skysight-inc/HackerNews huggingface dataset:
Sled and thrussh are not production grade. I don’t particularly want to delve into details as I think the effort is laudable. I can explain my position in private if need be.
Has somebody already found the access level required to make IntelliJ accept this new kind of token?
Eh, it might be the only meaningful issue with the borrow checker, but the language itself has more issues than just that. I adore rust and have done for years, but I also see it as a stepping stone language and worry about it gaining too much adoption
This is not as bad as it reads. Understand that the top brass in the DoD are extremely loyal to the country, loyalty and trust is crucial in the officer corps (in the US at least).

Once you get that star (or whatever the equivalent is for the navy) you are basically a US officer for life. Retired Generals and Admirals can and do get called upon by the government when they are needed. They are considered highly experienced professionals that the government can trust. They are not "in" the system, they are the system.

I would expect that the DoD keeps tabs on these officers. While the oil money may be nice, make no mistake, the US government is the wealthiest organization on the planet. These officers understand who the real provider is.
It's an art of its own where you need to account for absolutely everything. Like does the 0.1C fluctuation on your sensor is actual change or just the noise of the sensor flipping the last bit or two of the ADC ? Hell, in right conditions you can use that noise to extract extra resolution over time.

Or how vibration on a cable can induce sensor noise because you have 2 conductors in a long line creating capacitor with capacity modulated by vibration and because of that change of capacitance there is a current induced in it.

Or how every sensor is a temperature sensor and anything else it senses is just extra.
Even before this announcement I had to set an expiration date on my GitHub tokens….
>Sure as hell though, if I move ssh off of port 22 then the number of folk trying to guess passwords drops to zero, instantly.

But not for very long. But it doesn't matter, but for log annoyances.
Definitely. I think it is even better than "Tinker Tailor Soldier Spy" (also with Alec Guinness). The execution, the acting, the plot, the screenplay, everything is just marvelous.
We are all actors in a system, but that has nothing to do with it
Google Authenticator is bad software. Use a password manager to store 2FA codes.
Oh my goodness, absolutely.

You're not going to edit a feature film on it, but for anything that's just filming a few minutes of different things and editing then together and posting/sending it wherever, it's a godsend.

Whether you're a professional actor taping a last-minute audition from your hotel room, a sales manager putting together an instructional video on site, or a high schooler putting together a classroom project.
Cost. I mean an extra phone number isn't free. 40$ a month just to get around people asking for your phone number.
The main reason to use HTTP access tokens is just for the more flexible user-facing functionality. Security-wise, the issue is (to me) not totally clear-cut.

Yes, with HTTP access tokens, you do have to transmit the plaintext each time. (OIDC would be much better, but The Industry Powers That Be decided that non-interactive networked clients had no need to benefit from federated identity and temporary tokens) But the attack vectors (broadly) are 1. at-rest storage (credential managers are good enough, I think) and 2. HTTPS MITM. If the attacker can somehow manage an HTTPS MITM, they get the plaintext token, and can then attack that account offline for as long as the token is valid. It's definitely not easy to HTTPS MITM, but the protocol is much larger and more complicated than SSH, so vulnerabilities are more likely. State actors can do it trivially, of course (though this wouldn't be the case if we hadn't thrown HTTP Client Certificates out with the bathwater!!).

SSH private keys are technically superior, because like you say, the private key can be unexposed (if you use a hardware token etc). This means that the attack vector left is SSH MITM. If the attacker can pull this off, they can only attack when you are connecting, because they don't have your private key to perform arbitrary offline attacks. But how likely is MITM? Well, when was the last time you verified the host keys of GitHub.com? How did you verify it? Are you absolutely sure it was correct, and the host keys transmitted during your initial SSH connection weren't a MITM? Even if they were correct, can the attacker still MITM you? Well, what if they disconnect each of your connection attempts, until you try from a different user/computer, or just remove or disable your host key cache? They might re-try the attack then, and hope you don't verify the host keys this time. All this assuming you didn't globally remove the host key checks in your SSH config (for example, if you connect to a lot of work hosts and you got annoyed by host key verification so you disabled it? maybe some automation script in a ci/cd process is doing this?)

