skysight-inc/HackerNews huggingface dataset:
Obsidian Canvas uses a new JSON-based file format that we have open-sourced under MIT license. You can see the spec here:

https://github.com/obsidianmd/obsidian-api/blob/master/canva...

Just like all other files in Obsidian, canvas files are your own and local to your device. You're still linking to your own Markdown files which are just as future-proof as ever.

We decided to create the .canvas format because there wasn't any pre-existing canvas-type format we could find that fit our priorities around longevity, readability, interoperability and extensibility.

The .canvas format is designed to be as easy to parse as possible. We've already seen a few plugins take advantage of it, and we hope that more tools will become available that can use the .canvas format.
How we raised our first $1M from someone else's tweet
Makes me wonder if alien life will actually not find our messages simply because we're using such "ancient" techniques. Perhaps they invented a TV like object and used a NTSC like signal, but like 100k years ago and no one in their race knows to look for our old signals. Maybe our comms look like hieroglyphics to them ?
> estimation is hard

... and pointless. Imagine a sort of strawman (but realistic) candid conversation:

"Why do you need to know how long this is going to take to deliver?"

"Because we only have a limited budget"

"Do you know how much money you have?"

"Yes"

"So if I estimate that it's going to take longer than you have budgeted...?"
A comment above says that the for private repos only the repo owner will be notified vs sending the secret to the partner for public repos
They'll perceive it that way because that's how it is.

There's no need to muddy the waters with "many will perceive it[...]" when the reality is that in order to participate in the vote you have to pay money.
It's more dangerous to let people pin dependencies and have vulnerable libraries in use forever.
I'd rather ask the opposite question: how much tweeting did it pay for? :)
I like this idea. A long time ago, there was one amazingly attractive, irresistibly seductive, incredibly promiscuous and astoundingly prolific breeding individual and sexual athlete: the legendary Don Juan of the late Pleistocene.
The black and white Mac monitors and software were carefully tuned to match the output of black and white offset printers, so yeah, they really cared about color before they even had color.
This game happens to be free on gog.com today:

https://www.gog.com/#giveaway

scroll down a little
There are ~2 x 10^9 stars in the solar system. The mass of earth is 6 x 10^24 kilos, with about 1/3 of that being iron. So even if we're just using the mass of a single celestial object the size of the earth, and only looking at iron alone, that'd be 1,000,000,000,000,000 kilos of iron you could use per star (for reference, this would be the equivalent of ~300 million fully fueled Saturn V's per star). It seems like a single solar system would have enough resources.
100% - How is that not harmful or even perhaps a form of violence? It's certainly not consensual in many various examples.
As predicted, he responded with his usual snark implying what recourse do you (the customer) have? And last time I mentioned the website being in shambles, he contested that claim. He is not traveling in a place without internet: he reads every comment that is posted about him or pinboard here.
Imagine being so insecure that you can’t politely correct someone in the rare case they mix up a pronoun for someone.
IMO it is the best compromise.

Now that you crossed that line, I hope the next "custom format" will be a "real" outliner. You are surely familiar with outliners ;-) It is about full block-level support really, and all what that allows (API, backlinks, query, aliases...)

Anyway, Canvas Rocks! Thanks!
One automated human verification process that I've seen in the wild:

The Bumble dating app has you verify accounts by taking a photo of yourself making a pose.

Your account gets verified almost instantly. I'm not sure how it works, presumably some algorithm compares the verification photo to your profile photos. Plus there are probably other data that go into verification beyond the photo.

I'm curious how well it would stand up to AI generated profile pictures and a deepfaked verification photo.

Another verification process I've seen:

When you apply for a loan online, you are challenged to answer questions such as: select from this list of addresses the ones that you lived at, and select from this list of cars that you once used as collateral for a loan.

My point being, it's not impossible, but you're right that it won't be cheap. And not everyone on Twitter will be able to take part in automated verification for one reason or another.

