skysight-inc/HackerNews huggingface dataset:
I used to work on Gmail anti-spam. Blocking attempts to send spam through the browser UI was most of our job. Driving browsers by things like AHK is (a) detectable and (b) definitely slower by more than an order of magnitude! You can much more easily run many requests in parallel (through proxies) within the RAM budgets of ordinary desktop/laptop computers, when going direct to the network. You don't have to believe me, go read spammer forums to see people discuss how much better multi-threaded bots are.

"the enterprising spam sending people would still easily automate the browser, esp. with things like autohotkeys"

It's not at all easy for them, and people who try approaches as simple as that don't make any money. Or didn't when I worked on it at least.

"The point is, banning a client side mod for any service is irrational if the justification is to prevent spammers."

That belief is widespread, but I built a part of my career on proving it wrong. We got unexpectedly excellent results from cracking down on alternative clients that were pretending to be browsers.
Can you explain what is the issue with TPM?

I get the issue with Pluton but TPM is only a dedicated and certified secure key and random number generator that does a better job than CPUs doing it in software, and it's also a secure enclave for storing your encryption keys. Would you rather store the keys in memory where they can be easily grabbed by malicious apps like Mimikatz? Macs had the same feature for years in the T2 chip.

It's the exact system that enables wireless payment and other strong security features on your phone.

So having TPM on PCs and using it for its interested purpose is a boon for everyone's security so I don't see the issue, just FUD.
Their cookie consent form already breaks a bunch of rules by being very much opt-out first instead of opt-in for alle the marketing and tracking cookies.

This doesn't give me a good feeling that they are focused on privacy.
Well its a great tool for non native English speakers. It helps them on correcting a lot of basics and build confidence once you get feedback.

But I am not sure of the correctness in the advanced stages.
Exactly this, I know many adults who almost never buy raw ingredients to cook for themselves. It is common & accepted to consume exclusively frozen food, packaged snacks, and takeout.
Call to action button says: Get Strated
?
Show HN: TypeScript query builder with full type inference
Hey HN! Colin here - a TypeScripter, open sourcer, and engineer at EdgeDB. As the creator of Zod and tRPC, I'm interested in designing tools/APIs that use type inference and generics to make life easier for devs. This query builder represents another step in that direction.

We set out to build an EdgeQL query builder that can express queries of arbitrary complexity (EdgeQL has feature parity with SQL, roughly) and infer the static type of the query result. We introspect the database and generate a schema-aware client that represent any query, including ones that use built-in functions, operators, string/array/tuple indexing, aggregations, conditionals, type casting, subqueries, computed properties, etc—things most ORMs can’t represent.

This post mostly discusses the API design, which I think will be interesting regardless of familiarity with EdgeQL. I’d love to see some of these ideas bleed into future generations of TypeScript ORMs/query builders too.

Best way to try it is to clone the sandbox repo and follow the instructions in the README[0]. Or jump into the docs[1].

[0] https://github.com/edgedb/mcu-sandbox

[1] https://www.edgedb.com/docs/clients/js/querybuilder
The next one should ship with a react app
Thank you, I really appreciate it!
I feel like a good alternative is regular old spell check and some humility in understanding we all make grammar mistakes and are here to learn. We were fine without a network connected snooping “grammar” bot. Consider not using stuff like this.
I see myself in the picture and I'm offended.
It is essentially a keylogger, seems like most places with any security concerns at all would ban it
My dad (an IT person) had set specific time during the day when my computer was allowed to access the internet on the router. One day I asked him to login from my computer to whitelist my brother's connection, I had installed a keylogger to grab the login and change the config. Don't think he ever caught on.
A secure honeypot framework, easy to configure by YAML
What do you think about this product ? Leave a star if you believe in a safer internet :) Thanks for your time!

