skysight-inc/HackerNews huggingface dataset:
> It is not a fundamental freedom nor human right to be able to anonymously transfer money.

So? I still want to be able to do it, as I can with physical cash.

Besides, "fundamental freedom" and "human right" are semantic social constructs — what counts or not is quite malleable from polity to polity. Actual rights are natural rights, as in things that no one can realistically stop you from doing (suicide is perhaps the best example as the extreme of bodily autonomy; free speech somewhat falls into this category but it gets political as soon as there are publishing media involved beyond literal vocal speech)
Why, indeed.
That doesn't change the fact FPGAs have stupid high yields.
What increased enmity are you referring to? Similar to the War on Christmas and other talking points, I never experience any of this.
Prove me wrong designing a good native Windows application according to customer's UI/UX guidelines by religiously following TDD.

Replace Windows by favourite desktop, mobile or console OS.
Minor nitpick, but wouldn't doxxing come before swatting? You sort of need to figure out where they live before that can be pulled off.
> Although his exploit used some memory corruptions, the vulnerable code was written in a memory-safe programming language: JavaScript!

That's not really anything new. There was what amounts to an "ACL" issue at the JS level, which exposed the vulnerable C++ code. Sort of like if you have a vulnerable web app behind an improperly configured firewall - you wouldn't say you exploited the firewall though if you owned the service behind it, although you could say that you exploited both.

VMs using unsafe languages have always had this problem. QEMU has this, V8, JVM, Flash, etc.

> This post looked at a great vulnerability demonstrating that even if you replace existing code with JavaScript, you could still be prone to memory corruption.

Well, no one replaced anything with javascript. It's a javascript VM. If it were a C VM the issue wouldn't be any better or worse, "attacker is executing code in the VM" is the assumed situation.

So yeah I think it's totally fine and good to say that VMs make for interesting exploit chains across languages and runtimes - that's for sure true and one of the biggest issues with implementing safe VMs (sharing memory across runtimes, needing to keep memory as RWX, all sorts of nutty stuff). But what we see here is exactly the same standard thing we always see - an unsafe C++ program did unsafe things with untrusted input.
Heavy rain after a drought can cause flash floods because the hardened soil won't absorb the rain quickly (as illustrated in the video).

The video is from Dr Rob Thompson - a Meteorologist from the University of Reading in the UK. A tweet about the video here:

Rob Thompson: https://twitter.com/R0b1et/status/1557034641445486592
Huh? Ron Jeffries is a champion of TDD (see for instance https://ronjeffries.com/articles/019-01ff/tdd-one-word/). He most certainly wasn't deliberately implementing Sudoku in a stupid way to make TDD look bad!
Yeah I guess “has a 1420mAh battery instead of 1200 mAh” battery would be statement of “better” if you didn’t want to get overly pedantic.
You must be in your 90s? And white? Because what you describe has not been a reality for minorities, ever, and certainly not within the lifetime of most people alive today.

Cash bills have had serial numbers for decades. The Western governments have had the technical ability to track cash transactions for decades.
> So you will lose messages.

This is true but you can store your messages inside your database and on reconnect you can fetch the messages you missed.
It's not, really – AFAIK the audio is just AES-encypted with a per-session key that you get when logging in (but it's been a long time since I looked). There are a bunch of open implementations, like https://github.com/librespot-org/librespot – I guess it's kind of an open secret that you could rip music if you really wanted to, and you certainly used to be able to do that with libspotify when it was still around. I imagine the lawyers will come for you if you're silly enough to bang on about it.

Certainly there's no need for "special hardware decoders" – Spotify works on loads of devices that have no support for that kind of thing.
Ransomware groups have been using Monero and Bitcoin as well, it isn't like Tornado was a unique player. I seriously doubt that with Tornado banned suddenly money laundering and hacking will stop. If anything it will make regulators' life harder as it will all now disperse into other tools rather being centralized into a single place, and hardcore cypherpunks will be more motivated to build even better tools.
It'll be interesting to see what Apple does. Producing a single die M2 Max on a new process is likely to have terrible yields.
The positive framing of this phenomenon is strange. Someone muting his criticism against an open segregationist because his voters buy sneakers is probably one of the more cartoonish examples of market logic and self-interest crowding out people's values.