Plus Twitter depends on free accounts to have enough people at the party. Or at least in the growth days that was important. Maybe it's not a priority anymore.
This is why we almost universally resort to talking about the weather when speaking with relative strangers. It's hard to be offended by overcast weather.
Are we pretending this phenomenon is strictly relegated to stylistic guidelines of academia? Be serious.
I wouldn't call this a comprehensive overview. It's very high level and doesn't have very much information. There is a place for this type of information - I only question the title.
I too personally find the terminology itself a bit confusing. I have some cognitive overhead on trying to remember what "whitelist" and "blacklist" actually means. But it's minor. Allow-list and block-list is intuitive. I _would_ be in inclined to update my terminology for the sake of clarity and practicality, but given the current context of the culture war we are currently in, I have consciously decided not to change my language. The language list that is on Stanford's site has infiltrated my employer (a major tech company) as well. The ELT and HR has made it clear they want everyone in the company to abide by it. Sure, making this small change for this specific example will result in slightly improved productivity, but it will come at the cost of emitting a social signal that the words "whitelist" and "blacklist" are bad, which they very well are not. This is a trade I not willing to make.
Why is the opposition to blame on this? There were dozens of articles written to explain the effect. Contrary-wise, why didn't their leaders explain the "unprecedented anomalies" themselves?
This hackaday is new thing to me. Will take a look at it.

On reddit I've been told that I' a "spammer" since I've cross posted one announcement to few relevant subreddits.

IRC, didn't hear about it for a long time. I need to check out which servers and channels might be relevant for me. thanks!
Give it time. Mastery can also refer to breaking the will of creatures, from horses to people, and explicitly celebrates domination in some usages

For some early examples, see: the Iliad
This is simultaneously an epic clickbait and a very accurate represenatation of reality that is very boring and not shocking at all. Congrats to whoever wrote the line.
The main problem is active record insanity and poorly designed table relationships/indices that lead to maintenance nightmares.
> So you're just plain empirically wrong about lock files preventing Rust programs from being packaged.

My mistake, seems rust packagers gave up on decent packaging. It isn't so for the python policy, I can assure you :)
Ford flipped the switch which he saw was now marked "Mode Execute Ready" instead of the now old-fashioned "Access Standby" which had so long ago replaced the appallingly stone-aged "Off"

~ Hitchhiker's Guide to the Galaxy
I gave you the overarching theory and one specific method in my comment to which you replied. PS The shared secrets I mentioned were not in that context symmetric keys but split keys.

A tool will never solve a security problem by creating an optimal design. That requires someone with security knowledge. There are threat modeling tools that can help but only when the tools are used as designed.
Messi and Me
That's what I thought 5 years ago, that these kind of things are just restricted to select communities. Now my workplace has a bot that yells at you if you put the words "dummy value" into your code. The current list of banned terms is small enough that it's not a huge burden, but if we get to a point where there's 50 or 100 niche subcultural heresies that I have to keep in mind when I'm coding, that's going to severely impact how productive I can be.
Rails puts testing front and centre. Testing exists to document how features are intended to function and intended to be used (with the added bonus of enabling machine validation of the documentation).

If a function accepts an arbitrary type, as is the case for all inputs in a dynamic language, one needs to document how the function is expected to behave when given x type. This is ultimately the same as type checking in a typed language. It just moves where the documentation is located.

In that move, it is true that you often lose some strictness in the quality of the documentation. The developers who have an active hatred towards their co-workers may even forgo writing documentation entirely. But if you reach that point you've really got people problems, not technical problems.
I agree.

My generous take is that whoever wants to go this deep towards language policing has experienced real trauma that has debilitated them. That's something I can view compassionately.

But perhaps in having been traumatized and victimized, they view their identity as primarily a victim, because they don't know how to move on from or get over or heal from the trauma. And in an attempt to "redeem" their past, they want to create a landscape in which they can use their victimhood to accrue, wield, and exercise power, via guilt-tripping others, shaming others, and using their traumas and sufferings (again, something I can relate and sympathize and empathize with) as "street-cred" to flex on others who are all part of those who are "contributing to the traumatic systems that have harmed people like them."

