skysight-inc/HackerNews huggingface dataset:
Caddy uses a library from step certificates which injects a self signed CA cert into your browser and OS trust stores automatically, so your browser will actually be perfectly happy with the SSL certs. The first time you run caddy it will prompt to elevate privilege so it can install the certs and then it should be good to go after that point.
It's possible for sure.

The problem is that in such a scenario, there is no requirement or even recommendation for query writers to structure queries with regard for existing indices. You will rapidly end up with too many partially-overlapping, including the overhead to maintain them.
The instructions here https://news.ycombinator.com/item?id=22336638 say:
"put your link in the URL field and leave the text field blank."
But I see that others do post text, so are the instructions wrong, or did I do right by adding my text in a separate comment as mentioned above as well:
"Add a comment to the thread ..."
Only there is no material to work from - so they've basically taken the same strategy as the final season of GoT did but they're doing that from the start.
If I remember correctly, if you harvest for fibers, that's before it goes into seed.
If one of these models is on average better, then they would gain an advantage by using it. The problem is for the "not normal enough" folks, it may be _harder_ to remedy an invalid classification, particularly if there are no fallbacks or work arounds. I was cued into this once by an ML book that gave an example of a fraud detection company using an actually worse algorithm, because when it gave false positives it was easier to understand and hence easier to manually override. But if it is less profitable to operate this way, and there is no regulation around it, people getting falsely classified may be out of luck. That's where the discussion around regulation needs to happen, I think.
As soon as side loading or their own app stores are allowed, all sorts of companies may require that. Maybe most big companies will stick with Apple's.

As an iOS developer, hardening the 10k-ish apis that exist in iOS will be mostly impossible to do in a short term given the attack vectors would now be outside of Apple's control, probably resulting in incompatibilities and bugs. Android is a horrible platform already given the myriad of different OS versions that exist (and often are not updated by the users) that you have to support.

I also wonder what the law requires as to switchover to the new rules, new OS releases or going back X versions or something? Is there are time frame?

Imagine also being an app developer and having to build/test releases for multiple app stores that include different payment gateways. Without a solid and secure API environment in the OS, how do you manage that with screwing up? iOS has always been easy to do since you only have to support one major OS back. A couple jobs (like 7 years) back our Android app was a nightmare to manage, as we had multiple OS release/phone suppliers that rarely got bug fixes in at all and never at the same time, making fixing/testing some things a nightmare. Might be better today, but I remember how much of a pain it was.
Its nothing compared to the piratebay.
One of the major themes of Wheel of Time is how myth changes over the ages as it passes from person to person, culture to culture. This can be very entertaining in the books because you read the inner thoughts of dozens of protagonists and antagonists. Each of them are ignorant in different ways and nobody really knows exactly how the wheel is going to weave things in the future.

I'm not sure how a narrator or having someone's thoughts read aloud would be done in a show like this, though, and Amazon didn't try. There are definitely a lot of villains in it but from what I saw they couldn't make the subject of ignorance interesting.
Linux audio was never working fine. It was a mess of broken drivers and incompatible implementations.

I cannot fathom how people are able to repress the memory of how bad Linux audio was before pulseaudio.
To nitpick, afaik, its not that they cannot be proven, its that they have not been, and look very hard to prove, which is slightly different (not my area of expertise, but i assume this would be tied to p vs np)
Because, at least in C++ and Python that you mention, you can mutate (a field of) an element of the list without the list noticing, and hence without the index being updated. In the general case, you’d not only have to wrap the list, but also its elements, and wire the element wrappers up with the list. So it’s better to have the application do that because it knows when the index needs updating for a given element (and its old & new value).

The other reason is that most often you only need an index on one field, and don’t need the elements to be in a particular order, so you just use a map/dict with the value of that field, instead of a list.
> means you already have everything you need.

Your lack imagination of how much better software development could be given the right interfaces, and interaction modes, is somewhat representative of how the stagnation of iPad OS has crippled our optimism and taste for futurism, constantly improving user experiences and new models of computation.

