skysight-inc/HackerNews huggingface dataset:
This looks like it's still in the early days but are there any plans to integrate with other podcast providers? I usually listen to podcasts via Spotify and it could be cool to see the comments streaming by like they were lyrics or the chat on a Twitch stream.
How many buildings contemporary to the Parthenon still exist?

How many of Michelangelo's contemporaries still exist?

Some games will last forever, some will not.
I have a 2012 MBP and two other machines running Linux. I'm not talking about retina displays at all (I don't have one). The rendering difference is noticeable. "Uncomfortable" is exactly the word I would use.
Almost correct, but missing the broader point once again:

1. LetsEncrypt has additional methods to help mitigate the risk of MITM attacks for HTTP-01 challenges (https://community.letsencrypt.org/t/validating-challenges-fr...)

2. LetsEncrypt has restrictions on HTTP-01 validation (no wildcards) that are designed to mitigate the fallout from exploits of this vulnerability.

3. There are proposals active to try and allow website operators to disable HTTP-01 validation entirely using DNS. It's not infeasible to me that HTTP-01 could end up being retired eventually, at least for websites that have public DNS records.

And most importantly:

4. This is treated as a vulnerability

LetsEncrypt is not saying, "MITM attacks don't matter and HTTP is good enough". They're working on a fundamentally difficult problem (how to do identity verification for the first time when all communication methods are subject to attack), and they are rolling out the best solutions they can come up with at this time; solutions that are tangibly better than the status quo of HTTP.

That is very, very different than saying, "oh, HTTP is fine for this, we can ignore working mitigations that would be easy to deploy." If there was an easy way to completely mitigate HTTP-01 attacks, LetsEncrypt would be doing it.
Sounds like perfect blackmail material?
Has happened before.

Responsibility always lies on those who created the malware.

But also on hospital IT if they didn't take precautions.
Local industry can't compete because the costs are too high, so the government acts by protecting the local industry and increasing costs everywhere.

Welcome to the protectionism vicious cycle.
I’m of a bit of an opposite mind on the many, and usually very public, NPM security issues. Because from my experience the JS ecosystem, and it’s woes, teach a lot of people to never trust the part of their operation that is coming from someone else. I mean not everyone, obviously, but in my anecdotal experience it’s far more common to see good package control and review processes for JS than any other language, well except for maybe Python when the Python is done by software engineers and not “data-scientists”.

Supply chain security is immensely important, and I encourage you not to learn about it the hard way like I did. Which somewhat ironically happened in the .Net ecosystem when one of our trusted Nuget packages got hacked many years ago. Now, I could be mistaken and I hope I am, but I suspect that if you ask a Java, a JS and a C# developer if they trust their ecosystem, then only one of them is likely to say yes.

So no, there won’t be some great revelation in the JS community. The best you can hope for with stories like these is that fewer developers feel like imposters when they realise that GitHub stores plaintext security assets in their logs.
Why is it on its way out as a product? Is it simply not making money?
I was pretty excited about Guix because I find Guile more fun and less academic than Haskell (which Nix uses). Then I stumbled upon some of the extremist propaganda by one of the main Guile developers and promptly decided that it isn't for me.
Show HN: Design That Converts. Tips and Case Studies
Would be interesting to know what sort of uses this thing has, now it is kinda without context.. I guess it is similar to VM introspection, but with emulation instead of virtualization?
Meh, I quit 15 years ago and the way I quit (cold turkey) was by saying that I’m not a disgusting smelly smoker.
Watching my friends who still smoke basically ruin every surface around them and render themselves incapable of going up a meager set of stairs continues to convince me, despite the best efforts of the author here to entice me back.
GitHub saved plaintext passwords of NPM users in log files, post mortem reveals
I'm aware of that, but these elementary operations have some definitions in code. Even just calling them in a fixed sequence (as opposed to dispatching at runtime one opcode at a time) would be something optimizable for a sufficiently smart compiler. However, given a good-enough design of the whole system, straight code generation from the query plan shouldn't be a problem either (and at that point, the Zig compiler should be able to do even more work with the generated query code). I mean, any reimplementation would presumably use Zig features heavily anyway -- otherwise you could just link with the C code.
People seem to hate Stack Overflow atmosphere which they deem "toxic". They think members with reputation are jerks who don't want to help, make snarky comments, downvote without reason, and edit and moderate the questions to hell.

Maybe there are cocky tech snobs out there, but the reality is that many questions are pure thrash.

In general I just search on Google for something, then arrive on SO, read and after that mind my own business.