On the flipside, though, are people who refuse to acknowledge their traumas, because they've bought into a false belief system that to be hurt by life means you're weak, and to be weak means you don't deserve respect and the rewards of society and that you're somehow inferior to those who haven't been traumatized or taken advantage of, etc.

I feel like both are two sides of the same coin. One becomes all-consumed with their traumas. The other sticks their head in the sand. The former wants to police and control everyone by using their traumas as a means to jockey for power over others. The latter often shits on people who talk about any and all trauma – even in healthy ways – because to admit it in themselves means they're somehow lesser-than and inferior, weak and unworthy.

That seems to be the extreme ends of this whole thing. But healing from traumas seems to be kind of the third way, so to speak, and an uncomfortable journey that upends both extremes, without being a "meeting in the middle" type of proposed solution.

Just sharing some thoughts.
Good luck to both of you.
That is insane. They just leak data from your private repos to a hostile foreign govt agency. Unbelievable.

Edit: apparently they notify you for private repos, not Tencent. Still not thrilled.
One use-case I hit recently is when having multiple Private Windows. Assuming visiting a site, B, and wanting to use two different username+password combinations.

If Window A->Site A needs to remain open but Window B->Site B is closed, and a new Private Window (opened using File > New Private Window) that we'll call Window C visits Site B the expectation is this is a 'clean' session.

But Window C->Site B then presents the same auto-generated password as was created in Window B->Site B even when using a different username.

ALL Private Windows have to be closed for the 'session' to be removed so that new passwords are generated.
You can use zstd in 7z files with Peazip: https://peazip.github.io/
To the obsidian folks, thanks for adding this feature. It is definitely interesting. Will be exploring this further.
Even that is easily forged, although that takes care of some casual sharing arguably.
He is a/b testing ways to make money and to induce people to pay for blue checks or other IAPs. So he thinks if a poll that will get multiple millions of votes and tries to see how high a conversion rate is likely with a highly engaging topic like “how much do you hate me”.

I think he is just trying to find ways to drive people to make these purchases.
A couple of women I know married men who were getting Ph.D.s in physics. Both husbands are now doing data science.
Worse bugs than this have occurred at fully staffed companies like Github, Google, or Facebook, so why is this the end of the world?
I'm just going along with everyone else's rebuttal of "just use a lawyer", "just use a clearing house", "just pay someone to balance/record your own books", and whatever else they mention to avoid a solution that exists.

It's a bit like hearing people dismiss email and saying "just use snail mail", "just have a scribe write the letter for you", "just use a personal carrier so it's faster".
Thanks for confirming!

Yeah, the brevity thing is always tricky- the classic problem with any academic paper is that you need to assume your reader has some level of background that enables them to follow your reasoning; otherwise you end up derailing your paper by explaining too much of the background material.

FYI your claim re coordination isn't true across the board. The second option is used for some services (Slicer has an opt-in integration on the L2s).

(xoogler here ;)
My impression is that there are two ways to use rails:

1. Your frontend js needs are pretty minimal and you don't want something approaching a single-page app. In this case, you lean into Turbo and Stimulus to have rails do most things for you that would previously have been done with some a heavy-weight react-based frontend.

2. Your frontend js needs are significant and you do want a single-page app. In this case, ignore/disable turbo + stimulus. Instead, build your rails app as just a json API and then have a separate project for your frontend built using a dedicated frontend build tool like vite/CRA/webpack/etc.

On one hand, I feel like the turbo/stimulus stuff is the rails community preferring to pretend that the JS world doesn't exist. On the other hand, maybe it's really just the rails world embracing the above dichotomy: they're tools for doing some light frontend work with no JS, and an acceptance of the fact that if you want an SPA, there are better non-rails tools that you'll wind up using anyway.
> Law can only prohibit such actions as are hurtful to society.