Mario Candela
I don't trust any cloud provider I don't pay, and those I do pay I don't trust either.
Why is worst case a bad outcome? It's all a scam and if people invest in it or propagate it, they shouldn't expect anything else.
Maybe massive move to hydroponic farming done on sea rafts or something. Or on those whirling space stations with artificial gravity . 3d - printing food (if you believe in bioenergies first print some living tissue then kill it u done) is an option. Harvesting plankton is an option. Cultivating airborne plankton and such for protein is an option.

The guy is right (I know nothing about the guy himself): if the current trend continues we're left with desertation. We need soil - producing agriculture and
the current one is soil - destroying. It doesn't need to be economically viable in itself. It could be subsidized for common interest by the public sector.
I'm not entirely sure I can eloquently put it into words, but I cannot see how Grammarly could possibly be trustable or even how trust should play a role in the decision to use it.

I mean it's a service that basically tracks every word you write, and does so for what I consider a very small benefit. Even if you can trust Grammarly to be completely ethical today and in the future, no service can claim that it's completely secure from hacking.

All OSes have what is essentially the same service as Grammarly, without having to stream every word you type to a third-party service.
Those companies hire people who can code their way out of a paper bag.

Source: I managed to make a transition from UTC to TAI in a broker trader in 2009 when I was fresh out university.
Found them on HN randomly a year ago. I'm surprised Grammarly is still tolerated in most companies with their data collection policy.

A big bonus that LanguageTool has, is the seamless language switching. I can mix Czech and English texts and get right corrections for both.
I work for Intersection, a company behind LinkNYC kiosks deployed in New York City: http://link.nyc

The basic idea is that we have ~2000 kiosks deployed across all 5 boroughs. Each screen has 2 displays so that's ~4000 displays playing various ads. Kiosks also provide free Wi-Fi for the public, free phone service since they replaced the payphones, and there is an Android tablet that can be used for various online services such as applying for food stamps.

We have some kind of partnership setup with the city, and we also get money from ad plays. The business structure is a lot more complicated than that but I don't want to go into details because it's highly likely I'll say something wrong.

Like most things, it's a mixed bag. Working with hardware that's deployed in public changes the game in interesting ways. Things can break for so many different reasons since they interact with the physical world all the time.

There was a funny moment when we noticed one of the kiosks being down. It wasn't responding, we couldn't reach it over the network at all so we decided to take a look at it in the street and....it wasn't there. A 7-8 ft kiosk just disappeared off the street. We later found out that a truck smashed into it in the early morning and it was all cleaned up by the time we realized something was wrong.

Hot weather, cold weather, car traffic, people smashing kiosks with a baseball bat because they think wifi spreads covid, there are a lot of things that can break physical devices on the street and it's been fairly interesting dealing with it.

Bad stuff: Ad tech. I hate the whole advertising industry with a passion of a thousand suns. I have moral issues with it and every ad tech thing I touched is horrible from a technological standpoint.

Good stuff: It's interesting. I work on a ton of different stuff. I could be doing a lot of operations work for a while, then go develop a new service next week, then design a bunch of analytics so we can get more insight the following week. Engineering team is not huge and we all have to do everything. We are all remote and the company made sure to ship us all the hardware we need, which is nice.

Nice stuff: Free wifi covering most of the city is a useful thing for people. I'm happy we provide it and it's what makes me feel good about this. Kiosk tablets are also used by the poor and homeless to apply for various programs such as food stamps.

Tech: Nothing very surprising. Various single board computers, Linux, Python, Go, js, SQL, Ansible.
Nobody does it better than the Russian propaganda, specifically the export version. This is perhaps best summarized in the statement "don't believe anything until the Kremlin denies it". And it works so well, there is a non trivial portion of the population that believes obvious nonsense such as "Ukraine is west/NATO fault". It's amazing.

Say your nonsense and it will resonate with people. Some people.
The difference between ransomware/spyware/extortion/espionage and whistleblowing/free sharing of information is just one of perspective.
> - Assume you are being marketed to with any content they put out

"Man, I really want to make some side money"

"Good news! Look at my book|podcast|article|youtube|etc on how to do that!"