And I mean this even in a value neutral sense in regards to the topic itself. It's as if a devout Christian would start selling abortion pills or a pacifist became an arms dealer.

When the article uses the phrase 'tribalism' it seems to me they just mean 'political'. People have started to prioritize values over economic calculus again after the monoculture of the 90s, which this kind of a thing was a product of.
2022 Guide to Flask with a Blueprint
Why would they care whether I continue to develop it or not? I thought the code wasn't sanctioned.
End up like this guy: https://m.youtube.com/watch?v=ghv31AUufNk
Interesting. I have used HATEOAS for a REST API. All requests were signed with a shared (between client and server) secret key. The shared secret keys were all associated with permissions to resource actions.

In this case, the URLs never included anything in the route path that would have let you know that a user could execute an action. Instead, resource actions were limited to/owned by the shared key. A request to a route that had a different secret key owner would simply fail authorization unless the signature matched. The authorization headers included the API_ID that let the server side know which secret key to use to check the signature.

This felt pretty good to me at the time - I basically looked at what AWS was doing with REST signatures and implemented a version of that for my purposes.
The Micro PC is a really cool device, but owning one I couldn't really recommend it outside a very small niche.

Form factor, ports, and performance are all great. The firmware is very frustrating though. Mine shipped with a newer firmware (4.18) than was available to download, and it was miserable. The machine would power on to blank screens, and have random crashes. I was wary of downgrading because I couldn't put the "newer" firmware back on.

Finally gave in and stability was much improved on 4.13. Boot issues still happen though (less frequently). They seem possibly exasperated by Linux. It can require 3 or 4 attempts at holding the power button to force a reset. Unplug anything that could be back-feeding power so it will actually reset (not confirmed). Just all around annoying if you power it on and off a lot.

Other issues to consider. The hinge support is somewhat fragile. I try to be gentle opening and closing. I think I also put some epoxy around the plastic screwhole pillar. The battery has a permanent over-discharge cutoff that a number of users have hit so I've been careful to keep a charge on it.
I don't do Windows work, I don't do UI/UX and I do not religiously follow TDD. TDD is a tool, just like other tools I know when it applies to a scenario and when it applies I know what it's helping me with.
Just as note: Baylisascaris procyonis can stunt grow and brain development in children and is related in part with the "redneck stereotype".
Blazor Server is a pretty good websockets based framework for rich web applications.

(Source: I have one deployed as a SaaS app)
People have been charged with assault for the use of a loudspeaker. If it's loud enough to damage hearing than that's physical harm and thus assault.
Lemme give it a shot:

Cookie Monster (includes Black Metal)

Hardcore (see Pantera)

Metal (see Metallica)

Crap (see Poison)
He shouldn't be too upset, views and video quality only have a very rough correlation if at all. It shouldn't be surprising that his most accessible video is his most watched one.
It seems like if you want privacy, the first step is to not use a public ledger.
That isn't how it is sold.

It only works for basic use cases and conference talks.
John Carmack's view [0] on debuggers (from Lex Fridman Podcast podcast video)

TLDR: He doesn't understand why a lot of SV big-tech companies are hostile to debuggers.