Ultimately the decision of which to use rests with you. Personally, I already rely on HTTPS for most of my security on the internet, so I might as well rely on it for my code, and gain some extra functionality/convenience. But I do wish the HTTPS method used OIDC, and the SSH method had more fine-grained controls.
If it was a real computer with a 'real OS', I'd be able to easily set up network shares and transfer files over wifi, without even plugging a cable in.
Seeing like a state is a terrific book.

It's possible that I learned the idea of forest death from it rather than a college class.[1] The German word for it is waldsterben and there seem to be few English language resources about it.[3]

My recollection is that monoculture forests promote forest death. Diversity is critical to a thriving forest.

[1] Or both. I was an Environmental Resource Management major.

[2] https://news.ycombinator.com/item?id=30749891
The proverbial genie is out of the bottle I think. Anyone with a high school chemistry set can engage in these same types of experiments. There are even tutorials for biohacking w/ CRISPR on YouTube.
Selection bias. Nobody who doesn't normally drive in a lackadaisical manner or values their time drops their kid off at school or picks them up if they can help it.
If you know what Turing complete means, and what a universal Turing machine is and can do, and that we are examples of such, then you must realise that’s not true. Provably. Unless you’re a dualist of some sort and believe thinking is some sort of spiritual woo, in which case I can’t help you. But I can imagine what that’s like (see what I did there?).

Seriously, there are sensory experiences I can’t have, but in principle no thoughts that are intractable to analysis and understanding given enough information.
Oh this is intersting, it's a local android app that does the same as PiHole/NextDNS/Blockada. Being on F-Droid and the ability to host your upstream DNS are pretty nice.
I read Call for the Dead and unfortunately found it pretty boring. Do you think I would probably also find Smileys People boring?
> then someone comes along and just assumes the answer as if there hasn't been decades of discourse about this exact thing.

I'd think that would present itself as a rather pleasant opportunity for any bypassing philosopher to stop and teach them about the "decades of discourse" on it rather than being annoyed?
> And why would I care about that as an employee?

You don't, the company cares. And whether or not you're a part of that company affects how much you care.

> It is ridiculous to assume I should have interest in helping you make me work harder for the same amount of pay.

You are making yourself work harder. Not the company.

I guess we're having a miscommunication here because you're thinking in terms of "value of labour" and all that cruft.

> So there's this pool of magical workers who can do twice the amount of work for the same salary as the current employee ...

We have people on our team who don't know what CSV files are, and who spend 3 or 4 days on typing out things from spreadsheets, rather than using copy paste. Labour is not inherently valuable for the sake of labour.

The value from a software engineer isn't from hours worked. It's the quality of the result. Man is more than machine.

As long as you can produce twice as much quality software from two companies, then there's no issue with moonlighting a job.

But I'm saying that you're painting yourself into a corner, because now you have to negotiate and do all the "non-labour-related" BS twice as much, and I would argue that the quality of your output degrades, not improves.

It would be more effective to double your money with the current employer as it gives you and them (and you) more space, vacation, room to slow down and speed up when you need, etc.
I lived in Amsterdam for several years, then went back to a mostly-bicycle-ignorant country. And, boy, do I miss the infrastructure for biking! You simply never feel like you're missing out on anything by not having a car. Plus, your health and stamina improve by having routine aerobic activity every day :-)
They would have loved to, but BU's proposed BSL4 lab got blocked back in the early 2000's because, well, they wanted to put it in the heart of Roxbury. And considering that they've had at least one or two leaks from their existing BSL3 facilities in Boston, that struck folks nearby as...well, not the best place to put a BSL4 (especially a handful of years after the Anthrax releases traced as originating from Ft. Dietrich in the wake of 9/11).

