skysight-inc/HackerNews huggingface dataset:
Very minor nuanced criticism. The company is marketing itself to be developer-first, API first infrastructure, but then the all testimonials I came across are from the CEOs and co-CEOs and not developers.

It would be quite powerful and impactful if you have developer testimonials too.
Your website should state on the front page where it is available.

Sounds interesting but if I don't know it is available in my country - I won't bother reading it.
I've done this for a very long time. Practically all my spam is sent to my CPAN (Perl module archive) address. Which indicates that it's just the thing that's most easily harvested.
i prefer date DESC
IANAL but pretty sure that protecting personally identifying information almost always trumps FOI.
Ov – feature rich terminal pager
Reverse 2FA is too complex for the demographic most affected by these scams: the elderly and the unskilled. So it would likely provide very little returns on investment from the bank perspective.

This really needs some sort of well-thought-out legal mandate.
Dump it either on a toxic waste landfill or at a high temperature incineration site [1].

[1] https://www.novus-environmental.co.uk/blog/why-is-hazardous-...
I can never tell if these articles are intentionally trying to undermine their stated cause or if it's just a side effect of corporate owned media fishing for clicks.

"Recycling doesn't work" is pro-corporate click bait.

"Recycling regulation only makes things worse" is even more so.

"Corporations try to wriggle out of every regulation and are basically sociopathic so you need to rule them with an iron fist of democratic oversight" seems more accurate but less likely to make it into a corporate press designed from inception to deliver the opposite message.
I don't think choices of things like this ever really come down to one thing like that. Not using an RDBMS might mean having to build a whole bunch of features you wouldn't otherwise have to.
part of the issue is that producing shit research cost very little, and debunking shit research cost a lot. just pick up one of the many "x reasons why earth is not a sphere" videos, some are pretty easy to debunk, but other require to understand i.e. potential fields (if earth is round why don't train engineer take into account curvature when laying tracks and variations thereof)
But then you have two files and a mount to deploy instead of a single file.

Ted was trying to do a redbean like jart did with APE.

https://redbean.dev/

Which is an awesome concept that also reeks of re-purposed early '00s malware distribution trick.
Yeah actually, that would be an unsurprising (but clearly bad) layperson's reading.

If the last two years should have taught us anything, it's that even otherwise intelligent people will interpret perfectly reasonable, specific and precise health advice in the worst possible way.
It is interesting that the stores to node are seen as dead. Surely the assignment of the node address to fs:[0] should equivalent of assigning it a global variable, so any state change in node can be observed by any function.
Hey, member of Team Telios here! We're building a decentralized and encrypted email service. I thought you might want to hear about our solution to stop spam emails.

We integrated an alias feature within our app allowing you to create aliases within your mailbox page. Every email sent to your aliases will be received in an independent folder named after your alias.

It allows you to manage and organize everything in one place while keeping your main inbox free from spam!
There are all sorts of other metabolic benefits from TRE.

Weight loss is just one of them.
I like Elektron devices and I own a Digitakt and Model:Cycles but I find this one a bit underwhelming, especially it’s lack of proper polyphony.
You can have a program with correct type handling that doesn't work but with unit tests you have a program that works and documentation (in the form of the test) about the ways in which the programmer expected it to work.

That's why I find type hinting to be relatively high effort for relatively low benefit and choose to use it only where I feel it makes life better. The optionality suits me. It's a nice to have but that's all.
Related but nowhere near as severe, Samsung prevents you from creating an account with the email address samsung@domain. It showed a generic error message so I couldn't figure out why I couldn't create an account until I tried using a different email address.
DK says: True

DK is Autocorrelation says: The DK article is based on a false premise, we got to disregard it

"I cant let go..." says: Actually, given that we assume people are somewhat capable of self-assessment, which is reasonable, "DK is Autocorrelation" is the one based on a false premise, and we should disregard that one instead, and not DK.
I think the reason they say this is because ultimately physics wins out in the long run. If you look at later months, both groups lost roughly the same amount of weight.

