skysight-inc/HackerNews huggingface dataset:
> Lawmakers sponsoring the legislation say they are looking to curb the state’s carbon footprint by cracking down on mines that use electricity from power plants that burn fossil fuels. For two years, unless a proof-of-work mining company uses 100% renewable energy, it would not be allowed to expand or renew permits, and new entrants would not be allowed to come online.

Are externalities not taxed? This merely addresses the symptoms rather than the cause of the problem: pollution is not taxed enough.

Clearly New York is not very crypto-friendly. The BitLicense was the first red flag.
I tend to write one script that emits a list of files, and another that takes a list of files as arguments.

It's simple to manually test corner cases, and then when everything is smooth I can just

script1 | xargs script2

It's also handy if the process gets interrupted in the middle, because running script1 again generates a shorter list the second time, without having to generate the file again.

When I'm trying to get script1 right I can pipe it to a file, and cat the file to work out what the next sed or awk script needs to be.
Yes, but the TOTP is only usable once and cannot be reused across unrelated sites ("password stuffing"). And with WebAuthn / U2F the second factor is completely unphishable.
How is it priviliged if my University proffesor makes less than some of his graduates with 3 years of experience?

Because there are other metrics for respect (and privilege) than simply the salary one makes.

For example: the "privilege" of being able to, at least in theory, devote one's skills and brain power to a higher purpose (curing cancer, say). Or at least to what one actually wants to do. Rather than the basically random stuff (and sometimes dark patterns) that most industrial types have to devote their intellectual resources to.
NY Times is so transparent -- they should feel embarrassed.
An easier introductory book:

https://ocaml-book.com/
The big problem I have with Amazon is that the damn search is just so terrible - even if you try to search for an exact item (which you know exists and is legit and sold on Amazon) half the time it gives you a bunch of unrelated aliexpress garbage. Especially for more niche queries.
Am I the only one that thinks that 2FA actually increases the probability of losing access to an account? It's only a matter of losing the 2nd factor.
NIST Releases Updated Cybersecurity Guidance for Managing Supply Chain Risks
> The vast majority of users would prefer not to have to write an entire layout and stylesheet for each site they visit

This seems so obvious and yet so many technical people miss this entirely.

Most people most of the time just want a solution, they don't want the tools to solve their problem on their own terms.

Even if sites just spat out data sets in JSON, there'd still be someone bitching it wasn't in XML/CSV/whatever.
Gary Bernhardt is a prophet.
everyone is looking for a fix to weight gain, not even a quick fix, and various ideas and diets keep have been floated, much with limited to no success. There is no science behind fasting .If there were a science it would be effective and reproducible.
> 2. It says the Steele dossier is largely discredited - I wasn't aware of any discrediting, let alone total.

Look at David Shaylers career and how he has subsequently been done over by them, much like Chelsea Manning.
https://en.wikipedia.org/wiki/David_Shayler#MI5_career

Its the military's job to diffuse situations, identify threats on the horizon and use whatever means necessary to deal with them. Once you are dealing with something in a court, the threat has largely gone thanks to corrupt judges.

Spooks are above the law, but just to make sure, its written into law.
https://www.theguardian.com/uk-news/2019/nov/05/mi5-policy-g...
https://www.bbc.co.uk/news/uk-54274605

I really dont know why people come to the UK or most other organised country for that matter because entrapment & blackmail is still order of the day with all the security services, some of which you will read about in the press.

Another name for the BBC is
https://en.wikipedia.org/wiki/MI7
those television camera's and journalists get in everywhere, the press is the best form of spying in the world imo!

So when is a D-notice not a D-notice? When its just reverse psychology to weed out some groups of people perhaps?
I think it's not just about keeping the president alive, but also about keeping the president functional. A president who's alive but trapped in a plane without good communication isn't very helpful to the country. In a time of emergency the president needs to make decisions and communicate them quickly.
Resizing windows is a weakness of Mac OS. It mostly retains the original fully manual method of dragging the edges of individual windows which is a fiddle process. There are some methods like mentioned in the original post, but that is about it. For that reason there are dozens of third-party tools, many free, that people use and like for their particular ways of working. It would be nice if Apple were to look at these and implement a basic verion of one or more of them in the OS.