There are things that you COULD do with scientific procedure that would absolutely have some beneficial results where the potential human cost is simply too high to ethically justify (for example, see: a ton of science performed under the Third Reich). Perhaps some day we can do some of this work in a safe manner off-planet (ideally, without even needing humans on board the platforms where the virii are being manipulated). We're not there yet, and ethicists need to be willing to step in to keep things in check.
Oh my god, round and round on this topic. Leave it alone. Copilot is an amazing tool and demo of what AI can do. I will happily pay for good ML products, which a notoriously hard area to monetize.

Copilot may produce results from the training set, but if you're letting it do that, that says more about you than about copilot.

All of these claims use the example "Write me a function to foo the bar that takes baz as an argument". If you prompt it to write entire functions and classes for you, then it will lean on its training set.

But if you actually just write code, then it will complete small single lines in exactly the style you've previously written. With code that is unique to your program because it can synthesize new code.

In this role copilot is no different than a search engine. By prompting it lazily, copilot isn't the one stealing the code, you are.
There are only two kinds of relation here, “subset of” and “instance of” (aka “element of”, type-token).

The category-category relations are intended to always be a subset relation. The article-category relations are intended to always be an instance-of relation.

- "19th century American writers" is a subset of "American writers“.

=> Both are a category, so no problem.

- “Novelists” is a subset of “Writers”.

=> Both are a category, so no problem.

- “Writer(s)” is an instance of “Occupation”.

=> Here the problem is that “Writers” is a category. It would be okay if it was an article “Writer (occupation)”.

- “Writers” is an instance of “Categories with more than 100 entries".

=> Here, again, the problem is that “Writers” is a category, and having an instance-of relation between categories is not an intended/supported use-case.

This could conceivably be solved by supporting an instance-of relation between categories, in addition to the existing subset (subcategory) relation. It could be called a meta-category relation. Then you could have the category of occupation categories.

Another way to put this is that categories have to be typed: a category contains either (just) articles, or it contains (just) categories. Subcategories then must match the type of their supercategories and correspondingly must contain either articles or categories.

Basically, Wikipedia’s type system is not expressive enough to allow everything people would want to express in it.
The algorithm: Mapping long-term trends and short-term change at multiple scales
OK, then walk out the window of my old apartment.

I see it as being on the third floor, but that's only my brain lying to me, right?
Unfortunately the politics makes it comforting to believe (even though all the evidence points to natural origin - explained at length here and elsewhere).

It is so much easier to believe that the bad thing was made by bad people somewhere else, instead of confronting the reality that in fact we did it with our ever greater encroachment on the last remaining natural reservoirs - and will do it again, probably soon.
Don't give them too much credit, they aren't reading Chomskey by and large or else you'd see a revolution.
Yeah, but Rust guarantees sanity by design. Sanitizers are a patch, and hence not comprehensive.
Let me guess you work at Amazon.
I don't think they will, It'll serve as the Wii Sports of Oculus. Something free that everyone either has or has tried and got bored after a month.
Amazon workers reject union bid in upstate New York
Yes. Perhaps like Telegram refers to an important earlier communication medium.
Fulfillment of Librem 5 orders has notoriously been behind schedule – which is unfortunate, but shit happens. Of course, some customers didn’t want to put up with a years-long delay. So they opted for a refund.

At one point, Purism changed their policy. Under the new policy, customers wouldn’t be entitled to a refund until their order is actually ready to ship, even if that happens several years down the road. For example, a customer won’t be able to claim a refund for their 2019 order until e.g. late 2022/early 2023, when their order is ready.

The questionable thing is: Purism has retroactively applied that new policy to earlier orders, too. So by Purism’s logic, customers whose order is years late can’t get a refund immediately, even though at the time of the order, the refund policy did grant that right.