However, the TRE group lost weight faster at the start.
You can write type stubs for other libraries. Over past year my team had a 100k line codebase that we’ve gotten mostly typed. But we still use a lot of other untyped libraries like tensorflow. So in past couple months we’ve started adding type stubs to the parts of the api we use. While tensorflow/numpy/etc are massive libraries most people only use a small subset of api. You can write type stubs for the subset you use. It definitely takes time but I find it very helpful to have useful type checking of tensorflow so I bit bullet and started writing stubs. I explored upstreaming them to type shed but got lazy on dealing with CI issue although I hope to revisit it later.
Totally right, even my dad in his eighties has serious trouble with regular SMS based OTPs!
Ask HN: How to proceed with advanced personal project
So I created a platform that allows users to create interactive audio books / meditations. To be honest I just really wanted to build something that came to my mind during the pandemic and as such ignored releasing it to the world and instead focused on tech / redesigns. It's been an on/off project for a couple years now.

The idea is that it:

1) Provides a studio to create interactive meditations / audio experiences. Currently supporting sounds, images and narrations.
2) Provides a journey player to allow multiple templates to be joined in a decision tree and hence have an interactive experience. Currently navigation can happen through buttons on the screen or via voice commands (which is a little dodgy given I use browser APIs).
3) Provides an audio player and sprites in the frontend, which allows you to mix and match narrations/sounds/images on any articles to customise the experience. You can also equalise sound levels for narrations/other sounds. Finally, and most importantly IMO, you can add plugins to support things like vibration mats, lighting, etc.
4) Captures user session content, such as the users pulse during a meditation, user journals when answering questions, and again plugins to allow you to capture more data.

The main issue I have now is sort of the sunken cost fallacy. On one side I'm still sort of passionate about it, but I really don't have the know how to get this to market, and I feel like I should just take a step away and work on something else with all the knowledge gained and focus on a smaller idea. On the other, it's a pretty advanced platform and I feel some form of keeping it alive would be amazing. I just don't want to opensource it given the insane amount of work that entails (from my previous OS experiences).

Just felt like mentioning, and seeing if anyone has any input or different perspectives?

The website / app is at enjamon.com
Cool! I see that they are hiring one software position at the moment [1], a Rust audio developer. Cool that they're using Rust, I wonder if that implies that they have ported earlier embedded code over, so at least their new products are based on Rust.

I didn't see a breakdown of what's inside this new product, that is always very interesting to me, the collapsing of all those cool UI features and (virtual) audio-generating "machines" down onto actual CPU/FPGA resources. Also makes me wonder if they can source whatever chips they need, now seems like a sad and annoying time to release new hardware products. :(

By the way, if it's not obvious, "Syntakt" is an amalgamation of "synth" as in synthesizer, and "takt" which is the Swedish word for "beat" (and/or "rythm", I guess) in the musical sense. So it makes sense for a combined synth and drum machine, I guess.

[1] https://www.elektron.se/rust-audio-developer/
I have a primary mail (me@mydomain.tld) I use for normal communication and as a fallback in case the catch-all subdomain is rejected (some companies don't like them; or are inconsistent for which form/account they allow it and for which not - I'm looking at you, Deutsche Post/DHL!). The remainder goes to *@subdomain.myotherdomain.tld.

I still get a lot of spam on my primary mail, I'm pretty sure it has been leaked by breaches and from friend's address books. My spam folder contains mail for these services: btc-e, bitcoinforum, Heroes of Newerth, hearthpwn, hifi-manuals.com, gcc-bugzilla. Most of these have been breached (for HoN I even recall it was during their early alpha/beta, and they did not acknowledge the breach when I informed them - they implied I must have used it somewhere else and that it got leaked from there). On the GCC bugzilla the address might be visible (at least to logged in users), so that's probably scraping. The hifi-manuals is pretty fresh, but IIRC they have been breached shortly after that.

