skysight-inc/HackerNews huggingface dataset:
Some of the suggested alternatives, glued and compressed wood, sound far more flammable than an artificial stone like concrete.

I'd much rather a building were as fire proof as possible, that should be a strong component of any replacement technology.
Because large part of HN users prefer to live in denial about facts they don't like.

It's also fact there are brigades and bots operating on HN and NGAF.
> Why did you log in again with github?

Sorry I'm somone else but I'd just go and assume it was because they are human, not a terminator, and their eyes do not have an integrated HUD talking with GitHub's backend with status indicators showing each currently authenticated account??? You want this kind of correctness you have to write software in Rust or something. "You're holding it wrong" lol
Imagine you're in an SME and your CEO, who doesn't know about how difficult things are to implement, asking chatGPT about certain topics and permanently, secretly believing the thing in parts.

That's the real nightmare, not which part of the implementation goes where.
And the way lambdas are implemented, that can be type-erased into function<> with no regard to capture-by-reference.

C++ is a huge sinking ship...
Well, in that case, I have some unfortunate information for you about Facebook, Instagram, hackernews, and much more.
Many of these permission grant UIs are bad. It should always be possible to grant some permissions and not others, and optionally, if a website does not receive a permission it should be able to send fake data in a well-formed API response response to fool it into thinking it actually got the permission.
Telephone companies are forced by the government to carry certain speech.

Similar laws could be expanded to other major communication platforms.
Are unfossilized bones themselves not mostly minerals as well?
If people are going to be using default settings, why not just push a lot harder to force non sms based 2FA? Salted password+2FA should practically match any security benefit being attributed to passkeys. My University forced the entire student and staff population to enroll in Duo 2FA a few years ago and staff/faculty can get a hardware key if they request one. 2FA is required at every single point a University login exists. Everyone just got used to it. I even have to use 2FA when logging in to the VPN using Cisco Anyconnect, there's a third field that says "Duo Action" and it used to say "Second Password" and the options are using a backup code or the word "push" to get a mobile notification.

The fact that passkeys are supposed to replace password and TOTP feels like a security risk. I understand that the phone uses a security enclave or TPM along with a pin/pattern/biometrics to attest a valid 2FA unlock, having it be tied to a mobile phone feels incorrect. I understand that's how it's set up for the vast amount of people already, but shifting from potentially separate devices for TOTP and Pass to a single device for everything seems weaker.

I understand that power users are not the target, but the issue of vendor/device lock based on attestation and not allowing DIY keys. Moving from a piece of information I know like a password, or even an SSH key/cert I print out, to a "password" of a private key even I am not allowed to read feels less secure. It's not a matter of convenience, it's a question of giving up control of key generation and syncing to a third party. From a standpoint of opsec, not having control of your private keys is a much bigger weakness relative to a compromised password. Changing passwords is trivial, but changing a device secured private key is impossible.

Passkeys don't fix the bribes or 5$ wrench loophole [1]. Unless you force users to only use biometrics and pin/patterns are disabled, passkeys will have the same issues that passwords do. In a world where getting people to understand 2FA is hard, it feels short sighted to depend on Bluetooth protocol dependent authentication. Trying to get people to shift from the convenience of a password to the inconvenience of needing to mess with Bluetooth is going to be its own headache. When the topic of needing a superhuman memory to remember passwords comes up, I think of https://xkcd.com/936/ . The conspiracy theorist in me can imagine companies like Netflix forcing passkey reauth every 15 days in order to combat things like password sharing. I respectfully disagree and believe passkeys will serve mostly as an inconvenience for the world. I am struggling to see the use cases where passkeys are meaningfully better than passwords and 2FA unless the use passwords is completely discontinued. And phones would become an even bigger single point of failure. A broken phone would be the same as losing all of your 2FA keys, there would be no password to help demonstrate account ownership to support.

[1] https://xkcd.com/538/
A lot of the APIs that allow for things like starring projects have been around for a long time. Before GitHub introduced an official mobile app there were a number of unofficial mobile apps that used those types of APIs to give users a “fully functional” GitHub app.

I would say though that if GitHub is allowing requests like that through the API then they should be banning the API token and the account it was issued to if it uses the API maliciously
If someone switched my car for an excavation machine when the car was working fine I'd definitely complain.
> Twitter denied that they did for years

twitter has denied what for years? if you're implying they denied they moderate, delete, or derank content, this is absolutely not true.
I'm not an expert by any means, but my understanding is that Dirac was a highly accomplished mathematician, and of course Hilbert made his name in mathematics before moving to study physics.
Teletext is still around and updated here in Norway. I still use it sometimes to read news, mostly for the nostalgia.
I was just reading through the comments here, not quite sure what to think of it myself. Then headed over to my day job:

We have some data objects that form a hierarchy similar to a tree. Each data object can be active or inactive. If all objects linked to a node become inactive, that node itself becomes inactive etc. This is all in component A. There was a bug somewhere in that logic that I fixed.