It's like writing a "how to get rich book" explaining you should write a "how to get rich book" to get rich... an informal/unstructured pyramid scheme.
You know what is significant? Building social housing for your entire population.

I've traveled a bit in my life and at the end of the day for the average untalented non rich person there's nowhere better than Northwestern Europe.
> We change our clocks twice a year by an hour I think we could handle an hour every millenia.

And how often does time code mess that up? We have leap years regularly every ~4 years, and how does time code mess that up?

And you think that a one-off event is going to go smoothly?
ohmygod sorry, i'll fix it right away, its suppose to be Get Started*
Airpods et al are actually the least shocking case of nonswappable batteries. Any battery would have to be removable while also protected, either electronically or by some mechanism that made accidental unscrewing unlikely, while also guarding against being swallowed as button batteries are. You would need a screw, and that would take a bit of space.

I suspect the best answer would just be to use 2.4v LTO batteries, which last long enough that non-replacability is acceptable. You lose some runtime, but make up for it with faster charging.

For everything else, we just need a better battery standard. Companies would use it, and if they didn't, you could just mandate that anyone making a device above a certain size had to use some open standard.

At the moment, 18650s and other cylindrical lithiums are the only reasonable choice, but they aren't really safe, and they are tied to Li-Ion, a chemistry we will hopefully move on from someday.

We could instead have an open version of what power tool companies have: smart batteries with i2c communication and protection built in.
> Getting replacement parts seems like a nightmare, if not impossible.

Why? Can't he just go on Aliexpress and order them or contact the manufacturer?
Hey, did I tell you I use Doric Arch? No MS here!
>then you'll end up with poor quality housing.

I’m not at all convinced this is something worth caring about. In most sectors of the economy it is possible to get low quality for low money.
Dishonesty and “culture of data manipulation” found in cancer research lab
It also repeatedly changes Smart Contracts to Intelligent Contracts.

I wish this were true.
> Manufacturers will dump in all sorts of tags, and check for them, when you read in, but the won't tell you what they are

True. As far as I know it could be also used for a vendor lock-in. If you export DICOM files from X, you have to use software Y. Since they are dumping all sorts of private tags which you don't know anything about.
This is exactly what big corporations ask for. In the pharmaceutical industry stakes are very high and directed attacks are common. It is just the next step securing your IT.

However, for private users these are dark capabilities.
No, people should pay taxes that they owe. Allowing people to hide income as a form of progressive taxation is inefficient and unjust. This kind of framing of everything as class war is such a terrible way to discuss policy.

I acknowledge that there are valid privacy grounds to oppose the move to cashless/less-cash. I just don't accept the argument that it should be easier for middle-class plumbers to not declare their income.
How so?

It’s in the interest of GitHub’s business not to leak private repositories. People give them money for the product.

Grammarly is a keylogger masquerading as a free writing aid. Fundamentally fishy.
Only because he didn’t declare himself candidate. Actually the vitriol seems very much oriented, in French newspapers, it’s unnatural.

He doesn’t do a tenth of Jeff Bezos’ evils and journalists are not talking about Jeff Bezos’ actions on national TV.
> Yeah, one hour. Whoops.

I think your comment is a precursor to what would happen if we tried to get a one-off event right…
Good API Error Copy
eBay has programs to bring these things online:

https://www.ebayforcharity.org/how-it-works

Emmaus seem to appear independantly by location:

https://www.charity.ebay.co.uk/charity/i/Emmaus-Cambridge/20...
How else do you move things around a farm? Diesel trucks are also a waste and don't come with a hydraulic dump bed unless you spend a lot more than the $7k he paid.
I turned 10k into 300k without doing any of the above in 6 months.

You need to fight your biases.
> I hope you're not thinking about forcing people into this

Of course not. Forcing people to volunteer is... not effective long term.