The “stoplight buttons” on windows are part of a very opinionated solution to window management that works from some people but is a complete mess if you don’t like full-screen apps. I would prefer if we had the option to convert the full-screen button to a maximize window button. Double-clicking on the window header is close.

The other thing that Windows users complain about it that closing a window doesn’t close the app. That one is just a confusion because they are used to how Windows windows. The Mac OS convention of keeping the app active is not wrong, it’s just a different approach and the kind of conceptual change that users need to make when they switch OSs.
Stories create plans and set expectations.

Take the "story" of "if we get separated at the mall, meet at the fountain and wait there until we all arrive."

That's a story. You can imagine how it goes.

1. Imagine getting lost. Oh no, oh dear, sweaty palms! But hey, I'm not actually lost. No need to panic. Ok, now what?

2. I should actively work to remember the path back to the fountain.

Now, when your five-year-old brain realizes you got separated from daddy, you're not FREAKING OUT you're backtracking to the fountain and thumb-twiddling.

Your turn - all you have to do is come up with an edge case ("I'm sure there are some kids that'd forget where the fountain was") and pretend that "some" is statistically more relevant than the idea that making a plan makes a positive difference.
Rephrased, individual merchants on Amazon don’t move enough volume to have their products stocked at every warehouse on the planet. And the ones that do Amazon has started offering “tonight” delivery.
Many are! The Florida Keys National Marine Sanctuary is divided into zones [1], with each zone limited to different types of activities like diving / snorkeling, fishing, and research.

There are many good dive operators in the Keys who take recreational divers out to the approved reefs. If you want to get up close to the reef restoration part, the Coral Restoration Foundation also has a dive program to take divers out to their coral nurseries [2].

1 - https://floridakeys.noaa.gov/zones/types.html

2 - https://www.coralrestoration.org/dive-programs
Awesome! Generic subrequest auth would be a super handy feature native to caddy.
Cost. I'll list some reasons why hours is often not possible.

- Products can't always be fulfilled by the closest location. Especially for products that you can't assume infinite stock of, this is a big deal, but in general there is an incredibly long tail of things sold. Look around the sites of Target, Walmart, Home Depot, and similar, look at what's in stock where. It's not universal coverage, and Amazon has much lower density of locations as well as higher SKU counts. If an order is split across multiple locations, it would be cheaper but take longer to first combine them at one rather than deliver the parts separately.

- Last-mile efficiency. Stops are clustered and dispatched together, which reduces labor time and mileage. The total cost of 10 spread out stops could easily be the same as 40 more tightly packed ones, and the second won't be an option if they're out for delivery within hours.

- Labor efficiency. There are a lot of humans involved still, despite the best efforts of these companies, and a bit of latency allows for consistent utilization despite hour-to-hour and day-to-day changes.

Lastly, delivery within hours is offered. Walmart calls it Express Delivery, Amazon has Same-Day Delivery (as well as some 2 hour delivery), Target has Same Day Delivery. These are just premium services with limited selection because it's expensive to do, and modern Free Shipping is an illusion of shipping being too cheap to price when it really isn't. It's cost optimizations all the way down and still not enough.
Makes me think of how UML has so many subdialects for different diagram types.