The iPad has amazing input capabilities, from the pen to laser scanning that could all be used to further improve developer experiences. Be it by augmenting your scrum board, to sharing code annotations with your coworkers, or foregoing coding completely and turning flow-charts to code directly.

But sure, let's all be middle management, and write emails all day.
Ping me on Teams.
There's no need for one.

How NIST chose algorithms in the past was done in quite diverse ways. Sometimes they merely said "this is a standard" and people could comment and the comments were ignored. This is basically what happened with Dual EC DRBG, whcih is the likely example you're referring to.

However the way this standardization worked - and several others before, like AES and SHA-3 - is that NIST made a public competition. They basically asked everyone to submit proposals and then asked everyone to find flaws in theses proposals.

These competitions have a very good reputation in the cryptographic community. An algorithm like Dual EC where the issues were quite obvious would've never survived such a process.

The thing you should look at is the process, not the organization.
Thanks for an explanation. I’m only familiar with this subject through the political lens I’ve seen it through in some recent headlines, so I appreciate how you got straight to the point. I do have some questions though.

What is the government offering in exchange for these people to shut down their source of livelihood? Who decides which “nearby farms” need to “close” and what process do they follow for deciding that? Is there an objective rubric or well-defined amnesty plan available to farms that pledge to reduce emissions?

Nitrogen emission is not some discretely measurable artifact that conforms nicely to property lines (not to mention shared waterways, grazing routes, etc.). It’s conceivable that a region comprised of ten independent farms might measure as producing excess nitrogen, when in reality nine of the farms are ecologically sustainable, but one dominant polluter pushes the region to excess as a whole.

In this situation, how will the government decide exactly which farms are subject to which regulations or shutdown orders? Do you think this might depend on the outcomes of some political process?

(btw, I expect the American perspective on this will lean strongly in favor of the farmers, the key difference being “the government’s citizens” vs “the citizens’ government.”)
This shows the power of IQ. Having a sufficiently high IQ means you can become a world-class master at a hard subject quickly, easily surpassing others who have decades of experience. It's the ultimate cheat code or power-up in life, second to have rich and well-connected parents, I suppose. Freddie Deboer is right that parents consider IQ to be very important, as much as society may try to downplay its importance or predictive value.
Right, it's still possible. But less close to hand and never automatic. Series also become less useful when they are just a sequence instead of an almost mapping (with an index) or a sparse sequence (with subset of larger index)
No it's explicitly systemd-resolved behavior: https://www.freedesktop.org/software/systemd/man/systemd-res...

> The hostnames "localhost" and "localhost.localdomain" as well as any hostname ending in ".localhost" or ".localhost.localdomain" are resolved to the IP addresses 127.0.0.1 and ::1.

mDNS only uses the .local suffix but AFAIK it will never resolve anything to localhost on that domain. I'm pretty sure having a mDNS service that advertises a .local domain as 127.0.0.1 would really break things too if it serves that address up to other machines on your network.
RCS is such an awful protocol that is seriously going to harm users.

It was clearly designed to allow governments to maintain their ability to monitor user communications at scale.
The standard use of JS when loading www pages in a browser scales nearly perfectly with frequency during short single-threaded bursts.
the first two paragraphs are clearly disinformation, if not outright fantasy:

"Rep. Marjorie Taylor Greene’s Twitter account struck an urgent tone the Sunday after the Supreme Court’s historic abortion ruling. She implored her 968,000 followers to have the “fortitude to act” against Department of Defense leaders for refusing to recognize the court’s decision, which eliminates the constitutional right to an abortion.

