skysight-inc/HackerNews huggingface dataset:
>I wonder what the right balance between the two would look like.

There ain't one that ll work for everyone (but maybe climbing trees with earth beneath them..?). And this is not specific to this particular topic.

The whole of human existence is finding the spot of right balance for themselves between opposing pair of forces. But "Freedom + Fun + mental fortitude" <-> "Safety+ big brother watching over you + less freedom" is probably a one goes on throughout ones whole life..

But the forces that wants to exploit you will happily sell you a "right balance" that is hard to objectively argue against, which happen to be one of the curse of our "modern" times.
The Power of JavaScript Generators – Anjana Vakil
JSConf talk: https://www.youtube.com/watch?v=gu3FfmgkwUc
Netflix has always been clear they are vicious about layoffs.
> don't screw around with electricity

Haha, we did things like twist together the wires in an electric cord and plug it in.

In another post, I remarked how we built an electric DC motor in Cub Scouts out of wood, nails, and wire. It spun merrily with a 1.5V dry cell. Naturally, that wasn't enough power to satisfy, it needed more cowbell. So we attached it to an electric cord and plugged it in.

It vibrated fiercely for a few seconds, then burst into flames. I learned about AC that day.
It says you can't sue cops in civil actions for damages. Such confessions are still inadmissible in criminal court.
I know I'm going out on a limb here, but I predict that this will be massively over budget, massively late - and shit.
I wish the internet was purely an informational no bullshit interface/store instead of all this crap. I welcome these changes. Convert it back into a piece of furniture. Oh no we can't make a billion dollars for no reason.
Largest ever Burmese Python in Florida found in Collier County
This is garbage. If a system is rigged, you try to improve it. You are just giving up and try to rationalize your inaction with fantasy stories.
They said representatives not senators.

There are state senators who are the relevant representatives here not federal ones.
It takes about 512 logins, because after you've leaked a certain number of RSA key bits, you can set up a lattice search for the remaining bits. Because of the way the authentication and key escrow system worked, Mega could have run this attack over long periods of time, in parallel for all its users; the attack doesn't have to occur within a bounded period of time the way, say, an ephemeral-static ECDH TLS attack would work.
Bolt to buy back shares from the laid-off employees that took out risky loans
Yes....and no.

Lettuce likes some pretty specific conditions. If there's one area that's perfectly suited to growing lettuce with the minimum resources (fertiliser/water etc) then grow it there. Better than trying to grow it in the desert or somewhere much too cold.

If Australians go without lettuce for a month or so nobody is going to die. Eat rocket, spinach and cabbage instead.
If you paid $150 for LatAm outsourcing before, then this is definitely a better setup. You overpaid by a lot ;)
Does writing on paper work better than typing into a text file?
Try https://www.cryptopals.com/ or https://www.coursera.org/learn/crypto.

There's a lot to know, but you can build up to it!

One thing you'll learn about are oracle attacks, in which a bad protocol or implementation can leak secret data to the attacker bit-by-bit (sometimes literally bit-by-bit) in various ways. There are lots of those and they're sadly easy to create and a lot of progress in cryptographic engineering has been about finding ways to make sure oracle attacks can't occur in various real-world deployments.
It’s “almost always” though, not “in git for this one ID we already messed up”.
Something of a shame we haven't put more emphasis on helping kids learn their limits early in a safe way. You don't have to actually choose between just letting them run free and finding their limits by breaking a bone or making the environment all safe and low risk. You can, instead, educate kids about navigating the world.
Having to learn a no-code/low-code tool because a bunch of non-technical managers thought they could lower their headcount expenses this way.

The tool was disastrous, the project failed, and I accumulated a ton of useless knowledge which can be resumed as knowing what button to click where to do X.
Frankly because I don’t get it and hope that somebody in the comments will say something that helps me to understand.
Maybe they should have changed the rules before the game was played. Otherwise, it sounds like "hey, you plebs, you're going to keep voting until you get it right."
Agreed! Mine uses a keypad, and it also tells me who actually opened the door. Has been very useful for letting my parents and a nanny in without any nonsense.
Given your comment history, it’s clear that you’re driven by motivations that aren’t at all universal.