Now some other component B made use of these data objects in an integration test. The bug above meant that this test did not need to bother setting the active flag of its test objects correctly. However, as soon as I fixed that bug in component A integration tests for component B started to fail ...

I would think that current AI systems would struggle to make the connection and be able to make the correct adjustments to the setup of the integration test data to allow the tests to pass. I fear it might go off and make vast changes to either A or B, but not the test setup etc.

Edit: spelling
New rich can sometimes be a middle finger to the old rich.

I'm thinking of some Hiphop stars.

Over the top behaviour, perhaps, but I'll always respect that more than the old rich dripping in the unearned benefits of their generational wealth, connections and status worship. But I'm not bitter.
> The Bottom Line

> It’s cheaper—and less frustrating for your developers—to pay more for better hardware to keep your team on track.

I agree with this point, 100%. And not just in the context of build hardware. It's often cheaper to pay for specialized services rather than paying in-house developers to do those things. I've lost count of the number of times in my career that I've spent days of effort (at $200/hr) so that the company I was working for could avoid paying for some $15/mo SaaS.
The Zanzibar Paper, annotated by AuthZed [pdf]
GitHub asks users to type in the name of a project when deleting it. It seems they should ask users to type something in order to grant a third party access to a project. As someone who is working on a project that will require write access to repos, I support it.
SQL is getting standard syntax extensions to make graph-like queries a bit more intuitive (Property Graph Query). But you're absolutely correct, Postgres with the right schema is a very serviceable graph database already.
Often not possible when working on existing C++ codebase. C++ is here to stay...
And more importantly: sites shouldn't require an account for things that don't require an account. I don't want to make an account just to read free content, download free software, or buy something.

Accounts are only necessary if I actually have to maintain content on the site, or specific permissions are tied to my account.
I still in the process of working out how to put a character/a face consistently in a series of SD productions. It’s one of the most basic tasks artist have to work with everyday.
RapidMiner is one. In the physics and electronics/physics domain there is also Simulink.

It can often hard to integrate these into production code though, as they are designed primarily as interactive desktop applications, with per seat licensing.
I think that would be safer. But then it would presumably disallow things like:

void frob(std::string_view sv);
std::string a = "a";
std::string b = "b";
frob(a + b);

This is allowed today and does not have any problems that I'm aware of. You could work around this by changing the call to:

frob(std::string_view(a + b));

But that feels cumbersome. I think the goal of std::string_view was to be useful as a parameter for a function so that you could pass in anything remotely string-like and it would implicitly convert and do what you meant. Requiring explicit conversions at the call sites would go against that goal.

Another thing that was desired was the ability to take an existing function that takes a `const std::string&` and change it to instead take a `std::string_view` and not have to update any of the callers. If some callers that worked with the old function are going to need an update to work with the new function then it gets a lot harder to change the function. Or maybe impossible if you don't control all of the callers.

I don't see how you can get both the ease-of-use and the safety short of reinventing something like Rust's lifetimes.
Bari Weiss was a NYT columnist for years, she resigned when her colleagues bullied and harassed her for toeing the party line. She started a substack called Common Sense with Bari Weiss, which she's been sending out daily for the better part of two years now. She apparently has over 250k subscribers, just today she announced they were rebranding that newsletter to the free press, and officially coming out as a media org. (where as before it appeared to be mostly beri weiss with regular guest columnists)

What exactly are you insinuating?
New Titan photos look like Earth
> DIY amateur print of posters and such is more likely to be hammered together in Word than in Indesign.

Word? I should be so lucky! The bane of my life is people preparing print jobs in Powerpoint!
If you put .patch on the end of any GitHub commit URL you get a diff format patch and it usually has the committer's email the top. You can then email them your diff.

It's not perfect and it's not social/collaborative but it gets the job done in the absence of a mailing list.
That user's account's tweets are protected :(.
> What if every business owner has decided to make their business repulsive, because that's a winning strategy for them?

Can anyone really make that argument though?

Maybe making sites repulsive is the default because those that push that default earns money on it?