(You are supposed to be able to bootstrap all of UML from the very simple EMOF vocabulary but I think there are a few small missing pieces that make it non-trivial)
Once again, fuck these immoral corporate asshole. Facebook needs to die.
Learning loss is 50% of a year's worth of math when learning remotely
The worst panic I've felt actually took me over the precipice into peaceful oblivion. I started simply saying to myself "oh well... It's just a job".
I'm impressed you went with an automated solution (PlayWright) for 500 videos after all that, considering they could be cross-loaded from Google Drive almost instantaneously. I'm glad it worked, but coding around a screw-up under the gun seems like a high-risk operation compared to spending 4 hours doing the task manually (albeit being super bored the whole time), but with the benefit of knowing it's being done correctly instead of hurriedly writing a script to potentially do something else wrong very efficiently and dig your hole deeper.
Torn between hybrid and remote work for my business
It is not only about building. It is also having eyes open and trying to buy anything they can (sellers willing to sell and anti-trust authorities agreeing). "Metaverse" is so imprecise so that whatever scheme in the end works, will be retrofitted to be Metaverse as envisioned from the beginning.
This announcement is partially about the platform-integrated authenticators being made into 'virtual' authenticators backed by a platform vendor-specific cloud ecosystem. So for example, a credential registered on an iPhone may be synchronized over iCloud Keychain to work to log in my Mac via TouchID.

This is something which has always been as part of the model - an authenticator is just an abstract thing that represents an authentication factor, generates keys for a particular use, and doesn't share private keys outside its boundaries.

This announcement possibly marks a transition where sites supporting Web Authentication (with a bring-your-own-authenticator model) will go from seeing 90%+ hardware-bound authenticators to seeing 90%+ platform-integrated, synchronizing authenticators. Bundled into that prediction is a hope that this (and other proposed changes) will lead to a 10x increase in adoption.
That's exactly the kind of fatalistic attitude that's being criticized here though. If you can recognize that you're surrounded by garbage, you can decide that you want things to be different. If you decide you want things to be different, you can potentially inspire other people to feel the same way.

If the current environment just dictated the future one, there would be never be any change in our culture. In my opinion you are underestimating how voraciously we humans get sick of <current thing> and seek out something new.
You can use OATHTOOL [1] on the command line or even roll your own TOTP implementation [2] in just a few lines of code in your favorite programming language.

[1] https://www.nongnu.org/oath-toolkit/oathtool.1.html
[2] https://datatracker.ietf.org/doc/html/rfc6238
What should happen, if we're doing "shoulds", is that it shouldn't be permitted for one company to own both distribution and production, nor for such companies to create long-term exclusivity agreements with one another.
All this talk about exercise and not one of you mentions my brain!
I meet with negative reactions quite a bit and am happy to answer specific questions or complaints. Or at least try to. Sometimes people end up feeling like their question or complaint has been sufficiently answered, and sometimes they don't, but it's rarely for want of trying.

I don't want to ban you, but we need you to meet us halfway on using HN as intended. I don't mind you having a negative reaction to moderation, but comments like https://news.ycombinator.com/item?id=31277321 just won't do.
I guess it's like anything else. You can trust someone a little to manage your crypto keys or you can do it yourself whether its PKI or a Bitcoin wallet. You have to know and do more to trust less. For me, it's a really great value if software makes DiY crypto convenient enough to do crypto stuff safely enough that I don't have to trust or pay a 3rd party and don't end up wrecked because I got in over my head. Like bowling bumpers, but for cryptography.
> Also up there is pip and just the general mess of dependencies and lack of a lock file.

You can use pyproject.toml or requirements.txt as lock files, Poetry can use the former and poetry.lock files, as well.
I'm a recent-ish convert and found this to be true, there's definitely plenty of rubbish on the app store similar to the play store and trying to avoid subscription services where it shouldn't be necessary can be frustrating (I'm not paying a monthly fee for a calculator). But so far I've generally been able to find high quality apps that are pay once/sync via icloud/support sign in with apple that means I've spent more money on apps in a couple of years then I did in the previous 10+ with Android
This chart [1] was making the rounds a while back. Whether you totally agree with its methodology or not, it certainly suggests that many people consider a huge swath of Netflix' content average at best.

And for someone like me who doesn't watch a huge amount of video, that's not a great look. Tastes differ of course but my tastes aren't that out of the mainstream. And I'd rather a streaming service had a modest number of high quality shows than a whole lot of meh.