A lot of businesses know both business@catchall and paypal1234@catchall, but I'm happy to say that I have not yet noticed 3rd party spam on these. Same for real life encounters for which I used the catchall (though the look on sales people is often priceless). However, aliexpress is pretty annoying with their own spam, as are some other retailers.
There's a clean way to disable updates in the refresh.hold option, no? Or are you missing a feature like apt's pinning where you can exclude single packages from getting updated, but otherwise keep using the "update all packages" functionality? I think that's a rare enough use case that users can be reasonably burdened to use a non snap version of that app.

I agree with the "mystery meat" criticism though, especially for Firefox they should make the packaging process transparent.
Find your partners on Slack by email address
> parts of the same thing

yes, from opposite angles.

Adding a page to an index may be more obvious than adding a keyword to a page. Both UX-wise and technical.
This may be medical disinfo. Listerine was long considered a great remedy and preventative care against flus and colds for a long time. This was lobbied against, they were sued and the ftc made them stop advertising as such.
Hey omnicognate, good to see you here, appreciated our previous discussion.

What you're saying is that we need to verify the statistical reliability of the skill tests DK gave, and to some extent that we need to scrutinize the assumption that there indeed is such a thing as "skill" to be measured in the first place. I hope we can both agree that skill exists. That leaves the test reliability (technical term from statistics, not in the broad sense).

What's simulated by purely random numbers is tests with no reliability whatsoever. Of course if the tests DK gave to subjects don't actually measure anything at all, the DK study is meaningless. If that's what the original article's author is trying to say, they sure do it in a very roundabout way, not mentioning the test reliability at all. I'd be completely fine reading an article examining the reliability of the tests. Otherwise, I again fail to see how the random number analysis has anything to do with the conclusions of DK.

In fact, DK do concern themselves with the test reliability, at least to some extent. That doesn't appear in the graph under scrutiny but appears in the study.

If you assume the tests are reliable, and you also assume that DK are wrong in that people's self-assessment is highly correlated with their performance, and generate random data accordingly, you'll still get no effect even if you sample twice as you propose.

> The key point though is that if you use a separate sample of X that correlation disappears completely

Separate sample of X under the assumption of no dependence at all of the first sample, i.e., assuming there is no such a thing as skill, or assuming completely unreliable tests. So, not interesting assumptions, unless you want to call into question the test reliability, which neither you nor the author are directly doing.
The most common use-case I can think of (and one I've often wanted myself) is programs that only colorize when writing to a terminal, and you want to save the output but still keep the colors.
“I’ve cancelled that charge and sent a new card out to you,” said Barry. “I’d like to enable enhanced security on your account, but I’ll need to text you a confirmation code first. Is that OK?”

This should have been the end of it.
Yup, that's the after effect of being anti-human in ideal. It results in a building that it sucks to be in.
> You can't pay for groceries with crypto.

Some people can pay for groceries with crypto, for example in Slovenia there is a supermarket chain that accepts Bitcoin Cash (BCH) [0]. map.bitcoin.com [1] displays local businesses that accept crypto.

Then there is acceptbitcoin.cash [2] which lists online stores and services that accept Bitcoin Cash, Bitcoin and/or other cryptocurrencies.

That is one of the main things I like about Bitcoin Cash: it focuses on user adoption as money and not as a store or value or speculation investment. Avoiding the exchange to fiat money is essential for P2P electronic cash like Bitcoin was meant to be.

[0] https://www.youtube.com/watch?v=61kQ4-0a1p8

[1] https://map.bitcoin.com/

[2] https://acceptbitcoin.cash/
Scrolling through my 2FA SMS's, it does seem like every service is putting their name in the SMS and it usually comes before the code ("Your [service name] security code is ..."). A bunch also write "[service name] won't call you for this code" or "This code is for online entry only."