Anyway, I long since left that Texas city which gave me the idea. I know amateur and professional sporting happens all around, but I don't encounter it much (so I forgot about the idea until now). I'm onto other things, although I still think this is a good idea. I know some churches organize their members to do good community services periodically, so I don't think it's a stretch to imagine sporting communities to make a routine of doing the same.
That's probably also why we don't have a real gun emoji (or it's rendered as a water pistol in many places).
Although guns aren't the nicest invention, they are real and sometimes need to be represented graphically.
>I should pause here and point out that an interview at Apple was an all-day affair. Pairs of engineers would meet with and interview me for perhaps an hour. The first pair of engineers might grill me on some esoteric topic like code design, afterwards the next pair of engineers would sit down and maybe cover programming language specific questions.

This took place in 1995, and sounds pretty much exactly like a technical interview panel today. Were people similarly disgruntled about the process back then? The author certainly doesn’t come across that way.
Yeah I totally would like all "doomsday scenarios" in my company, non ironically.
Every social media product eventually gets out of fashion for the current generation and gets taken over and Meta knew that decades ago for Facebook. They have another 10+ years of relevance due to Instagram.

> They'll have a much harder time with TikTok. Tiktok's secret juice isn't the Slightly-Longer-Vines. It's the recommendation algorithm. It's INCREDIBLY addictive.

As long as the corporations, large advertisers, existing influencers and celebrities and mainstream media, keep paying big money to TikTok to game the algorithm and flood their content, ads on there to reach more users, the ruining of TikTok will happen, just like it did with Facebook, Instagram, YouTube, Reddit, etc and the users will always be in last vs the ones who can pay big money.

I predict that TikTok will screw its users over (which it is already doing) due to investor, advertiser pressure to keep it up and this would definitely happen after they IPO to give them a return. The longer they postpone the IPO, it will get worse it for them and especially the users.

It doesn't matter if it is Instagram. If they can't do it will be from someone else. It is the same old power law happening again. The early users who got addicted to it will complain that TikTok is ruining the platform and will no longer feel addicted anymore and leave to find the next addictive hit. The late users will follow suit leaving it to the bots to pick up the pieces.

Rinse and repeat for 'current trend'.
Installing an aftermarket windshield stateside might also make shipping bit easier.
I've never even looked into Grammarly but I just assumed that they'd store everything I type. Not even worth looking into for the sake of my security.
How can you run it on your own server?
what's stopping someone from taking photos of your precious document and posting them on 4chan?

nothing. there's nothing you can do to stop that.
They also help a lot for people whose native language isn't English.
Is it possible to use languagetool in any application, such as grammarly?
I recently sent a US national wire transfer (known as ACH) from my bank account to my account in another bank. Took two weeks.
the users never care

The builders do

If you’re in the tech field and aren’t worried about privacy, the. I don’t even know what to tell you.
I was going to mention this - it can be a very cultural thing.

Where I'm from (Norway), job hopping every year or every two years, would look real bad. Software Engineering IS a bit more forgiving, but you're still going to get asked "why have you switched jobs five times, since you graduated in 2017?".

In fact, there's a real chance you wouldn't even land an interview. The employer is going to assume one or more of the following things

A) The person gets easily bored, and constantly needs fresh and stimulating work.

B) The person does not (easily) get along with people, or has problems with settling at a workplace.

C) The person is constantly being let go / can't hold a job.

D) The person is very salary/compensation focused, and will jump ship on the first chance.

Hopefully some of these things will be uncovered when contacting references - but there are lots and lots of former employers that will cover up for a bad hire, just to be polite. Or the bad hire is very good at picking people to use as a reference.

So you're kind of stuck with a candidate that's either job hopping because they want to "level up" as far as salary goes, or some other underlying reason they can't stay.

If tenure over 1-2 years is of no importance, then that's obviously not a big deal. There are businesses, ranging from startups to mega corps, that just need warm bodies to power the various projects - easy come, easy go. Be productive from day 1, and work them as much as they can.