You recognize these dark pattern modal boxes that absolutely ruin a site and you feel the complexity. The mom and pop site most assuredly did not invent this, and if they believe they even wanted it is because they were tricked into it.
I think it was such a bad move to tie the driving purpose of Covid Restrictions in the UK to "Saving the NHS". One obvious flaw is that people will retrospectively tie the success of lockdowns with the post-Covid state of healthcare. Given that the NHS was already barely functional pre-Covid, denying healthcare for several years and simultaneously making it harder to give healthcare was a recipe for disaster.
Suspicously absent in the diagram.. dust and particles.. i guess its a closed inner air circuit transporting the heat towards some large scale shedding surface.

Also, is this something similar to the https://en.wikipedia.org/wiki/Venturi_effect ?
> The Zig team can work on it now, or they can work on it later, but they will have to do it to get the language past a certain level of adoption in the modern world.

The objective of every language does not have to be world domination.
So then you heckle the pedestrians without a forcefield for not getting one? That is what we are talking about here, why would you do that?
I think this rant is a little tired, but I do agree with one point you made, and it’s been something I’ve been thinking a lot about.

> Also that they tend to be well below personal rates these days plus this gap widening. Increasingly this tax burden needs to be picked up from citizens. I suspect this is a significant variable of the degrading working/middle class lifestyle.

I think that we should radically raise corporate tax rate on profits, and provide marginally zero tax on any income (up to a large limit, eg $500k) that isn’t capital gains. This would shift the focus of corporations from increasing profits and stock price and instead put the focus on paying employees more. It was also shift corporate focus less on stock price rises and more on dividend increases (capital gains vs income).

These two things seem like they’d provide a much more stable environment for workers. Paying employees more becomes the new tax write off. Employees benefit because they don’t worry about taxes and get paid more, and it reduced the economic benefit of keeping the money in the company instead.
from github's pov you starred the repos. You signed up for a service the stars repos. it could have been starallthereposforme.com and you signing up a granting them permission to star repos is exactly what you wanted. So girhub is correctly assuming you wanted those repos starred.

If you didn't want them starred you shouldn't have given the site permission to star
I'd hire a lawyer in your country to advise you.
Yes! I work programming in Go. I like it a lot - its a very pragmatic language. But I couldn't believe that people who derided Java for verbosity were raving about Go. It's pretty good, but the boilerplate is extreme
If you want to nitpick, Germany technically doesn't have copyright in the US sense and instead the term is usually considered equivalent to what is called Urheberrecht (author's rights), which is indeed not transferrable.

You can however grant an unlimited, transferrable, exclusive license, which for all intents and purposes is like "transferring copyright".

Your nitpick isn't entirely irrelevant though. This is why Germany does not recognize public domain dedications and why CC0 is necessary.
If you gave the owners of some website permission to star repos on your behalf, then you are trusting them; you are still the one responsible for your endorsements. Whether endorsing the wrong repo ought to ban worthy is definitely up for debate. But the question of whether you endorsed manually or delegated it seems unrelated.
> "Yeah, I'm not surprised, you seem to be fed directly by what Twitter and Youtube are telling you is worth knowing about, so no wonder you have never heard of certain things."

Ah yes, that must be it. Not the fact that this topic is mainly pushed by a known sensationalist crap show of a "news station", or a bunch of corrupt politicians whose followers tried to overthrow the government.

> And again, "he's a bot pushing far-right topic" is textbook what any totalitarian regimes say

Dude, if you don't even recognize accounts being about 2 months old, with literal serial numbers on it and not a single tweet until a certain point in time... Mixed with legit accounts of known party members of the AfD, a far right party, and people who follow the Russian propaganda of RT or literal Nazi blogs and have the "Reichsflagge" somewhere in their profile. It's so damn obvious, you'd have to be blind not to notice it.

Also, it's not about shutting down the internet. It's about applying existing law against mega cooperation who seem to think they stand above it. For some dumb reason, that seems controversial to you guys. No country in the world wants you to stand outside and scream "overthrow the government" or something. Why should it be allowed on the internet, then?
> I think there might be a reason two sides aren't talking.

Both sides can certainly find a reason not to speak to each other. The left claims the right is hateful, the right claims the left is obscene. It's always been like that, with one having the power to censor the other.

Here's an example [1]. One side, a well known entrepeneur/investor, is arguing for no censorship, and the other side, a well known disinformation researcher [2], argues for limits of the reach of certain content. One has blocked the other, so they no longer communicate directly.

Five years ago, someone at Twitter might have observed this interaction and decided, "I'm going to secretly action content. That will satisfy both the disinfo labeler and the anti-censorship crowd." Yet in doing so, as we can see, nobody is satisfied. They're still not talking to each other, and they don't understand why. The reason is due to the secrecy built into all of these platforms where an unknown third party is actioning content without anyone involved in the conversation knowing about it.