If something is really hard and I don't have much time to research it, if the answer isn't already on SO, I might ask a question. Sometimes I get answers, sometimes I don't. But I do not get angry as nobody has the duty to reply to my questions. Is it even very possible that people who can reply to my questions haven't seen them.
Referrals / word of mouth. You need to talk to a few people, preferably those who have had treatments, and consider their opinion. Don't go for "medical tourism". Research multi-speciality hospitals and doctors, and contact them directly.
I use TekSavvy as an Internet Provider (in Canada).

Bell (the phone provider) REALLY wants me to "go optical". For speed... But - Bell (the phone provider) is forced to share the copper. They do NOT share the optical! If I "go optical", they rip up the copper, and force me to use Bell or the cable company.

TekSavvy would be shut out (actually, they can use cable). I refuse to give business to the cable company (for other reasons).

So - vDSL all the way! Fortunately 25/5 mbps is sufficient for my uses.

Why TekSavvy? (1) they do NOT block ports (2) they can provide static IPv4 addresses -- so REAL INTERNET.

Something I do NOT get from either phone or cable companies.
I skimmed and couldn't find. Is the baud rate mentioned?
Meh, I'm following the path they tell me. You're probably right tho, but I guess they want to make me employable.

I feel that I will use Django for personal stuff in the future too, so althogh it is comples I have enough drive to get through it.

I can't be many hours on it though. Programming was much more motivating when I was learning the basics, I could be coding all day with no problem. I loved the challenges they sent me.
Surprise there is no mention of the terms: Gorilla Arm and Tactile Feedback (haptics).

These are the two reasons the "minority report" style of interactive design will never catch on for humans.

https://en.wikipedia.org/wiki/Haptic_technology

https://en.wikipedia.org/wiki/Touchscreen#%22Gorilla_arm%22
>> The government lets you deduct your mortgage interest from taxes
>
> This is effectively not true anymore.

Care to explain? Is this because the standard deduction is so high, it's generally not worth itemizing for most people since the Trump tax system adjustment? Genuinely curious; I'm a current renter, hopefully purchasing in the next couple of years. But this is an important part of the buying calculus.
Nation wide disruption with Verifon H5000 payment terminals in Germany
Somewhat famously, though many cigarettes are shown, none are actually smoked.
It made me understand how 'smoking the peace pipe' is a thing. Standing outside the office building with a few colleagues from different departments. That small brotherhood of "meh, fuck it". Just enjoying your smoke together. I'm also long past my smoking days but I do miss it at times.
The counter-argument is interpreting the query is not what takes up the time in executing a typical RDBMS query. Imagine a db is just a key-value store, the query is some keys and the db just spits out whatever it found in a giant hashtable. That's not going to get faster if you 'compile' the query. It's not going to get much faster if your db is a more realistic three hashtables, two big arrays and a partridge in a b-tree.
How i would i be able to differentiate the quality of the machines?
No more so than any medical information in the possession of an employer or school.
> It’s actually super easy to shut them down.

Then why after many years is Bitcoin, Ethereum, Dogecoin, and the rest of 100s of others still alive?

It is because they know they cannot totally 100% ban and shut them all down? We both know they haven't banned these cryptocurrencies because they can't.
Genious! Great idea man.
Been there, done (with Flash) that! ;-) Macromedia will always have this special place in our hearts, I guess.

Thank you for the comment!
You lose at "reimplementation of SQLite".
> The password hashes in this archived data were generated using PBKDF2 or salted SHA1 algorithms previously used by the npm registry. These weak hashing algorithms have not been used to store npm user passwords since the npm registry began using bcrypt in 2017.

Which is so frustrating. When you upgrade your hashing algorithm, always always _always_ immediately remediate the weak hash mess by hashing your weak hashes with your new stronger hash, and turn the login check into

bcrypt(sha1(user-entered-password)) == stored-bcrypted-sha1

you can then upgrade them to a straight bcrypt if the check succeeds, but keeping the weak hashes on disk indefinitely until the user logs in (if ever!) is such a risk.
I don't understand your question. This doesn't work in the US either.
I agree that the C family has some similar problems but I think you're missing part of what makes Javascript uniquely frustrating.

Javascript is deployed in many different environments and you need to learn not just how to include a library in each environment, but also how to interact with that library. Also unlike C or other languages - Javascript has a hard time warning you about when you've imported something the wrong way. C can at least tell you "this does not link" (so it was found but is binary incompatible) - in my experience if you copy and paste a node import line in the browser the browser will just say "this does not make sense to me." C gives more breadcrumbs.

I also think that once you get outside the C-likes, the story is universally better. For all of its packaging flaws, it's easy to get python packages for development.

Every time I want to make something in Javascript I'm frustrated all over again by how I need to know details about the Javascript ecosystem that I have no way of knowing at this stage (like: getting to hello world can require a working knowledge of WebPack). It's just no where near that bad other places.
Yes. Or as I said, service actually exceeds that whenever I've tested, typically ~160/190Mbps down/up respectively, but it's a 150 symmetric plan.
How to Displace JavaScript
My dude, I literally said I respect other's opinions, then shared my perspective.

