

High end housing construction is better than no construction, but please don't pretend it is sufficient to solve the need for other types of construction.
It’s still euphemistic and you know it.
*Flyswat*
It’s concerning that my thinking is compartmentalized enough, that although I consider myself acutely aware of media consolidation, it didn’t enter my hypotheses.

By “roofies” do you mean Haldol? Or is there another one. I think there’d be a scandal if people truly understood from first-hand experience what that abomination does to a human being.
> No one is going to touch GPL code with a ten foot pole if it gives the entire public standing to sue you.

Then just... actually follow the license? The only way for it to be a problem is if you're using GPL code and not releasing it under the GPL; the only change is who can try and force you to actually follow the license, not the actual exposure.

(IANAL, but to the best of my amateur knowledge this isn't particularly complex or controversial)
The point is making cringe compilations (figuratively speaking) to create distorted selective images is literally among the MOs of WaPo and the like. Libs of TikTok is a more extreme, less disguised and closer to home version of that.
Looks like yet another opinionated web library/framework.
No, there are plenty of zero sum games with perfect information that aren’t np-hard (eg tic tac toe).
Yes, of course. Because definable (really, computable) numbers don’t really “exist” either.
State known for being racist fights tooth and nail against ~falsely imprisoned~ framed black person. Brace yourself for mental gymnastics.

I'm not really sure what there is to discuss here. How thin the veil is? The legalities involved in sending a debt from the state to collections?
Haha I like the other poster dude's suggestion of just letting it through if you see an @ symbol. Wouldn't yours work with potentially too many weird character sets? probably language/runtime dependent
Has it happened to me? Nope, did it happen to a co-worker, yes it did. Luckily they all worked it out and my friend didn't get fired.
From the interview linked in my other comment here, they’re not likely doing anything particularly special. relevant quotes:

> Now we have some of the smartest people around, working in our hedge fund, we have string theorists we recruited from Harvard, and they're doing simple regression.

> the smarter you are the less likely you are to make a stupid mistake. And that's why I think you often need smart people who appear to be doing something technically very easy

> we had 7 Phd's just cleaning data and organizing the databases
If only browsers had a public/private keychain built in to sign and encrypt messages. Authenticating = sign a message with your private key.
"Partly" because the more substantial problem is garden-variety corruption, a problem for all big reactor projects in the US.
Yes, it is.

Sorry if you can’t read deeply into it or something. I’m not posting for grad students. I can sense you just like to correct people. Ahhhh I’m so wrong, you’re right?
not secure enough, prone to easy abuse/workarounds.
Where Google Maps has a dedicated way of providing corrections, you can get things fixed quickly.

Where it doesn’t, and you have to use a more generic feedback form, my experience is that it never gets corrected. Zero times out of perhaps a dozen that I’ve tried, for several different types of errors (misplaced town markers, a missing consonant in the Bengali spelling of a road name, can’t remember what else off the top of my head). I just don’t bother now. Most seem to get fixed some years down the line, probably incidentally as part of some other more generic data or processing algorithm update. The only time I’ve had any sort of prompt success was when I reported something on a Google Maps-related HN thread: https://news.ycombinator.com/item?id=23367961. The fix in that instance was evidently done as a one-off exception, but looking at a few places in Google Maps now, I think the underlying systemic issue is finally fixed (for now).
It seams that HackerRank has about 27 DMCA take-downs on GitHub. See https://github.com/github/dmca/search?q=HackerRank
I'm already on the verge of cancelling Netflix because frankly, their library sucks. I cannot even remember the last time I saw a remotely entertaining original movie, of the hundreds they have. Their shows are a little better, but too few and far between. Seems they've been hedging a lot on poorly dubbed foreign films, again, don't watch.

So yeah, showing even a single ad is just the fire I need to remember to cancel.
I recently launched a webpage without validation on the email field. 90% of the rows created in the database were not emails.

I understand the point about not maintaining complex regex, but I just used an npm package that maintains and updates validation regexs with web standards. Besides any remaining left-pad jokes still standing, I don’t see why I would eschew this solution for any future forms?
Coal is on its way out, so it is not a meaningful standard for comparison.
Medical Doctor?
Saying nobody needs it is like saying who needs more than 640k of ram. Use cases are already there in AR/VR, and additional will follow as the technology becomes available.
If you think surviving a nuclear war is worthwhile, you should watch Threads. It's an all too realistic portrayal of the aftermath of a nuclear exchange.

https://archive.org/details/threads_201712
A great idea and article needing some LaTex formatting
> If you bothered to look at it you'd see it doesn't just repost the videos. It frames them in a very negative way.

Are they or are they not copies of content posted by the original authors of them speaking in their own words about topics they chose?

If I film a video of myself in a furry costume espousing the virtues of the red army and post it for all the world to see I can’t complain when I end up on someone’s cringe compilation.

Taking a step back, listen to what you’re saying. In essence, it’s just that we devote the resources of national media orgs to unmasking pseudonymous social media users who don’t… _frame_ things in ways the establishment would like?