More bluntly, you’ve decided that consumer-surveillance-as-a-service is harmless. I’m thankful that the European regulatory apparatus disagrees. Now if only we could remind the American federal government why regulation is a worthwhile effort.
i guess they might as well pack it in and go work at a MANGA
Get some spinach, arugula, cabbage, or any other leafy green?
Solana launches solana mobile stack and Saga Phone
We might have overlapped at Oracle. I left in Jan. 1998.
One consequence is that you end with cute names instead of clear names. Cherry picking from the top 30 or so crates:

- parking_lot

- hashbrown

- ryu

- heck

The longer there's a shared namespace, the stranger the names get as the "good" names are already in use.
I remember this as well, the one I could quickly find was an NPR article[0].

The key difference between what you're mentioning and the article here is "buildable risk". i.e. the kids build the playground and it's age appropriate for their abilities.

The article, more the photos in the article, look like death traps at height. Even self-built playgrounds won't reach those crazy heights.

[0] https://www.nytimes.com/2019/05/10/well/family/adventure-pla...
Don't you still have to provide a cookie banner as soon as your analytics are storing cookies, even if it's your own?
The household license is dumb and customers are reacting to such dumbness by canceling and shutting down the company.
WA has plenty of lettuce, not sure where that's coming from though.
Rather cause and effect. We need efficient mitigations to problems occurring right now, not gestures that would have an effect 50 years from now, if only the rest of the world followed suit.
Gopher: Underground Technology (2004)
JSX is just sugar for React.createElement(...)
I don’t disagree but this is about warranties. Apple etc make it difficult to just repair, because they glue stuff together and invent weird screws that need specialized tools. Just hard to repair.

This legal action is about Harley saying your warranty is void if you have repairs done through a third party.

I mean the law says whatever it says and that’s the end of it, but it sounds like crap to me.

If I sell you a widget and I guarantee it’ll work for 5 years as long as you have me repair it instead of bob the janitor, I have a hard time seeing the problem. Frankly I think if you have bob the janitor repair your widget it’s now on bob to provide a warranty.

But what I think doesn’t matter, whatever the law requires is.
Fastify DX for Svelte
I do pretty much the same, which makes me think it should be django default startup template.

I would also do:

- install django_extensions and django_debug_toolbar

- rename the admin URL route to contain a uuid

- setup black, mypy, pylint, ipdb, ipython, dotenv and doit (I do so for all my python projects)

- manage.py createsuperuser

Also, very often :

- setup celery (locally with fs backend)

- setup vitejs

- install sentry and mailtrap plugins

- install django-allauth

- install DRF

And currently exploring:

- replace DRF with django ninja
yyyy-mm-dd.md files in markdown format.

Managed as a private git repo. Because I use multiple machines, git helps me with easy backups, merging, and version control.

I just use my OS's default plain text editor for writing.

I prefer markdown instead of plain text because it allows me to link to images. Images are stored in yyyy-mm-dd/ directories.

All these decisions were motivated by my long-term goal to make my journal easy to own, read, process, and pass down two or three decades down the line.

That goal pretty much rules out any kind of third-party service or specialized journaling application. git is the exception but I always have an accessible version even if git disappears.
Aside from the extreme height, there is still plenty of playgrounds like this around (in Japan anyhow).
What Is the Difference Between S0 and S2 Z-Wave Protocols?
> they’ll be happy with stocks, bonds, and deposit accounts at their local credit unions?

You’re describing gambling addicts. Healthy casinos keep their share of revenue to a minimum for a reason.
Hey, just wanted say thanks for PM'ing colab. Great toolbox.
I don't use Twitter because of its character limit on posts, trolls, spammers, ridiculous censorship, privacy-invasive phone number verification, and laughable customer support service. Twitter used to be cool. But now it's become a joke that I avoid like the plague. I feel so much better because of that.
Many rural areas in Ausralia have small scale local area market gardens, here in W.Australia most everything I eat is sourced within a 15 - 20 km radius be it flour, olive oil, lambs, oranges, etc (even the odd banana and a fw mangos) - but that's a far cry from the dedicated single crop volumes required to supply cities and for export.