I literally did the opposite of suggesting others just think the way I do.

And new media can replace old media, and still be a mindful, thoughtful experience. Impermanence does not mean mindless.
There is more to domestic policy than being able to go to the foreign-owned big-box store in your foreign-made sweats to buy foreign-made underwear that is 5 cents cheaper. Especially if that savings is only used to pay for the higher cost of internet infrastructure owned by a handful of oligarchs and used to distribute foreign-made content consumed in your sweats while quaffing beer made by foreign-owned cartels and eating popcorn grown by foreign-subsidized farmers.
There are tons of employers out there that don’t match 401k contributions, make employees pay their healthcare premiums out of their salary, and don’t give meaningful bonuses.
Yeah, it's a shame the Tesla seems to be continuing the modern American car trend of lackluster reliability.
Exposing that someone went to an Ivy League university and did what authority figures told them to do is bad blackmail material.
Dzięki! ;-)
i wonder if this kind of pattern emerges natuarlly from a community of experts.
think of how you need lawers who studied for years, to understand whats going on with laws and regulations
a similar pattern most certainly emerged within the german tax system.
maybe the complexity of the health system is (in part) a similar pattern.

i hypothesis that a community of expert will reiterate on the rules that are present within the community, over and over, until only experts who studied the topic for years can even begin to deal with it.

perhaps there is even a self regulating mechnism. you need to understand a system to a certain degree in order to contribute. at some point the group who can contribute consists soley of experts who studied their field for years. those experts will then contribute and make it slightly more complex. the complexity raises but only to a degree that allows a group of experts to "catch up" with the complexity in order to contribute themselves. if it gets "to complex" it runs out of contributers
Sounds super cool! Really appreciatw the work you're doing. What I'm imagining in regards to Raft is this:

5 or more servers, each running unikernels in tiny virtual machines, with a JavaScript interpreter or similar to run untrusted user code. Each unikernel is then booted on every request, perhaps with a cool down period before being shut down. This would work similar to GCP, Azure etc. and performance would be great because of how fast unikernels boot.

The unikernels would also be compiled with SQLite, with each database per customer stored on the host, and with restrictions on the virtual machine to only allow access to the database associated with the caller.

Whenever untrusted code is executed, it can insert/update/read/delete from the database on the host. If the host then handled replication, that means I can just shut down the vm when the code has been run, and start a clean one for the next customer. A guarantee that the data have been safely replicated would be essential here, since another server might handle the next request, with the expectation that the data is in a new state.
rqlite author here. I'm actually working to address that. But it does require parsing the SQLite statement before it's sent to the Raft log, and replacing the non-deterministic value with the value evaluated on the leader. It's all solvable (in principle).
Sure! Just obtain a supermajority of state legislatures and you are free to remove rights!
No doubt: The standardization of modules in Javascript was a real screw up.

I hope the people involved are embarrassed enough to figure out how they are going to avoid fails like this in the future. (But I suspect they pat themselves on the back and each other it was a total success.)
Having just gone through all of this (two years ago), it isn’t “hard”, you just have to stop assuming it’s easy and will only take a bit.

Also Parcel is easier by a factor of 10, skip Webpack entirely.
Just as a sidenote, because I was using Spectacle as well. JFYI: As it is no longer maintained, I switched to Rectangle (https://github.com/rxhanson/Rectangle) and can highly recommend it.
The Atlantic article mentioned the necessity to abandon gold standard temporarily in order to fund WW1, however the American people did not want to enter the war and were unwilling to fund it directly.

An alternate telling would be that abandoning the gold standard allowed the government to circumvent the will of the people and enter a war there was no appetite to get involved in.
Are there public systems in Europe where specialist waits are multiples of what OP is already experiencing?
Clonezilla 3: Copy and clone disk images to your heart's content
OneWeb has no announced plans to enter the business of selling direct to consumers. They want to only sell to other businesses. Their constellation has much lower capacity (smaller and fewer satellites) anyway so that's understandable. Also remote northern towns I believe still have network connections and I doubt a wisp will help much. Alaska has a decent number of very isolated people with complete off grid properties.
Perhaps if web browsers in general returned to that crazy, old idea that ram is not an infinite resource and that I as a user should be able to set a reasonable limit on the maximum amount of ram a single web page or extension should be allowed to consume this wouldn't be a problem.