[0] https://youtu.be/I845O57ZSy4?t=3410
IMO the same is true of Tornado Cash and digital currency in general, even though it is often overused by criminals. I have heard strong arguments for each of the following being used primarily or only by criminals:

* Tor & encrypted messengers: the whole "going dark" paranoia from mid-2010s

* Knives, guns, explosives: mass shootings and domestic terrorists; "nobody needs military style weapons"

* recreational drugs: see the War on Drugs which is really a war on poor non-White people

* cash: see the death of the €500 note

* masks: see the anti-mask laws intended to target the KKK

Note that I'm not claiming that society should never be able to regulate tools. Certainly I don't want the disturbed guy down the street making Ricin in his garage. We should keep in mind though that the tools themselves are value-neutral; it is the people who use them that give them a value.
Lots of FedNow jobs, if this sounds interesting. I have friends who have worked at the Fed and it's a pretty decent gig.

https://rb.wd5.myworkdayjobs.com/en-US/FRS/details/FedNow-In...

Plus -- how many other large tech employers have a real police department to guard their giant pile of gold? https://www.federalreserve.gov/faqs/does-the-federal-reserve...
Spotify DRM is basically security through obscurity. It's just AES-128-CTR over a plain old OGG file. The tricky part is figuring out the extremely odd protocol you have to request audio keys and track data through. That's all.
Raindrop is superb. One of my favorite "tiny apps". It just works.

One of its nicest features is that it can function as a mini-browser. For example, let's say you're working on a project where you need to have a lot of different sites open for documentation, guides, references and so on. Instead of opening them as tabs in a browser, you can bookmark them in Raindrop and then use Raindrop as the browser.
Apple was _years_ away from having the first wireless earbuds. I had The Bragi headphones (not Headphones) like 3 years before the AirPods got even announced. With basically all features sans handover but with an internal MP3 player and waterproof. Those were amazing but also somewhat clunky. But they were definitively long before Apple entered that market
Looks great, we are using angular, but would like to give a try
> provide a specific example of a futuristic European social media tech company implementing this futuristic policy

Huh? What "futuristic policy" -- the "futuristic policy" of not accepting something as moronically easily-fakeable as "company letterhead" for ID? That's not a "policy", it's just common sense. You should try that over on the other side of the Atlantic some time.

And it has nothing to do with "social media tech company"; I've never heard of any European company accepting something as moronically easily-fakeable as "company letterhead" for ID. Which is why I wrote "is an American company", not "is an American social media tech company".
Must be a corporate decision then - maybe they're trying to promote "Kroger Pay" which I can't imagine has much adoption (https://www.kroger.com/f/kroger-mobile-pay-faqs)
"Better not hop on a city bike with it in my backpack, ’cause what if I fall?"

How often do people fall on bikes? I biked for years in SF with my work laptop and never had an issue.
HN readers may also recognize Byran Cantrill from his famous rant about Oracle, which is frequently cited here: https://youtu.be/-zRN7XLCRhc?t=1980
I meant by default. The title of this paper I'm commenting on should make it clear, but sorry if it wasn't.
Sounds like you got a persecution complex if you believe whites are receiving any real hostility in the US. But comments like this don't surprise me anymore on HN. HN is surprisingly conservative. I guess lots of rich white people here, and lots of people who want to be a rich white person.
Can you point me to your references that indicate HDDs running Solaris are the only ones prone to loud noises disrupting their mechanical nature?
You're right. And in this case "as they wish" is actually "as the US government wishes." I'm not sure they have a choice here.
Best Cold Email Guide for Agencies in 2022
I see that you worked on Firebase's Realtime database back in the day. How did your team handle such cases?
It's happening. https://lwn.net/Articles/879724/
If you earn a reasonable amount in any country you can save for retirement. If you start young you can save way more than you need. It will mean buying a house that much cheaper than the best you can afford. You'll probably have to budget so you can keep track of your money.

If look at this study https://www.ramseysolutions.com/retirement/the-national-stud... most got wealthy by saving. These are not billionaires but they will have very comfortable retirements.
Fully customize your Instagram feed
As I see demo map[0] uses OpenStreetMap Data, but in such case on demo map page[0] there should be copyright[1] info.