Worldwide there's an issue with regions being devoted to mainly a single crop intended to supply tens of millions across several cities, often overseas.

Good when it works, better have a backup alternative when that fails.
VAERS (along with other systems) has helped pick up and prompt investigations for both the J&J COVID-19 vaccine and investigating myocarditis in adolescent males for the mRNA vaccine.

VAERS is also important for monitoring the rotavirus vaccines - it was one of the data sources that pulled the RotaShield vaccine off the market due to increased risk of intussusception in 1999.
No. They also spend so much money with all that micro services nonsense. People will watch game of thrones on a potato. They should have had the content blog.
>Schroedinger's streaming service just died

It's both alive and dead at the same time. Like the cat.
Django-allauth usually got you covered, but in the rare case it doesn't, creating a micro service just for auth is a way better alternative than a complete rewrite.
Pantry moths! See, Nextdoor really is good for something. Someone there put me on to these. I got some, and they work like a champ.

[1] https://www.amazon.com/dp/B00U1SMPBS
A recent realization I had is why Europe is less lawsuit prone and generally seems less concerned with liability – we don’t need to sue anyone to afford a broken bone.

It was absolutely shocking to me how many times my insurance claim form for a snowboarding accident in USA asked if I really don’t plan on suing anyone. The insurance company tries very very hard to not be the one who pays up … now imagine someone who doesn’t have good insurance.

I imagine the chance of getting sued for every playground injury makes you design things differently.
It's widely accepted that OpenAi doesn't release its models to make money from them, not because they really think they would be harmful
So what is wokeness?
And these independent taco joints would be staffed by...?
‘Anti-hunger’ molecule forms after exercise, scientists discover
I find it extremely hard to not impact my fear of danger into my child. On one hand I want him to do everything to explore, on the other I’m deadly afraid he’ll fall and break his neck…
Like Adobe, who uses tracking servers in the EU, but Data Processing happens in the US?
President Truman did this, as well. Apparently, some of them were absolutely scathing and full of language that he never would utter in public.
The name suck, but the idea is they are plugguable: check the django packages site for an idea of the benefit of that. It's essentially a plugin system with autoloading of some resources, such as the model and templates.

Also, apps override each other in the order or import. E.g one app can override the template of another just by using the same name. This means you can plug AND extend.
What about those of us over 18?
Bruh, this is not cool for the hustle when getting hard-earned money. Clever people could use Alexa to steal money from banks when mimicking voices. Better get those bank workers trained to detect mimicked voices from Alexa.
There Are Still Pioneers in America. Cole Summers Was One
I don't know what news you're plugged in to but I'm not worried at all living in the SW US. Phoenix and Tucson had by far their wettest rainy season in decades last year and are projected to have another wet season this year. And the state of AZ uses less water for 10x the population than it did in the 1950s.
I don't disagree, but as I said, it's about comparative value to other tools. Any first world developer can afford $10/month.

That being said, if you are a full time employee you won't magically earn an extra $10 a month for using Copilot, you will only be more productive. It will benefit your employer and Copilot doesn't have an enterprise subscription yet.
The $19 appears to be a one time fee, not an annual one.
No, those do not see any benefit from me visiting the site beyond what the government is paying them for. Analytics does, they get my data.
How many 6 month old children died of Covid?

https://data.cdc.gov/NCHS/Provisional-COVID-19-Deaths-Focus-...