People are constantly being furious about that, and I wonder whether Purism is doing themselves a favor with this, or if their behavior is even legal.
> invoking terror on the Yemenese population

To clarify the US is invoking terror on the Yemeni Iranian proxy forces and therefore the population.
Why is it hilarious that a website covering Linux Distributions and Berkeley Software Distributions is running on FreeBSD?
It’s a few lines of standard JavaScript. Nice touch used by many sites, not difficult.
So transferring a file between 2 local devices should require sending it to a cloud server and back?
It helped when media was limited so there was only a limited set of channels. If there are 5 quality channels, the lowest quality channel might still have an objectively high quality (as forced to by the fairness doctrine), now there are infinite channels of all qualities.

The problem isn't what the media pedals, it's that the media that is most emotional engaging or comforting is also the most desirable. People will choose the media that reflects the most comfortable reality for them. A coal miner is going to prefer to watch media that says coal mining is here to stay rather than media that says in 5 years there will be no more coal mining.

You and I might optimize for media we find the most truthful, but most people are going to prefer the media that makes them most comfortable (even if that comfort is a state of constantly being enraged), and now that's not limited by the different broadcast frequencies, it is only limited by a person's time to scroll until they find a message they like.
Xiaomi My Pad 5 is a great device for 400$.

Hi res, great battery life. Improved user experience, and spied all at once by Xiaomi, Google, Uncle Sam and Uncle Xi.

The real magic with android devices is you can (could?) obtain easily superuser privilege just by 'dd' the system partition, install in it supersu binaries with proper privileges and ownership by mounting the said partition on a linux system, and fastboot it back in the tablet.

You could also back up your whole data partition in the same way and upload the resulting .img file to mega cloud drive automatically with a script if you had a sd slot in the tablet as a temporary directory...

And until KitKat, you could also install and run a full debian system with debootstrap side by side with android with DebianKit on the android kernel (no chroot nonsense). It was a marvel of its kind at time impossible now.

That being said, I'm writing this on an iPad.
Well, Rust checks all of those boxes.

Yes, it's a problem for that language you plan on creating (try specializing into a niche). But it's not something that should impact Rust's adoption.
Just tested in Brave, and it behaves as you say Firefox behaves. One Proton login shared between two private windows.
They painted it like reality, though, no?

You seem to paint the landscape as full of tools and imply that they're used. Either they're insufficient or they're often under utilized, simply due to the number of bugs we see. No?
Yes but you can use esbuild to make it fast. My projects take less than a second.
https://archive.ph/Dv3yX
UK seeks to prevent military pilots from training China’s army
"The actual solution would be to saturate humans need for firewood and material - by drone planting the only plant that could keep up, survive and thrive, with it - Variations of genetically modified Bamboo"

Bamboo needs lots of water, and I am unaware of a modified version that does not, so is not really suitable in many areas. How about low tech solar cookers instead?
By your standards nobody can offer any piece of insight. I admitted that there is a fair bit of generalization going on with me, but your requirement of being infinitely exhaustive is not exactly how you create knowledge either. I don't have to fall off from every bicycle on Earth to know that it hurts.

> humanity, on Planet Earth in the year 2022, might be "doing it wrong",

We are doing everything wrong to a substantial degree, ever since the industrial revolution, destroying the biosphere of the only planet we have. We are evolved to thrive in a specific environment, and we are ruining it. How science is being used is very often questionable, just think of the Nazis or the Russians, but this only makes the case of the usefulness of science to all problem spaces stronger. We are also talking right now because of science.

> There is not database of all shamans

I will keep choosing doctors for my medical needs. I haven't tried all the doctors or any of the shamans, and yet I still know that a doctor is the right choice, even though there are incompetent doctors, even serial killer doctors out there. You can tell why, right?
> There was no violence.

Uh, Andrew Garfield ripped Jesse Eisenberg’s computer right out from under his hand and smashed it on the floor. How is that not violence?
What you do during work hours is literally your employer's business.
> This is a narrative that has been pushed by the pro-meat lobby.