[0] https://ckochis.com/webgl-map-demo

[1] https://www.openstreetmap.org/copyright
If the computer hasn't learned how to solve the problem on its own, is the problem really solved?
Darning is actually very easy, give it a go on your least favorite pair! You could also patch socks but I don't think they'd be comfortable afterward.
Requires a bit more code, but I do find this compromise attractive. Let's try to make this the default.
> Well, SQL queries are still written in code as text.
> But I think you must be referring to the visualizers that many db tools have

No no, I really mean SQL text, writing SQL is fine and writing source code, too - I don't have problem with using text to manipulate the program. The problem is when the program is defined by source text.

Let's say a program would just be a single file SQLite database and I'd use text editor and some query console to edit it - that's a rough idea. I can write a function by hand like I do now, but the function is not saved as the literal text, it's saved as few rows in the database. Refactoring is then just running some SQL against that.

IDEs already maintain such a database in memory but they are limited by the textual sources quite a lot (especially when metaprogramming is involved). If you drop textual sources and define the program by the database directly, many IDE features become much simpler to do and accessible to the programmer directly.

I think a really good idea of the direction is the Dion demo somebody posted here. They don't have any scriptability built in, but the idea is very similar.
https://media.handmade-seattle.com/dion-systems/
I view them as different in that this is about your personal identity. An example, is if a Republican Governor commits a crime -- should I care? Not really, it doesn't change the party platform. Maybe a minor impact associated with their chance at re-election. But when your identity is caught up with party, now you start to defend the governer purely because of their party. It's not simply a party affiliation, but your identity.

This is much larger and intractable than partisanship.
you need a queue to do that properly, do your users have to manage that queue?
Look no further than the rest of the comments on this post explaining how Jordan was wrong.
Unless your tables and column names are constrained to 8 characters. =/
Somehow, I am associating Self-Determination Theory with ACT -- acceptance and committment therapy. In any event, 'acceptance' and 'committment' appear pertinent to many comments here.
Unfortunately, details like that are considered IP and kept secret. Sometimes there's a press release that gives some sort of metric somewhat related to density. But only when that metric happens to make that company's process look good relative to others.
Am I wrong in understanding that some of these capabilities sounds similar to what mnesia offers?

https://www.erlang.org/doc/man/mnesia.html
My news-savy neighbour's strategy was to combine several sources, Channel 4[0], Al Jazeera, <can't remember> and sheepishly, RT (this was mid-2000's). He rationalised the last one as not being a reliable source, but as a way of seeing what others weren't covering. Al Jazeera is great for anything outside Qatar's interest and their early days included actually talking to real Israelis which was something not seen in most of the Middle East at that time.

It's much better if you can get an outside perspective. The right wing papers in the UK were selling Brexit as the sunlit uplands. The leading right wing paper in Canada, the Globe & Mail, called Brexit the height of stupidity. Judge for yourself which sources were better.

Double down on external sources with that second language that you've been meaning to learn. Lazy propaganda doesn't cross language barriers very well, so it stands out - almost as much as promoted content in English on a non-English Reddit sub. (but first, learn the words for "wounded" and "killed" as they are in half the headlines)

Sources change, too. The BBC used to strive for impartiality. Now, their national news spouts the government line, but the regional news hasn't got the memo and regularly runs critical pieces. I think the World Service is still it's own unit.

[0] https://www.channel4.com/news/
Retool Mobile Private Beta
I think you're missing my point! I'm not saying that the law doesn't actually require this; I'm just saying that there's nothing in general saying that something printed on every bill has to be true. In this case, it happens to be, but saying that it's printed on the bill isn't what proves it.
It protects you from going to jail for hosting this code on your own git instance. And GitHub isn't obligated to publish your speech, and you can't use the FA to compel it to do so.

If you could, I'd be getting in line to get my fifteen minutes of airtime on the telly.
Oh man, this is been my exact experience. You can pretty much chart the growth of a company by watching how much marketing is done with in house teams and how much goes to external agencies.