0-4 years 442 out of 20 million. Lets vaccinate them all because there is 0.00221% chance of death. Btw a chance to be electrocuted by lightning are 0.006536%
Revisiting the principles of data-oriented programming
What If Electric Bikes Were as Cheap as Conventional Ones?
This doesn't have the technical capability to incinerate bodies because it would need to get more than 1000 degrees hotter than the quoted maximum temperature. That's a physics challenge.
Ah, I don't think that's exactly what this thread was about. Ignoring how authorization works, the question was whether there is an advantage to encrypting your commands again (via say ssh) vs. just sending them in plaintext under wireguard (via say rsh)
Same. I've never read back any of my entries. I don't see the value in it
Linux Foundation unveils Sigstore — a Let's Encrypt for code signing [1] [2]

> The Linux Foundation, Red Hat, Google, and Purdue have unveiled the free 'sigstore' service that lets developers code-sign and verify open source software to prevent supply-chain attacks.

> As demonstrated by the recent dependency confusion attacks and malicious typo-squatted NPM packages, the open-source ecosystem is commonly targeted for supply-chain attacks.

> To pull these attacks off, threat actors will create malicious open-source packages and upload them to public repositories using names similar to popular legitimate packages. If a developer mistakenly includes the malicious package in their own project, malicious code will automatically be executed when the project is built.

> To prevent these types of attacks, 'sigstore' will be a free-to-use non-profit software signing service that allows developers to sign open-source software and verify their authenticity.

> "You can think of it like Let’s Encrypt for Code Signing. Just like how Let’s Encrypt provides free certificates and automation tooling for HTTPS, sigstore provides free certificates and tooling to automate and verify signatures of source code."

[1] https://www.bleepingcomputer.com/news/security/linux-foundat...

[2] https://www.sigstore.dev
https://raisingfutureadults.blogspot.com/2021/11/the-ladder....
No, it’s too valuable. They sell services using the data such as Google ads.
Instead of people loving to get high on weed, it's cats loving to get high on catnip. It's the cats having a drug-like effect.
I guess the difference here is, that I want to visit a website in the US versus a tracking request, that happens in the background.
That's not the point at all. The Magnuson-Moss Warranty act arose out of scams perpetrated by car manufacturers, who tried to invalidate warranties unless you bought "Ford" oil or "Chevrolet" tires.

This goes beyond third-party repairs. The law says the company can't invalidate a warranty even if the user MODIFIED the product in question, unless the modification caused the issue for which the customer is seeking warranty service.

So the problem is this attempt to invalidate an entire warranty because of irrelevant actions the owner might have taken.
Is Opendoor the Amazon of Buying Homes or Just Another Carvana?
The only way to understand math like that is to do the hard work of learning by reading textbooks and other learning materials and doing exercises. Comments sections won't help you for learning this kind of advanced math.

If HoTT is what you are interested in, I recommend this single-page introduction if you are already familiar with how dependent type theory is used for theorem proving: https://www.cs.bham.ac.uk/~mhe/HoTT-UF-in-Agda-Lecture-Notes...
Depends of the size of your setup. Most website are small, and their threat model don't require more than having the secrets in a systemd file env statement.

After all, if you have a single server, and the attacker can read a root protected file oe the spawned processes context, you are pwned already. As for exposing env var, popping os.environ is usually enough.

No need to pay for more than you must: bots and script kiddies are not mossad.
You can be rigorous without being toxic or--sadly--toxic without being rigorous. In fact, I'd say they are almost unrelated and the same critique can be leveled either way.

I don't think @jltsiren meant that you have to have unconditional trust in someone else's work. Instead, you should approach it with a bit of humility. At a talk, the speaker is usually presenting work they've spent years on, whereas most of the audience saw it for the first time fifteen minutes ago. In most cases, you can trust that they've thought a bit about the obvious, show-stopping objection that immediately popped into your head.

You can--and should--verify this assumption too, but there are light-years between:

- "Could you walk us through your experiment design again? In particular, is there a wash-out period to account for any potential carryover effects?"

- "These results are hot garbage. I don't trust any fMRI stuff and as for the rest, I can't believe you'd run a crossover experiment for this because there are obviously carryover effects that you've glossed over in your talk."
For Americans (and others?) who are OOTL, rocket == arugula. It has a bunch of other names too, apparently.
> Geoengineering. I know that if they won’t do it someone will.

that's true for any terrible idea. in many way's terrible ideas is how humanity progresses. but it seems bad to double down on the same old ("more engineering") to solve the problem. Guess the alternative "spend less" is very unpopular because it's something anyone can do but it actually hurts.
At which point is much simpler to introduce automatic memory management in some form.