But DOD leaders never stated they would ignore the court’s ruling in the Dobbs v. Jackson case."
Outsourcing hosting doesn't seem that different from outsourcing electricity. If it's not a core competency, or competitive advantage, let somebody else deal with it.
Thanks for the clarification, because your previous comment seemed to contradict.
I never experienced any trouble with audio in linux before pulseaudio. There is no memory repression here; only gaslighting from you, telling me I experienced something I didn't.
Yes but… homeostasis is a thing. If you expend more energy, your body is going to try to make it up somehow, either by making you hungrier, or by making you expand less energy elsewhere.
The main problem is that users can be tricked to do it. Used to happen to my parents all the time on Android. They'd install random apps and the website will "guide" them how to install this app by going to settings and enabling "untrusted developers".

This is my issue with all these devs screaming at apple. Your customers chose a product for whatever reason. Don't like it? I don't care - respect their choices. It speaks volumes to me how much they will respect me and my privacy when they want to optimise for their own profits instead of my XP and privacy.
Ask HN: Should we migrate to something like Auth0?
Hello, I'm a SRE in a mid-sized SaaS company (100+ developers). We always have been running authZ/authN stuff on our own, but recently decided to explore moving to third-party provider.
Why? We want to be sure that this part of the stack is robust and safe and be able to use SSO/etc flawlessly.
I'm personally worry about migrating all the stuff we already have, getting into possible vendor lock, etc... but current auth system developers are very enthusiastic about moving to Auth0.

Am I worrying too much?
Now do the actors of Beverly Hills 90210. When the show started, Ian Ziering was 26. Jason Priestly was 21. Lukey Perry was 24. Gabrielle Carteris was 29. Shannon Doherty was 23.
With that kind of money they could have bought DeepMind in 2014.
Dinosaurs Took over Amid Ice, Not Warmth
Until this changes to the 4th or 2nd
Git doesn't understand move and copy operations very well, and has to be tricked into doing it.

With Java, checking in your dependencies was always complicated by the trouble handling binaries efficiently. With NodeJS that's not a problem, but conflict resolution often ends up with duplicate files, so checking them in is still challenging.
Looks good. But it could do with a free trial before forcing people to sign up. Even if it's one example article of 200 words or something.

[Edit: it would also help if you had proper contact details instead of hiding behind a Fed-Ex service address in Queens, NY.]
Well, I didn’t fully mature until I had to care for a child; it’s a responsibility like no other. Then the next level beyond caring for them is fulfilling as well as you try to pass on the human experience a degree better than you had it.
This is awesome idea! I'm sure there is an implementation somewhere.
I'm 45 and have zero interest in watching anything with 1980s actors. In fact, all of those names would ensure that I never even give it a chance. Those guys are all washed up as hell.

Haven't been able to watch Deniro since I saw him get all slobby drunk and try to talk during an award show in the 90s. Most of these people have proven themselves ridiculous, making it very hard to watch them in a movie...Tom Cruise especially.

"Only Murders in the Building" is awesome though.
> Text contains 'foocompany.com', and you search for 'company.com'? No results.

Well… yes… I mean, you could probably make that causing a hit with some stemming if you wanted to, but that seems like reasonable behavior to me.

If you meant to give an example more along the lines of "singer" and "singing" not matching, again, that's a job for stemming. The feature is there; it just needs to be enabled.
Maybe it safeguards them from looking like they've screwed this up, but in terms of providing a concrete recommendation to system implementers, how does this safeguard anything? How does offering multiple algorithms in the PQC category help me make systems safer? What am I actually supposed to do here (how do I reflect this hedge in a system design)?

They didn't feel the need to provide multiple recommendations during the AES, or the SHA-3 process, even though Rijndael and Keccak used different constructions relative to RC6/TwoFish and SHA-2/Blake2. Why now?
I’m not sure that “true suburbs” actually exist anywhere - because if there’s large swathes of houses, you’ll find at least some retail in the area.

However if it’s more than a mile it may not be walkable but that’s not the same thing as unsustainable.
It's not a bus, it's a train. Best case you can slow it down for a few people to jump off.

Carter told people to wear a sweater and the American people flipped out and elected a ghoulish union-busting zombie. Twice.