I do believe most people don't read this stuff, especially since most more recent phone OS's tend to offer to extract the code into the clipboard for you.
Or that time he faked going to space and met chrystal aliens. Typical fucking lying influencers.
I think every year for the last 10 years people have claimed the Mac was going to "become an iPhone" or stop running 3rd party code or something and it hasn't happened.
> I never understood why stars are public in the first place.

We star because we like the code, the idea, the execution and the maybe the impact of the project. And it's encouragement. You star a project you pushing it forward. This is the human experience. We are not machines worshiping code. We care about what others think and this is why github is different.

> Of course instead of hiding the stars it might be better to add a private similar feature instead.

Agreed. Hiding means giving more space to anonymous users do we want that?

> I'm using GitHub to develop open source software.

Same. And i am not coding for myself i also need other to be part of what i am building and that's supposed to be part of the mission. Increase interactively. Instead this feature does the opposite.
After using this technique for 4 years, only Reddit so far!
Thinking that you are better than the actual pros is the easiest to spot indicator of lacking self assessment, so.
My team started with an untyped codebase a year ago. I added a rule to CI that every pr that touches files with type errors must decrease the type errors in touched files by at least 5. When we started we had like 30k type errors. A year later and it’s about 5k left. This was a small wrapper script over mypy/pyright that just called them twice once on master and once on your branch to compare error counts.

I did occasionally get pushback on it but stricter checks will be inconvenience at first and I argued it’d help over time. Now that we’ve had it a year it’s pretty well accepted in same way many would accept run formatter.
I'm talking about brutalism as a chosen approach for an architect and where that approach is most appropriate for a building. It doesn't mean that all churches or monasteries should be brutalist (obviously), I'm saying it's one of the use cases for a new piece of architecture where brutalism makes sense.
London’s Lost Ringways
>Proof is in the pudding.

Which neglects the point that USN aren't using CVNs to conduct FONOP in PRC SCS features that US does not recognize. There's no explanation other than being risk averse considering other developments.

>PRC has not initiated another crisis since '96

The crisis in 96 was US initiated when House passed bill to allow TW president Lee to visit Cornell after first denying him. Current rekindling of US/TW relations have not gone that far, i.e. US haven't renamed Taipei representative office, consistently reasserted One China Policy, maintained strategic ambiguity, the upgrading of diplomatic contact with TW still adheres to PRC redline (not meeting TW Foreign Minister in DC reserved for representative of sovereign states).

Though US is inching closer. Time will tell if cooler heads will prevail, with PRC domestic propaganda now talking about preparing for war if/when US plays TW card. Granted it's retired HuXiJin, but it's not good sign when he escalates spiels from "warning US" mode of last few years to "prepare the country for war", specifically describing "real sense of crisis" over current developments.
My ISP is a nightmare for this.

Every time you call them, they send you a one time code via sms to "prove" it's you. Not perfect but better than asking what my birthdate is.

But they pull the same thing when they call me. I answer the phone and they say they are rep from ISP and ask if they're speaking with me and then send me an sms code to confirm... To the same number I've just answered the call from. It's textbook phishing call as of if they're trying to access my account but lack the one time code.

The first time I thought it was a phishing call.

The operator was surprised when I said "no" and requested what their extension is so I can call them on a number published on ISP website.
Hasn't LinkedIn pretty much replaced this? I get recruiters on LinkedIn all the time, but very few if any on my personal email.
Did this happen instantly? I just now created an account. So far nothing happened. Maybe this is a ploy to get people to sign up.
Difference between any and object, void* and interface{} is you can't really do anything with the second. Sure you can store something on an "object" type but you need to cast it back to do anything which discourages usage of it (and add runtime checks, usually)

While in python you can mark something as "any" and continue using it as is.
“Nobody’s gonna try to buy Twitter with a credit card, right?”

“Nah.”