[1] https://twitter.com/loudmouthjulia/status/151679497810579456...
Mr. Musk has heralded his purchase of Twitter as a victory for free speech, having criticized the platform for removing posts and banning users. It is unclear what role his childhood — coming up in a time and place in which there was hardly a free exchange of ideas and where government misinformation was used to demonize Black South Africans — may have played in that decision.

Perhaps it has helped Musk appreciate the value of free speech, like he says? Curious article, which seems to want to frame Musk as a closet racist due to his being a white South African during Apartheid, fails to provide any evidence for this, then mixes in the vague insinuation that he must be brainwashed by censorship.

NYT, paper of record
How does a service that does not charge its users survive without ads? How does an internet service that charges its users survive in the Net of today? How is charging commercial/govt entities to post on twitter different from an ad?

(in the non-commercial, home sense)
Is the second case handled by the "frontend"? Shouldn't be handled by the backend and then return an error state/message?
Well, for starters, Github. I don't have a phone number on file with them and I have TOTP and FIDO available.

The vast majority of sites I use TOTP on didn't require a phone number for the account.
For me, double-clicking the title bar minimizes a window.
It's spelled Lyre Bird, not Lire (the spelling is correct in the repo, just wrong in the title).

Not much else to say. Here's a lyrebird imitating a chainsaw: https://m.youtube.com/watch?v=mSB71jNq-yQ
This change would certainly have helped against the infamous "Gathering weak npm credentials" research[0] from 2017, but I think that most recent supply chain security issues (in NPM, at least) have been due to: 1) typosquatting, 2) developers deliberately adding malicious (or unwanted) code into their own packages, and 3) deep transitive dependencies on packages that have genuine bugs that lead to vulnerabilities.

It's not clear that this 2FA requirement would fix any of those problems, but it could one day allow package management tools to flag up when one developer has given/sold control of their package over to someone else who has less of a reputation and might be malicious, as was the case with the event-stream package.[1]

[0] https://github.com/ChALkeR/notes/blob/master/Gathering-weak-...

[1] https://www.eweek.com/security/node.js-event-stream-hack-exp...
What I see here is a bunch of adults pretending to understand what is best for their kids. Really unpopular opinion: you all don’t know shit.
Another related URL is

https://en.wikipedia.org/wiki/Poka-yoke

https://hn.algolia.com/?dateRange=all&page=0&prefix=true&que...
This is not scalable. You are literally asking thousands of manufacturers to alter their manufacturing process. A much better way is to establish trust certificate. For example, if I want to sell something at Amazon and want to have “Verified” mark, I should submit my identification documents plus documents that establishes my relationship with manufacturers (ex “authorized dealers”). This is already done by many in real world and the question is just to bring it online.
You usually don't call the antique classicists modern, just after the resurrection of the antique in the renaissance and despisal of all unscientific myths, ghosts and religious rubbish you can call them so.
Why would you want even more consolidation? The other content owners (Disney, WB, etc.) have already pulled all their content from 3rd parties (including Netflix) to destroy competition. Why is there so many people on HN that want less market competition and cheer when corporations consolidate?
Thanks, I updated the title to make it clearer.
Google makes $100k worth of tech training free to every U.S. business
It doesn't violate the principle of least surprise if you're basically inventing the convention, which is the case here. There's a slightly different convention in some subsequent systems but they typically don't have arbitrarily positionable icons. The MacOS convention has been around for nearly 40 years.
My first thoughts were "This is what the internet was invented for".

So impressive.
And this effect is even more profound when looking for tablet optimized apps, which are far and few between on the Play store. There's a few decent ones on F-Droid but iPadOS has the quality tablet app market solidly cornered.
> if you have the source code, you don't have to trust the package maintainers

I wouldn't go that far. It's possible for a skilled malicious developer to conceal malicious behaviour in their code, to make it hard to detect and plausibly deniable as a bug.

Speaking of which, I've never understood why SELinux is adopted so uncritically considering it was developed by the government agency behind [0].

[0] https://www.schneier.com/blog/archives/2013/09/the_nsa_is_br...
It's pricey but looks like it won't be too warty, thanks.

https://forums.freebsd.org/threads/yubikey-5-nfc-not-working...
I've worked in UK tax havens.