There will be no change until it is forced upon us when the treats stop flowing. And even then you just have to hope that the populace has an accurate story in their heads as to why.
As a happy exclusive user of Firefox on Android (and PC), I have yet to meet any sites except legacy corporate apps that had any sort of problem with FF in the last 1-2 years at least.
Here's a database that does much better than this, it creates and fine-grainedly updates materialized views of the queries you're using: https://github.com/mit-pdos/noria

Here's an excellent interview with the creator: https://corecursive.com/030-rethinking-databases-with-jon-gj...
As a schoolkid in 1970's Lubbock, TX we got to visit Reese AFB where they did jet training on the T37 and T38. The simulator room had a set of enormous landscape dioramas, my recollection is that they were something like 20 feet by 20 feet. The simulator would "fly" a camera over the diorama. There was a cockpit on hydraulic actuators. I don't remember what the display looked like (or even if I got to see it), but I do remember those huge dioramas and thinking how funny it would be if you "crashed" into a spiderweb on the simulator :)
Time an again AI systems outperform humans. This maybe true today but not tomorrow
This isn't even true, I went and looked up the directors for Daredevil out of curiousity and each season has a bunch.

Edit: I guess you're referring to the various recent miniseries Marvel has been doing? It's never been uncommon in miniseries, for fairly obvious reasons.
First time they're out of compliance, the fine is 10% of their global annual revenue. Then 5% of their daily average revenue until they comply.

Second time they're out of compliance, the fine doubles.

If they still breach compliance, they get investigated for systematic non-compliance. The Commission can then impose structural and behavioral changes.

Or Apple can stop providing service in the EU. But they're not going to say goodbye to a fourth of their global revenue. They will comply.
Nothing short of being dragged out by his toes will dislodge Boris. I've long since given up on him ever being done.
Audio in Linux before PA certainly wasn't working fine. Turning off your mp3 player and restarting your browser, because you want to play youtube via flash plugin? Sorry, but that's not fine.

I had my share of hardware, and PA had problem with only one piece (a nettop with Nvidia Ion2, audio via hdmi). It turned out that the hardware couldn't really play 44,1 kHz audio, it's clock was too unreliable and resulted in drop outs. PA couldn't fix the hardware, but could resample everything to 48 kHz on CPU, and with that there was no playback problem.

So yes, it exposed problems, and it forced to fix them. We are all better off today for that.
Interesting.

Tried on Win10Home 21H2 (19044.1766) and it doesn't work.

On Win10Enterprise 21H2 (19044.1706) it works.

I cannot find a documentation reference on the feature of resolving *.localhost

Sorry guys, it turned out that our corporate DNS server is giving the answers. Once I disconnected from VPN, no longer did it work :(
This will be juicy come the fall!
I think California should add legislation to check the power of the European car makers. Make sure that the German cars interoperate with the Ford components and can be serviced by other independent car dealerships as well. BMW and Porsche should also share their advertising numbers.
Covid-19 was 3rd leading cause of death in United States in both 2020 and 2021
The last Facebook revamp added dark mode, but totally made me stop logging in in because of all the utter clunky-ness of their layout and settings. They massively overthought the redesign process.

Twitter's UI has been terrible for years, but access to real time content is their only saving grace left in my opinion.

If only YouTube would stop trying to twist up their layout and create an alternate content view with skip/ffwd controls and better recommendation methods (like sticking within consistent music genres properly) I think they'd have something better. They simply have too much content (ad too much low effort content) now to still be using their old/linear play recommendation methods.
The code is interesting: https://github.com/jart/cosmopolitan/blob/master/tool/viz/me...

Feels really old school. Looks like something from people used to write DOS programs.
Silk has been used this way too, I believe.