Are you arguing that plant-based burgers aren't ultra-processed?
As an educational psychologist, there's a lot to love here and I catalog posts like these as examples of expert exposition.

One suggest to Bartosz: breaking one long essay into many smaller pages or hiding content until the viewer has indicated understanding of previous steps will be even more useful (see: https://tigyog.app/d/H7XOvXvC_x/r/goedel-s-first-incompleten...).

Explorable models are a great way to increase engagement and understanding. Beyond that, I would supplement this with highly frequent comprehension questions to check for learning. I bet you'd find a way to make it fun and approachable.
Texas students sent home with ID kits designed to collect DNA and fingerprints
And? A drop in the ocean of libraries.
Operating System Noise in the Linux Kernel
Show HN: Texterous.com
Write with the Help of Artificial Intelligence
You have great c++ libraries for those. Not in pure rust though.
> Pax americana is starting to crumble.

You mean Pax Israel is starting to crumble. Is it a coincidence that Yair Lapid is now advocating for a two state solution? They see the writing on the wall.
Rust iterators gives you JS vibes, with gotchas mostly related to lambda captures lifetimes. Once you accept that sometimes a `collect` is the easiest way out, it feels okay at the end of the day.
Microsoft Promotes Its Open-Source Terminal to the Default for CLI Apps
> It might be a bot network upvoting this, but I'm not sure what motive there is in setting your bot network on upvoting a CS paper from 60 years ago

A demonstration that it works
Alternatively, use google, search RAF budger and realise that RAF has fired a bunch of people due to budget cuts. They are looking for another Job. China gave them a job and 10x the salary.

> RAF has smallest combat force in history with fewest fighter jets after shrinking by nearly half in just 12 years

This is typical conservative government, demand loyalty from military personel, but show them no loyalty and respect inreturn. Espouse belief in the market, then complain when the market does exactly what it's suppose to do. You can't have it both ways
Rust is not boring technology. There's too much ecosystem churn, and new language features are deployed too often.

C++ isn't boring technology, either. If you just want to deliver value, I'd recommend Java.
> It's quite normal in Europe and Scandinavia

I live in central Stockholm and indeed walk to school with my youngest kid.

But every single day I’m amazed and frankly enraged by the massive number of cars leaving kids right outside the school gates.

And often driving off at high speed, checking phones for that “important” morning meeting.

Frankly sick of reading this mythical ‘car-free’ Europe thing. Neighbors as close geographically as Sweden and Denmark can be light years apart in their cultural values.
ActivityPub isn’t a great protocol and ties your identity to your homeserver.
Yes, I agree that's the point, and that's the point I disagree with. I don't think that the article contains robust evidence that the space industry as a whole happens to be more unsafe than it needs to be. It focuses on a single case study and cites what would generally be small accident numbers in any other industry. While this case is tragic, I think more evidence is necessary to establish the trend that the article is attempting to show.
Me too; particularly as I've been using them quite a bit recently; AT lives on in embedded system network comms (e.g 4G, wifi, ethernet and/or bluetooth modules - the ESP32/ESP8266 has AT command support). It's really expanded a lot these days - you can do http(s) and mqtt requests, and even run a web server without having to touch a TCP stack.
Another one that never used Borland, Apple, IBM IDEs.

Where is the Rust IDE that is half as capable as C++ Builder, MPW/Metrowerks, Visual Age, Zortech?

Considering all features they offered across the board in the box, not only code completion.
If we aren't talking about the same things, we wouldn't be talking about the same things.

Part of establishing communication is ensuring we're talking about the same things.

Therefore, once we've established communication, we'd be talking about the same things, such as what a flat plane is.

If you think humans are the only species capable of comprehending Euclidean geometry, say so, and defend the assertion.
When I was at the halfway house out of prison, not 1 person went to work at Amazon's warehouse. We went to less pay sorting human waste at the recycling plant in 120 heat before that job, because everyone knows how bad it is. Good luck keeping your labour requirements met Amazon.