At the end of 2008 I had to add 3 more zero's so a trader could be paid their bonus.
This is an awesome project! I've integrated it into my Desktop Environment in the browser so that you can drag on ISO/IMG files and run them directly in the emulator. It also automatically saves states on close into /Users/Public/Snapshots. For networking I am using the same WebSocket proxy that v86 uses.

https://github.com/DustinBrett/daedalOS
I really think services like YouTube are going to win out. For every hour of video I've watched on Netflix or Hulu I've probably watched 40 on Youtube. The variety of content there is absolutely incredible and so much of it is very deep educational content.
I'm using Spectacle for 5-6 years.. I see now that it's no longer maintained, and Rectangle was developed based on Spectacle.
This is great live/github based book.

Other great resources are Michael R. Clarkson's (from Cornell) videos [0] and book-like format [1].

I took a lot of inspiration from it when playing with rb-trees [2] and functional, ocaml-looking typescript in general [3].

[0] https://www.youtube.com/playlist?list=PLre5AT9JnKShBOPeuiD9b...

[1] https://cs3110.github.io/textbook/cover.html

[2] https://github.com/preludejs/rb-tree

[3] https://github.com/preludejs
SymReg: Approximate functions using Symbolic Regression
> There are security teams inside those megacorps that have a general objective of reducing the number of account takeovers

The same corporations that routinely intercept all network traffic.
DietPi released a new version 8.4
DietPi is a lightweight Debian based Linux distribution for SBCs and server systems, with the option to install desktop environments, too. It ships as minimal image but allows to install complete and ready-to-use software stacks with a set of console based shell dialogs and scripts.

The source code is hosted on GitHub: https://github.com/MichaIng/DietPi
The main website can be found at: https://dietpi.com/

The project released the new version DietPi v8.4 on April 30th, 2022.

The highlights of this version are:

It comes long with new images with updated Linux version for Odroid XU4 and NanoPi 2 series.
We replaced the confusing "Preference" menus in DietPi-Software with on demand dependency choices.
You can now disable APT list compression in DietPi-Config to speed up APT package installations at the cost of increased disk writes and usage.
An issue has been solved where after the upgrade to Linux v5.15 the network connection could have failed.

The full release notes can be found at: https://dietpi.com/docs/releases/v8_4/
I wonder if there is a difference between oral stories and movies. My kids started to cry while watching the Little Dinosaur (ages 5 and under) several months ago. I recently bought a copy of the uncensored Brother Grim stories. Taking into account how sensitive they have been in the past with G rated cartoons, I decided I would edit the stories in real time (leaving out words like 'blood') and sometimes modify the ending slightly. Recently, I stopped editing the stories. My kids still love the stories and ask me to read them more right before bed time. They even asked me to re-read them Hansel and Gretel, which is quite a brutal tale in my opinion. Show them a single clip of a 'sad/scary' cartoon and they still freak out to this day; however.

I think there is something to be said about Disney cartoons use of music and visual images that sort of forces viewers into a certain emotional mindset. Oral stories/books on the other hand leave it up to the imagination of the listener to conger up the emotions and images. Not sure if this makes sense, but at least in the case of my kids it does.
The University of Impossible-to-Get-Into
Hmm, I bootstrapped a standard OpenBSD installation from a FreeBSD installation. I haven't gotten to set up IPv6 yet but planned to.

What would be hindering that, some weird encapsulation protocol or what?
I have Mastodon, mail, XMPP, Coturn, and Nextcloud instances all running on a single Raspberry PI setup quite easily thanks to yunohost.org. They have ISO's for just about any hardware or a VPS.

Hostman and Mastohost are among the other managed hosters of fediverse instances.
looks cool, but that's a totally different sort of user experience that happens to use the same ActivityPub layer, no?
I don’t think it’s true for the hardware token. The initial registration sends information about the token to the website (but the website can tell the browser it doesn’t need it, IIRC).
Why do people always say this? Do you not know how expensive they are?