See also Free speech for me--but not for thee : how the American left and right relentlessly censor each other [3] (Nat Hentoff, 1992)

[1] https://twitter.com/noUpside/status/1599532506252214272

[2] https://www.wired.com/story/free-speech-is-not-the-same-as-f...

[3] https://archive.org/details/freespeechformeb0000hent/page/n9...
As someone who grew up paying £25-60 for a brand new game, I find it pretty insane that we've been trained to want games for free despite it costing millions to develop and run dedicated servers for millions of players.

I tried out Overwatch 2, despite all the negative press it is fun and sweaty. I had plenty of fun despite not playing as Kiriko and I'm sure I could easily derive 10s if not 100s of hours before feeling a need to unlock Kiriko.

If a game is taking so much of your time and you have a job, why isn't it ok to just pay a bit to unlock a hero?

I'd take these kinds of monetisation over destiny 2 which didn't even have p2w or clash royale (before season pass)
No offense, but pretty much everyone outside America is already awake long time ago, especially the buggest part of world population living in Asia. Whole America has like 1/5 of Asia population.

I think you should refresh your time zones knowledge.

But yeah, Northamerican leftists are not awake yet.
I don't remember that. When was any news locked in at Facebook? How even? When chrome came around, how many people even had smartphones? The majority of people still used Facebook via Browser then.

But even if; just like in the movies, when the good guy finally turns bad, you have to get rid of him.
Make ChatGPT Like the Matrix
I certainly don’t disagree with you there (about ease-of-use vs safety). I personally believe the “right” choice in C++ is to err on the side of safety (at least when adding new stuff), and wish STL did too — especially given how notoriously difficult it is to write C++ code that isn’t plagued with memory corruption bugs

I know anything other than switching to Rust is a losing battle of compromises in some sense, but many of us working with huge codebases written in C++ don’t have the luxury of that choice being unavailable.
I don't use services that force me to give up privacy like that. A VPN service no less? That's almost funny.
A better solution would be cheap (less than $1) hardware keys, not locking people into Google/Apple ecosystem and allowing them to decrypt the keys when asked nicely.

Also, on Android Google's passkeys can be stolen if an attacker gains root privileges. Hardware keys without an OS are much more difficult to hack into.
> That’s because large corporations are typically run like communist states, where the workers have little say in their own work, and tyrannical unelected leadership sets up hierarchies that reward political infighting to build power.

You're describing capitalism, actually.

> try democracy and bottom-up decision-making

Those are called worker co-ops. They're very socialistic. And democratic. It's quite possible for them to be profitable, too.
Ask HN: How to Deal with Uneducated Contractors?
Hired a dev through a popular website, but they’re holding code hostage unless I increase payment by 50%.
The best way to fix the problem is not to sign up to such companies and complain instead. If you can't find a feedback form, perhaps they are not interested in feedback? In that case there's always twitter.
How far does this extend though? Should people not be banned for granting access to any app, and doesn't the screen where you grant access present some kind of disclaimer or warning?
I think you're misreading that tweet. What she is saying there is that the reporters did not have access to Personally Identifiable Information (PII) and that they had to get information on the various filters applied to an account via screenshots of the control system provided by the internal Twitter official who was has this access and is also responsible for keeping PII private.

Nevertheless, thank you for linking that tweet. It's an important one for clarification of the process that is being followed, and the care being taken.
Whoa, I'm very surprised at the amount of "told you so" and blaming the user in this thread. How many times are we going to retread the same tired arguments in this industry? Not everyone who uses github and other SSO sources is a elite hacker that knows exactly what the buttons they're pressing mean, plus sometimes we just make dumb mistakes. At the very least github should make it much higher friction to give a third party access to fuck with your account, and only make it dead simple to act as a identity provider.
> If Google does that, it willingly eats into its own ad-driven business.

I don't see why. They could still incorporate ads in the output of such a tool..
That’s exactly what I am going to tell my son. One of the fundamental qualities every human engineer needs is the ability to communicate effectively, reading/picking up the work of others then fix it/improve on it. It’s the process of interactive development/engineering that fruits in valuable products, not the automatic machine translation.
I once signed up for Runtastic with my Google account. It then wanted access to my personal data which I denied. After that I kept getting marketing emails from them. The only way to unsubscribe was to delete my account. I tried to delete my account but their workflow required me to authorise them to read my Google data. I still didn’t want them to have access. I tried contacting support, their office, via social media. Nothing. No response. The lesson learned for me, never ever use SSO again.