And as soon as the external agencies are involved, they want as much control as possible. I don’t blame them: setting up DNS entries for some stupid marketing site rarely rises to anyones priorities. So they route around internal controls. Everyone is happier, and everything gets slightly worse.
I'm almost positive Joe Armstrong has some version of this quote. I couldn't find it, though.
My feelings are far less complicated: TDD is a high-discipline approach to software development, and that's why it doesn't work or doesn't get done.

High-discipline meaning, it entirely depends on highly competent developers (able to produce clean code, deep understanding of programming), rigorously disciplined out of pure intrinsic motivation, and even able to do this under peak pressure.

Which is not at all how most software is built today. Specs are shit so you gradually find out what it needs to do. Most coders are bread programmers and I don't mean that in any insulting way. They barely get by getting anything to work. Most projects are under very high time pressure, shit needs to get delivered and as fast as possible. Code being written in such a way that it's not really testable. We think in 2 week sprints which means anything long term is pretty much ignored.

In such an environment, the shortest path is taken. And since updating your tests is also something you can skip, coverage will sink. Bugs escape the test suite and the belief in the point of TDD crumbles. Like a broken window effect.

My point is not against TDD. It's against ivory tower thinking that does not take into account a typical messy real world situation.

I've noticed a major shift in the last decade. We used to think like this, in TDD, in documenting things with UML, in reasoning about design patterns. It feels like we lost it all, as if it's all totally irrelevant now. The paradigm is now hyper speed. Deliver. Fast. In any way you can.

This short-sighted approach leading to long term catastrophe? Not even that seems to matter anymore, as the thing you're working on has the shelf life of fish. It seems to be business as usual to replace everything in about 3-5 years.

The world is really, really fast now.
At least to me, doxxing implies publicizing their info. Using it privately to call a SWAT team is orthogonal to publicizing.
The report they cite isn't even sure that the myth exists:

> From a pragmatic perspective, the concerning implications of these results are moderated by a number of methodological aspects of the reported studies. Most used convenience sampling with small samples and did not report critical measures of study quality. It was unclear whether participants fully understood that they were specifically being asked about the matching of instruction to Learning Styles, or whether the questions asked could be interpreted as referring to a broader interpretation of the theory. These findings suggest that the concern expressed about belief in Learning Styles may not be fully supported by current evidence, and highlight the need to undertake further research on the objective use of matching instruction to specific Learning Styles.

So, they may just be talking past each other. Is it possible to express ideas with both words and visuals? Is doing both a good idea? Does a person always learn every idea best by only being taught with a specific style?

edit: the lady they link to as calling the debunkers racist seems to have a good grasp of things to me:

> The debunkers' core claim is based on what's known as the meshing (or matching) hypothesis –– the idea that if learning styles exist, experiments should show that students will always learn better if taught in their preferred style. But in defining learning styles (a theory about the brain) as equivalent to the matching hypothesis (a theory about instruction) the debunkers have created a straw man. As Kozhevnikov points out, "the fact that a simple version of the matching hypothesis – which rests on the assumption that a given person can be characterized by a single type of style, independent of the task –– has not been supported does not imply that the concept of cognitive style itself is invalid."
> So it's not clear that your proposed "do people's taxes, leave it up to them whether to acquiesce or not" plan is good for consumers overall.

I disagree, if you want clarity, look at other countries (e.g. UK) that already do this kind of thing. There is no "how can we know?" argument to be made. And IMHO, It's so much better for consumers overall.
I don’t think that’s true — there’s second order effects in play, beyond shallow virtue signaling.

People respect Jordan unlike Kapernick or James, because Jordan didn’t hypocritically involve himself in politics — unlike those two who haven been outspoken against racism and slavery… except for the slaves making the shoes they advertise. They’re perfectly fine profiting from those slaves.

- - - - -

I also think your example is ridiculous: not vocally criticizing is nothing like actively participating.
> Neither do mixers.

Let's be honest with ourselves. Mixers are used primarily for crypto transaction laundering.
I do have it hanging in my office rather than my bedroom. I wouldn't recommend putting it in the bedroom unless one's spouse is also a sysadmin.