Willfully becoming a homeless drifter is in fact hurtful to society :)
So now we're pretending there couldn't be consequences and a strong incentive not to use any and all terms listed?
Windows NT 4.0 was tight in its time. (Despite the name, NT 4 was really version 2.0 of the NT operating system.)

It had the new kernel that could compete with (and even outperform) commercial Unix for workstation use, and also the new GUI from Windows 95 which meant it was both familiar and had an enormous range of apps easily available.

Not only was Windows NT 4 enormously better than DOS, but it was also objectively better as a total package than Mac OS 8, the Sun Solaris CDE desktop, and everything else. Open source Linux desktops were still very early.

Windows 2000 (a.k.a. NT 5) was still good and a much more practical desktop OS than the first Mac OS X which had absolutely horrendous performance. Somehow Microsoft managed to squander this lead by focusing on consumer Windows XP and their own endless .NET API turf wars that ended up destroying the credibility of the Windows platform.
Niche Job Board for Remote Developers
A niche job board for remote developer jobs, this job board aggregates all of the best remote jobs for developers and puts them in one place with a bunch of useful filters.
Text rendering, manipulation, and searching, is one of the key issues holding back canvas adoption as a whole. The DOM is still king here.
There are some videos on the site but it's taking time to load, I think the site is under HN hug.
A solution could be amending the constitution with ‘modern’ amendments. The founders knew times will surely change and made provisions about how to change the constitution.
With the last electrons in his batteries, the last few watts - the lander finally got a stable connection back, could then create a chatgpt3 account and use the API to express his last wishes on Twitter.
Product hunt seemed always like a lot of effort to get a good position. You need to have coordinated action across lot of channels to get the word out at the right time. Am I right about this?
Onyx + obsidian is such a great combo
> Genuinely asking (codebase is Typescript/ES6 modules)

No luck for you then. Rails doesn't seem to love typescript: https://github.com/rails/importmap-rails/issues/124
Mach-5 engine will do what no other can [video]
That's almost half a floppy disk just for the fonts!

Back in mah dae, we had a single BIOS font, and only used them floppies for characters and spaces and stuff...
How about "well regulated militia"?
I say this with respect, but I don't think it would. The x86 architecture had an absolute paucity of registers, the mixture of MMIO and PMIO was insane, and it just didn't have any PC-relative addressing modes. Relocation for a flat address space would be an annoyance. Prior to PCs becoming about a billion times faster and the compact encoding coming into its own, x86 code is not fun to write.

Saying "some programs would be difficult to port" is putting it mildly; a huge part of the Amiga's software catalogue was written in assembler, and pretty much every single game wrote directly to the hardware, in a way that can't be abstracted without a complete emulation of that hardware. The Commodore graphics APIs were absolutely too slow to do anything except productivity software. There were retargetable graphics APIs (e.g. CyberGraphX, Picasso 96), introduced to allow well-behaved software to access expensive graphics cards you could buy for big-box Amigas. But generally you wouldn't use them for game graphics (unless it's a very simple game).

The Amiga really held well together; the custom chips were well designed to fit with the 68000. Perhaps too well, and that coupling became the downfall when the computer hardware moved faster than Amiga software could be brought along. It was destroyed once games became more about per-pixel operations (1990s 3D games) than blitting large areas (1980s platform games); the existence of VGA mode 13h made the former so much easier to write. Commodore even added a chip to provide a form of hardware-accelerated chunky-to-planar conversion, but it was too late, only in the CD32 and just couldn't compete with a native chunky framebuffer.
You can already do the former by using GitHub Events API. This simply helps with the accidental leak of tokens into the public, so Tencent / Repo owner can revoke it before it gets abused.
https://docs.github.com/en/rest/activity/events?apiVersion=2...
Apple fixes bug that let malicious apps skirt macOS’ security protections
I agree, but I don’t conclude from that that government or academic institutions should discriminate [positively or negatively] on the basis of race.