Instead, a few errant lines of javascript on a web page or in an extension is all that is needed to cause a web browser to consume every byte of available ram on a system and drive it into swap. :-/

I really miss the 90s web sometimes.
That screenshot is not very good at all, and I'm on Linux myself. You're just a few tweaks away from better rendering.
Why do you lose 10% selling? 6% for real estate cartel commission I guess. If you are in a hot market you can use redfin or similar low rate companies, don't pay the buyers agent. I'm trying to talk myself into it. No one is doing $60k of work selling your million dollar place.
I had one of the LeapMotion input devices back around when they launched, and really did try to use it in earnest - using a whole bunch of shortcuts and AutoHotkey hacks to navigate the OS with it. There were even experimental programs people wrote to input text with it, using something similar to chorded keyboards.

It didn't really work out though. Long story short: my arms got tired. Turns out that it's a kinda fundamental problem with how they had designed the interface - hovering your hands above something for extended periods of time is simply just tiring and uncomfortable.
I think that's a pretty common design pattern for industrial/reliable applications. Multi Function Displays have been common in "glass-cockpit" aircraft for a long time. The F16 notably also feature master mode switches on the group of buttons below the HUD. It allows the operator to quickly switch between air to air, air to ground, dogfight modes, etc, bringing up relevant displays and controls at a moment's notice. I've heard that pilots consider F16 one of the best designed in terms of interface.

Soft buttons are also pretty common for test and measurement equipment. I own many modern digital oscilloscopes and spectrum analyzers, all of which feature physical buttons around the screen that are selected by software to do different things
The demand is indicative of where the author lives: think where in the world it would be acceptable for a stranger to approach children under 13 and invite them to lunch at a restaurant.
15x more people are killed each year in Baltimore than Uvalde. What happened was tragic there is no question, but the fact that the rest of the country is numb to the murder rates of Baltimore, Chicago, etc, makes me quite sad.
That's why if you're smart enough to be a computer scientist you should just do pure math
Could you point out any specifics? (otherwise, it sounds like: "I don't like it because I don't like it")
This is very cool! Are there any libraries to do this with HTML elements? I'd love to do certain site content in a similar way.
We rebuilt Cloudflare's developer documentation – here's what we learned
No, interesting is a value judgement which is easy until it gets hard, an exact quantitative measure of interest is impossible as what is interesting is, to a degree, a matter of opinion.
> The point isn't that you can't start a family without owning a home (obviously that's untrue) but that many people won't want to start a family while living in the relative instability of rented accommodation.

The amusing part of it is that small children are the most amenable to moving, it's not until they're a bit older and getting into school that moving becomes a real problem for them.

Fertility rates are low enough that it can't be entirely ascribed to housing.
Google went with squeezing on past phones, Sony put a tremendous effort on the trigger mechanism for the PS5, Panic playing with the crank handle on the Playdate, to stay on very public products. And yes I see a lot more on up to come products designed for VR.

I agree 99% of people interact with very shallow feedback, and that’s I think a reasonable state, 99% of the applications we use are effectively shallow and require very simple input and only have a basic output (it makes me think about the amount of people using no more than 2 or 3 keyboard shortcuts for their daily tasks on a desktop computer, they’re not stressing about getting more from these interactions)

PS: I feel silly not mentionning on Apple or Samsung’s stylus with pressure and angle sensitivity…
To reproduce that bug create CMake project, create shared library subproject, add module to library and use std::filesystem::path in the module. Then use that shared library from another project and try to build it with MSVC (VS2022 17.3.0 Preview 1).

https://developercommunity.visualstudio.com/t/lnk1179-invali...
Show HN: Storyflow – Add Interactive Web Stories to Your Website
Add Interactive Web Stories to your website with few bytes of JavaScript.
Namespaces do not solve the issue but they do mitigate a specific vector, while also removing a perceived need to preregister crates.

There’s no downside beyond “it requires development time and maintenance” like any other feature.
I’ve found myself using SO less and less as I find myself better able to solve issues on my own, and the issues I do have that don’t resolve do not fit SO’s format or are simply too niche to attract any attention.

I wish they’d remove the bounty unlock time. The times I want to use bounties are when I cannot wait 2 days for a solution.
That's one freedom I'm happy to see restricted. Let the lame NFT people find some other gimmick for their 1 millionth monkey-based ugly JPEG project.
A [CTRL]+[F] for 'Pinterest' yielded no results.

They do the same, and you can check, go make an account with your e-mail, and then ask to delete it, they just change it to name@domain.com-wrongpleasefix

You can no longer log in and the account is still there.
Also, note that mainstream monasteries are at Harvard, Yale, Princeton, Stanford, etc. That's where these secular priests 'corrupt'/preach the next generation of elites.
Well, Cluster API depends on underlying providers and the VMWare provider is definitely a VMWare thing as it's maintained by them:

https://github.com/kubernetes-sigs/cluster-api-provider-vsph...
Right. I see that happen all the time in Canada, the UK, and even Germany. I think France has a national “Take a Strange Child to Lunch” Day, too.