“Alright, we don’t need BIGINT in the ‘balance’ column.”
Ask HN: How do I handle Unicode passwords?
Hello, I was recently asked to, if possible, implement Unicode in the password field. The storage is not itself a problem - the hasher itself can accept binary, so I could use UTF-8 so that I wouldn't need to migrate ASCII passwords. My question is before that hasher: I'm aware that Unicode in itself is so messy that you need to normalise it first into something (https://en.wikipedia.org/wiki/Unicode_equivalence) so that would not run on normalisation bugs (such as https://eclecticlight.co/2021/05/08/explainer-unicode-normalization-and-apfs/). If it's impossible, I would have to write a detailed reason since the application is used around the world and they would really prefer to support Unicode passwords.
An architectural style can do more than one thing, i.e. it can be both utilitarian in its aesthetic and also be anti-human in its output. Philosophically, I'm not sure these are mutually exclusive but I suppose that's debatable.
I think the key here is only a trust:
- do you really genuinely trust the founders?
- do you really trust your own intuitions if there’s a market and profitable future for the company/product?

All the rest might be useful, but not more reliable than that. If it’s a risky new venture.
>Just allowing kexts to be loaded should not increase the attack surface or expose the author to any currently known exploits

"Just allowing kexts to be loaded" sure, it wont. But "just allowing kexts to be loaded" makes no sense as an action, unless you also actually intend to and do load at least one kext.

In which case, it absolutely increases the attack surface.
Apple Spends Record on Lobbying Amid Pressure from Congress
Hostmonster (a Bluehost brand) have been the worst, since they were so blatant about it. I'd only had legitimate correspondence to that address, until the week I cancelled my account, and since then the spam has been relentless. So as part of my account cancellation, they clearly sold my email address on.

The most amusing was the UK Parliament petitions site, since you would have thought they were a bit more careful with the email addresses given to them.

But the strangest is the persistent use of specific email addresses that I've never used anywhere - about half a dozen common forenames, and one forename-plus-three-numbers. I've no idea where they originally came from - perhaps someone padding out their email lists for sale with semi-randomly generated ones? - but that set of addresses has been used and reused for over a decade. At least it makes it easy for me to train spam filters, since even novel emails are easy for the filters to spot when multiple copies arrive together.
Well that is quite interesting. I have never seen a store or sign like that. I thought the ethanol has been denatured with various agents to make it unpleasant to consume for that very reason. I guess the consumer has degenerated so much that he is willing to suffer the consequences of its consumption?

It strikes me that this cannot really be a good sign for society in general when the degeneration is breaking through even the measures to inhibit degenerative detrimental behaviors. It also appears we are accumulating such conditions at an alarming rate all across the western world in particular, emanating and spreading out from a few specific points.
Given the explosion in the number of journals and the impossibility of effective peer review, being published in a journal does not mean what it used to. This is part of the material drivers for the replication crisis (journals can no longer effectively gatekeep scientific validity), but it also reflects something real about the practice of science: little social cliques come up with pet theories and, over time, "fight" with these theories on epistemic common ground. The successful ones, we'd like to think, are the ones that last the most rounds in the fight, but that probably only holds in the long run. Contradiction, in itself, is normal (and was before!)
I don't think that is the purpose of net neutrality.

Net neutrality is needed when there is not good competition. If there is only one or two ISP its important that they can't mess with the basic service.
Seriously, this is even more embarrassing than the nearly-identical blog post that was on here a few weeks ago.
Why would it be illegitimate? Is Zeta(-1) more or less illegitimate?
Hadn't heard of JPEG XL until you mentioned it. The format looks really cool! Support for lossless and lossy compression, animation, and tons of other new features

https://en.wikipedia.org/wiki/JPEG_XL

Preliminary support in Firefox and Chromium nightly/testing builds already. I share your hope that we can start to use it in the next couple years. Looking at you, Safari ;)