(If anything, I'd think the need to be more mechanical should push us away from differential treatment based on race, rather than towards it.)
Could have packaged up the Amiga chipset on an ISA card, an all-in-one video/audio/io gizmo. Sell that to 386 owners and give the OS away. Bonus points for a ROM socket to insta-boot AmigaOS with no disk.
> trying to estimate things is bad

I've never, not once, in 30 years of developing software professionally, seen a feature request that was well defined enough to estimate to any level of accuracy. The definitions are always so vague that the answer could range from "this is already done" to "this is not possible". The hard part, and what takes the most time, is always working out exactly what they want - and that's what they want (and expect) an estimate of. "Estimate how long it's going to take you to figure out what exactly it is that I'm asking for."
If you are talking about a dark forest then it is more opf the idea that any other sufficiently advanced civilization would simply destroy you as soon as you are known to them rather than attempting to consume any potential resources you have as that isn't economical. The most economical thing could be as simple as sending a small object at light speed through your sun to cause a supernova.

This eliminates you as a potential threat and you have no chance to use other limited resources outside of that system.
Wells Fargo to pay $3.7B for mistreating customers
Curious boys also had other modes - which had the same font, only appropriately squashed...
An accessible and entertaining treatment of this subject: https://www.youtube.com/watch?v=qtj7LDYaufM

The gist is that anyone can joke about anything, but jokes from outside an experience tend to be quite boring. Like the American reactionary love of The One Joke[0]. Calling them offensive gives the jokes way too much credit. Nothing they come up with holds a candle to what an actual trans or nonbinary person can think up. Some people think making "offensive" jokes prevents them from being a hack.

[0] https://www.reddit.com/r/onejoke/
Laws that require people to policy themselves do not work. It is frustrating and wasteful that people often have to follow systems or norms that lack logic or reason.

Stanford hiding their page indicates that they understand their approach is not universally accepted.
"ChatGPT explains Arthur Whitney’s J Incunabulum"[1] was linked in a recent comment[2].

Reading APL code, at least for a novice me, includes puzzling out "ok, now what's going on there?". Being able to highlight a bit of code, and get an explanation, as if sitting with the author, or reading annotated code, might usefully lower the barrier to reading APL?

I've seen several "here is an APLish program, and I'll go through and explain it" posts over the years, though I'm failing to find one now. If that could be somewhat automated...

[1] https://medium.com/@solarbreeze69/chatgpt-explains-arthur-wh...
[2] In "J one-page interpreter fragment (1992)" https://news.ycombinator.com/item?id=34050715 , the brief comment https://news.ycombinator.com/item?id=34053932 .
If someone hypothetically did a chargeback, who would have to pay the ~$15 dispute fee? You or the user that created the link?
Wait, how does the effort ostensibly against "elite whites" and in support of minorities, that looks exactly like many similar efforts by minorities and their advocates aimed against "elite whites" (or white men in general), ends up being "diverting political and cultural power from minority group to elite whites"?

I'm not saying you're wrong, but I'm completely baffled by how you've managed to reach the opposite conclusion to the one I'd expect.
Although you have to admit that we are in a timeline where "funny" has taken on a dramatically different meaning. And since some of the largest corps out there (Google) are not doing any better, I'd feel bad blaming the one single guy who's honestly trying.
My advice would be to use stuff that is in distributions… it hopefully (not necessarily) is maintained by less noob people who don't break API all the time.
You just had to rob that trainwreck of its last saving grace, didn't you? XD
If there wasn't a vulnerability, what did they quietly patch?
Glad to see progress on this.

For those interested in contributing I'd recommend the Silicon Salon workshops https://www.siliconsalon.info/ see https://diyhpl.us/wiki/transcripts/silicon-salon/ for the transcripts.

Another distantly related project I'm watching in this area is https://libre-soc.org/ && https://diyhpl.us/wiki/transcripts/silicon-salon/libre-soc/
So leaf packages can pin vulnerable or slow stuff why?