But for highly specialized firms and positions, where you spend the first N years on training, job-hopping candidates could be completely unacceptable.
JNI and Unsafe also exist, it isn't only about the language alone.
But the initial loading is traceable. wires are completely traceable. Gift cards above $100 or so in many jurisdictions require tracing (and while they are more easily exchanged / tumbled / whatever than credit cards, that's still a hard problem).
Brit here.

It infuriates me that the BBC World Service insists on announcing the time as "<something> GMT", pronounced in a smug tone of voice. The GMT timescale no longer exists; nobody broadcasts it. What the announcers are broadcasting is the BBC's ignorance. I find it embarrassing and jingoistic.

They've also adopted an idiosyncratic way of pronouncing the time itself: "The time is Four, GMT". Everyone else says "Four O'clock", or "four hundred hours" or "four AM". The Beeb are almost completely immune to complaints; they've outsourced their complaints department, and the contractor's brief is to make sure no complaints reach programme makers.
Some people, when they progress in their career, are rewarded with extra money, others with a sense of smug self-satisfaction in knowing that they are an expert. Different people like different things and optimize accordingly.
> I know, they didn't have address pins on the 40-pin package.

You are right that doesn't have to be a limitation on internal architecture: The 386SX internally had the 386's 32-bit data bus only 24 bits were carried out to the external pins. This, along with squeezing the 32-bit data lines through a 16-bit data bus by doubling up requests, made it able to be used on cheaper motherboards based on 286 designs.

I'm not sure that this would have made enough difference to be worth the cost of the extra silicon at that time of the 8086's design though. While a flatter and more roomy address space would have been convenient to developers there would be little or no benefit for end users. The 386SX was a success because it could run software intended for the original 386 (then renamed 386DX) on cheaper hardware (and had the same MMU allowing virtual memory so could run larger software then it's 16Mb physical RAM limit made possible, at a further performance cost). Also the extra silicon requirements were not as expensive at the time the 386SX was being designed as when the 8086 was.

In fact there was a chip that did similar for the 8086: the 8088. It had an 8-but external address bus and broke up 16-bit requests to make them over it. Though unlike the 386SX it maintained the same address bus of its relative.
And the processor etc are under the operating system.
Man, it's been a decade. Even if the drive had been stored inside it might show some damage by now. Can't imagine what being thrown around and getting buried in a landfill would do to it.
> compensation committee whose very goal is to regress everybody to the mean

DEIA is also being used as the reason for a lot of this push. Instead of raising salaries to equitable levels, they want to bring people down.
And disappointingly, all emojis used for sexual inuendo are excluded from the emoji kitchen.

The sexual inuendo combos may probably be some of the most used combos other than the official ones.

The prudishness really is disappointing.
It's not preteen, it's corporate.
https://github.com/languagetool-org/languagetool
It has JNI, Unsafe, and incoming, Panama.

All provide ways to shoot yourself if not used properly.
Yeah, if you brag about inclusivity you are anything but, by default, IMO.
Then you must try Freibug: more sun, more happy faces, relatively well connected, and other good subjective feelings.
Might be worth submitting separately on HN :)
Among that, the TPM enables verification of a particular state of your system, i.e., a particular set of binaries and OS configuration.
Simplifying the description of the process a bit - at every bootup it checks the checksum of all programs loaded at every boot stage (UEFI, kernel, userspace) with respect to one that is known to be approved - process called "attestation".

So in worst case, if your attestation server is very strict, any new binary installed on your machine will prevent it from booting or satisfying the attestation.
This is the main concern that TPM enables.
You should decouple existing from experiencing it. Me too, like you, don't want to experience what I consider malware, spam, etc.

The problem is that malware and spam have gray areas where some people are ok with it, but others don't.

We should allow all of those existing, and instead limit what we experience by filtering/censoring

In other words, instead of censoring globally, we should censor locally at a community level