There may be some advantage in the relative softness too, relative to iron. When something bangs into it, it will not transmit all the shock through to the body but will absorb some by deforming.
Sin #5 - Unrepresentative workloads: The common assumption in academic research systems is that the cluster workload is relatively homogenous. Most research evaluations measure performance by running a single job on an otherwise idle cluster. - Schwarzkopf et al, 'The seven deadly sins of cloud computing research' (2014)

.. via https://github.com/globalcitizen/taoup
I worked at a company that used Fastmail for ~150 employees. In my personal experience, the email side was rock solid and support was both responsive and helpful. I miss Fastmail's extremely fast web interface and handy features like being able to create smart folders from saved search queries.

Calendaring would have been fine for a smaller company, but it was not suitable at our scale. This is mainly because there's no way to make your free/busy status visible to everyone in the company, so you ended up having to manually share your availability with each person you might want to meet with.

Our sales / marketing / recruiting folks lamented the lack of integration into their external CRM tools, but I'm not in that field so I can't speak to it directly.

Similarly, our IT folks didn't like how it was a separate account system to manage, instead of integrating into some other SSO system or being a source of truth for SSO itself... but again, at a smaller scale that's not a problem.
New release of memzoom pushed to the website.
Huge blow for Boris Johnson as two senior UK government ministers resign
There are a couple comments pointing this out, but that's not unique to on-prem: Cloud providers are also buying hardware from vendors, employing contractors, buying or renting facilities, hiring consultants, etc. All of that you are going to pay for either way.

The cloud just offers an additional middleman that also gets a profit margin.
And because it's a lot cheaper.
> Why can't you add an index to a simple in-memory list?

The index is already a "simple in-memory list", sorted. That's why it is expensive to mantain.

> It would be great if you could have a std::vector or Python list of plain old objects

Sort said Python list by the columns in your index.

> and then tell it to add an index (using a hashtable for example) on one or two of the fields.

Hashtable is another thing entirely, and designed for fast key retrieval at very high memory and CPU cost. If you can't afford a index you can't afford a Hashtable/dict either.
That seems like a really terrible situation. I'm sorry you went through that.
If I remember correctly Google AppEngine's NDB had such a thing maybe 10 years ago. Every time you queried the database it would create an index. I don't know how smart that mechanism was.

I don't know how things are in Google Appengine land now.
People who work with DNS know how to right-click and do “Copy Link”, or even to hover over a link and watch the status bar text.
So true. Reading their over generalized screed left me thinking if CEOs are really that useless anyone could be a CEO and their position isn't special, which sort of torpedoes the entire point.
Yes that’s true but not in 1987 on the original Arm 2 Archimedes.
Does there exist any advice where its impossible to do it wrong?

E.g. On this account, "stay hydrated" is bad advice, since if you drink 60L of water in a day you will die
It's worth noting that the relevant timeframe to implement PQC isn't just when quantum computers become sufficiently fast to break current crypto (assuming the answer isn't never). It can take a decade or longer to re-encrypt data and/or to update cryptographic infrastructure.

Given that (varied) expert option on quantum computing being able to break current public key cryptography seems to mostly fall in the 10-20 year range, there is some, at least mild, urgency to start using PQC for the most sensitive data relatively soon.
Doesn't this logic apply to pretty much everything? Why hire external anything then? Why not do your own deliveries, hire your own trucks to transport goods etc?

There is a cost to taking on things that aren't part of your core business too.
I noticed my ability to delete posts/comments has vanished at times as well, this worries me a bit... Especially when there is a typo is involved.
A few kids at our club were involved with the Inspire program. I don't know much about it - my kids aren't interested in highly-competitive sailing. I think there is more to it - I think it has aspects that lead to careers in sail racing maintenance/management.

If you can get the kids into the program and they do well, it appears to open a lot of doors.
That was not why they refused to port it to newer APIs though. It was because Google changed the permissions API to be more granular and request permissions at runtime, which would have meant Tencent would have to request tons of permissions to gather user data (presumably users would not be inclined to grant so many permissions).
And immediately cancel any revenue they take from competitors.