>Fox News

Who cares about them?
I agree with the Next.js people in that thread

SPA+SSR has never been easier, and my experience (as of this year) is that its as easy as static websites. Even easier in some cases with making the CSS easier while all the bundles and optimizers to make builds are hidden.

I think people need to rethink how they design their websites and complete concept of a viable business.

I get the sentiment of the absurdity off web development but its successfully been abstracted away if you keep your app and idea simple. If you’re still doing gigantic web 2.0 apps with hundreds of views, microservices everywhere and API calls going every which way, thats the problem. The stack for those is ridiculous and not even necessary anymore. You can drive [hundreds of] millions of revenue without any of that these days, without even a user account flow or state management, the market is trying to tell you something.
The information is voluntary. Individuals can submit a census with their race/ethnicity as "Prefer not to specify"

The data can be used to help find if people are getting proper representation, etc. Racism is rooted in superiority. This is more like, race-consciousness, which is rooted in humane treatment and empathy
The people who decide these things (journalists, I guess?) have ordained that “Black” should be capitalized while “white” should not. And I hate that I’ve told you this because I’m not a fan of the asymmetry, and you quite likely don’t care (I don’t blame you if you don’t!), but I suppose it’s exactly the sort of thing that Google Docs now warns about.
Or more likely, crypto has found yet another morally repugnant use.

The CC companies withdrew from PornHub because their business model was paying for the production of child pornography.

Crypto pops up its ugly head yet again. Not a coincidence given the other "killer apps" are extortion, money laundering and greater fool farming.
I use pop!_os 22.04 beta with wayland and fractional scaling 125%. Some software needs to be told to use wayland stuff, but otherwise it is sharp as a tack.

For instance: MOZ_ENABLE_WAYLAND=1 firefox
Previous discussion of a similar tool:
https://news.ycombinator.com/item?id=30024165

I'll reiterate what I said there: I think there's a legal angle here that should probably be sorted out by lawyers & forensics experts before something like this goes into widespread use or gets marketed at professional scale.

The law sometimes requires certain documents to be "in writing" and there is, unfortunately, a legal tradition tied to this that "in writing" means "physically on paper", which lawmakers and bureaucrats unfortunately haven't managed to properly transition into the digital age.

However something that is quite a separate matter is the question of whether one needs to actually be in possession of that piece of paper. A scan of an original serves as proof that the original exists. ...and this is usually all that anyone requires for practical intents and purposes.

But: You're not supposed to do print/sign/scan, and then just throw away the original or not have an original in the first place. You're kind of supposed to keep it in case you're ever asked by a court to produce it. The document partially loses its forensic value if no original can be produced.

Even worse: If a digital forensics expert can prove in court that a piece of digital forensics came from this tool, it may no longer be possible to distinguish a scenario where you used it in good faith because you didn't have a scanner on hand versus a scenario involving fraud where a third party used a scan of your signature plus this tool to create the appearance that you signed and scanned a document that you never did in fact sign. Or it could be alleged that you might have deliberately used this tool instead of signing the document for real to deliberately engineer deniability into this piece of digital forensics based on the previous line of reasoning.

Personally, I'd advise anyone to just keep their distance from these sorts of tools.

And writing/using the tool as a web service where people upload documents instead of downloading the tool seems like an especially bad idea. Why take the risk of exposing presumably sensitive documents to a third party?
Famously won't work for n@ai, either with or without the trailing period to ensure global name resolution. The .ai is one of a rare few ccTLDs that have (or had) top-level MX and A records.

https://mail.gnome.org/archives/evolution-list/2002-January/...
'it's also estimated by some to have a greenhouse gas impact worse than natural gas'

I would expect such outrageous claims to be heavilly substantiated

> You don't need to worry about geological stability with wind

Really? Almost 1,000 feet tall, top heavy structure under huge windload does not need geologican stability?

'require tens or hundreds of megawatts of cold-start / post-operation (cooling) power.'

How or why is this ever relevant, they operate at >90 capacity factor for 2 years at a time
This condensed several of my own musings into one well-reasoned comment. Do you think there's anything ProjectionLab could/should try to do with the concept of health-span?
Imagine someone tearing down city traffic lights and selling them on eBay until the full reward had been recouped.
The genius engineering of the 3½ inch floppy disk
That's pretty much how a modern Danish mass-produced house is built, modulus some form language details.
Not saying you shouldn't keep doing what works for you but: If visitors knowingly put invalid e-mail addresses 1) do you really need an e-mail address from them, rather than making the field optional? 2) If so, validation should be done by sending an e-mail with a validation link either way.

As others pointed out, for a sanity-check something like /.+@.+/ should be good enough.
I enjoy this South Park character you are playing.
> I tell everyone the same thing about access control. Don't check access.

This caught my eye and I’m dying to know more - could you elaborate or point me to a good resource on this? My team has been dealing with some issues related to this recently.