That solution is basically how platforms like Psion or Symbian used handles due to memory constraints.
https://starship.rs/ is another similar option. It's pretty fast but I haven't tested ohmyposh how it compares to starship
I use plausible analytics to measure traffic on my observable notebooks. I did try with GA but it didn't work with Observable's iframe sandboxing. Because plausible is open source, I could fiddle with it a little and could get it to report the top level page user facing URLs instead of the iframe's. Very happy I can get traffic stats from a site I don't own and very happy I don't need user consent because it's GFPR compliant. It tracks just what I am interested... My traffic, and with a little config it excludes my own page views. Great product, perfect for my use case I wish them well.

https://observablehq.com/@endpointservices/plausible-analyti...
> Besides, the known collision attack generates files with blocks of binary garbage, which makes it difficult to trick someone into accepting. It won't look like source code, and if someone accepts binary blobs of executable code, you don't need collisions to pwn them.

IDK, I could see this happening in multiple ways.

1. Images / media artifacts stored for display purposes

2. Cached files - 'zero install' config for yarn comes to mind, where every dependency has its file cached in git.

Plus binary files aren't displayed in git diffs so it seems somewhat easy to sneak in.

Otherwise, yeah, agree. Most people don't rely on Git's security model, they rely on Github's.
Env vars in systemd or supervisor files are fine for small server projects. But make sure you pop them from the os.environ dict once you read them to avoid accidental exposure.

For the desktop, use the keyring module.

If you start to scale up your threat model, you should use a vault, but the setup is way more costly, and tricky to get the reboot story right (hence the priviledged first requests comments).
I remember we had an ancient playground at our school when I was a kid last century and this girl fell thru the jungle gym and caught all her front top teeth on a bar on thing while falling down thru the middle, sticking some straight out and taking the rest clean out of her face. Good times!

By the time we reached middle school, ours was an old elementary school converted into one for slightly older kids too big for a wooden/metal playground. We had this big climbing arch thing but since it was a newly organized school and a crazy neighborhood we just got on top of the thing and coordinated swinging ourselves on each side of it back and forth until the whole thing came crashing down in a pile of splinters.
- Can't easily indent

- Can't easily copy paste

- Can't easily edit

- Looks ugly

- Harder to read
I'd be terrified if I was a EU company at this point. There is not logically way these same rules don't apply to using AWS, GCP, and Azure. There isn't enough other cloud hosting with nearly the same capabilities in Europe to handle that day.
It's a cool service, especially for those who don't need the more advanced features of Google Analytics.

The new Google Analytics is a mess to use, but at least it's no longer limited to ~"10M" hits for free each month.
How Amazon Exported US Working Conditions to Europe
Look, I received what is now considered a classical education, where one is expected to show how their evidence supports a cogent and coherent argument. I understand that you, however, subscribe to the modern school, where you wait for your cultural superiors to instruct you as to the current proper thought, which you then espouse with unthinking zeal.

Arguing from the existence of legislation regulating how to dispose of large numbers of animals or dead soldiers is an ad hominem and an obviously disingenuous argument. In a previous age, this would be understood to be an incredibly stupid way to argue, and I pity you for being incapable of seeing that.

Meanwhile, bring evidence.
This one https://github.com/rekcufniarb/pswrd#readme
> Don't you still have to provide a cookie banner as soon as your analytics are storing cookies, even if it's your own?

You need consent for every kind of storage usage on client side if you create profiles to analyze the them for marketing goals. If not, and no PII is being processed, no consent is required. Eg you could easily aggregate your server logs without a consent.
I feel like the type of playground design you're talking of started emerging in the late 00s, early 10s. It's great fun playing with my son in these, even as an adult! (Although my wife disapproves of me showing him some of the more dangerous things beyond the edge of his current envelope.)