skysight-inc/HackerNews huggingface dataset:
This is a service running on public repos, anyone can scrape this which is the problem. GitHub does the scanning and all that is forwarded is the "secret" matching their regex. Tencent then identifies the account owner and informs them about the public secret. That's all.

GitHub is available in China, why shouldn't they protect their Chinese users?

And the SIM card requirements have nothing to do with Tencent, have you tried getting a SIM in Germany? Impossible without government ID and an address. And there are a lot of services which you can't sign up for without German ID / address. As a foreigner I also can't easily open a bank account in the US.
For some workloads yes, but as I said you can build an insane local box running Linux or Windows for 1/4 the price of the Mac Pro.

Last I checked for a few thousand USD you could have 64 CPU cores with 128 threads, 128 gigs or more of RAM, and one or more top tier GPUs.
I never brought up sex. I asked for some examples of genders that aren't man/woman, and then for a description of how one transitions from one of those to another.

Nobody seems prepared to answer that question, yet it is a requirement to define this. Unless the argument really just boil down to "we make shit up as we go and you need to accept it or you're a bigot".
> It's my opinion that the best policy is no policy. If you make rules people will break them.

That's precisely the point of such obscure, arbitrary ruleset. Keep everyone obediently in line. Keep everyone on the edge, afraid of "failing" and being subjected to a Maoist style trial that they can't win. That's a tool of power and oppression, under the smart disguise of forbidding relationships of power and oppression.
College also serves as a buffer, giving you dedicated time and space grow.

The self-taught route is a viable path but if growth is what you want, the early stages requires more work than most realize.
Here is a workflow I believe will be one of the best website creators.

1. What do you want to call your website?

2. Here are the templates -- pick one.

3. Magic -- Do you want to view it -- yes. It is at https://myname.startup.com

4. Do you want to have your own name like "www.awesomeperson.com" (already registrar checked) and filled but with option to check other.

5. That would be ($9.99 for the domain) + ($99.99 we take care of everything) = $109.98 for the whole year. (With the optional to stay with just the sub-domain).

6. P.S. Do you want a local backup copy sync to your Google Drive, Dropbox, Microsoft? Hey, it is just $0.99 a month (free for the first year).
> Model 3, and I taken it to ungodly places off roads, through deserts, tornadoes, hurricanes, blizzards, beach coasts, every terrain imaginable — some even jeeps would have issues with

This is borderline comedy. I think you’re tremendously underestimating what a Jeep can do just with its ride height compared to a Model 3, that’s before considering the hardware that makes them significantly more capable. A stock Model 3 cannot cross a log or a high median.
I think in this case the behavior is that the initial generation of the password is random, but subsequently it is, shall we say, "trivially deterministic": it (intentionally) always spits out a cached copy of the initial randomly generated password.

I think security implications here would mostly apply to cases where you wanted to create multiple accounts on the same website within a short period.
Rails do support frontend frameworks like Vue if you wish to create more interactive & advanced UI's.
> I still can't use it in my normal browser (FF) with its extensions because it relies heavily upon CORS requests and referrer information that my somewhat privacy-paranoid extensions block.

So you have extensions that literally break normal browser behaviour and you are blaming them somehow? CORS is part of browser security and should be respected.

Not saying that TSB aren't clearly a shitshow but maybe just disable the extension for that site.
I would agree insofar as they would not be harmed in excess of any other word used as an insult in its place. What "hurts" is being insulted (potentially) or bullied.
Got some books written by Dr. James Stanier. They have been very enriching and were well worth the money.
Interesting that they identify Covid-19 as the result of "deviance" from health measures, when HIV is far more preventable, with far more likely to be ignored preventative measures.
I know, though, anti-maskers bad, pro-vaxxers good, right?
Secret scanning is a thing.

But this is an excellent next step where they build an integration with these partners where, as soon as a secret is scanned, they can notify tencent/AWS/other providers automatically to instantly invalidate those keys before they’re abused.

That’s what’s novel here.
Very much in my area of interest, only applied to motorcycles. The author redefines for himself "safe flying" from not having any incidents to not making any mistakes that could lead to an incident. And indeed I know plenty of people on motorcycles who make plenty of mistakes but haven't been in accident yet so they think they ride good. I personally take it down to 50% every time I make even the smallest of errors, even if it would be unidentifiable to someone observing.

I believe this gets you a nice safety bonus. At least you don't continue to shrink that error margin by telling yourself "so far so good". But you're still nowhere in the clear. Not making any mistakes is not humanly possible. And chance plays a role in dangerous sports no matter your skill or safety consciousness. So in the end you can only accept the risk or not.

Bonus related joke: A man slips and falls off a tall building. As he passes every floor he tells himself "so far so good".
What's up with all of this financializing of everything??
Hrm, seems like your Stripe account didn't get fully created. I'll take a look at this. In the meantime, the UX looks like this:

> https://paidlink.to/l/aofBHyHOkU

(Obviously, don't click through, it doesn't go anywhere for your $15.00).
1. Rails retired Webpacker [that] compiled and bundled JS. Import maps, Turbo and Stimulus [are now the] default options, replacing Webpacker, Turbolinks and UJS.

How do these new tools compare with the old? Versus Webpack, Vite etc?
The bigger issue isn't population here but rather than if older folks live not simply longer but more productive lives that those in the top tiers will always be seen as more valuable therefore more employable. We're not just taking 1%ers here, we're talking the top 20% of folks becoming a permanent worker's aristocracy that gets to lord over the youngin's forever. I don't like the prospect of that being 42 myself. It just means that younger folks will always be poor, shutout, and forever at the margins of such a hypothetical society. Life extension in this context should only be allowed if we break down the barriers of a potential gerontocracy.
'But he is leery of drawing direct comparisons to modern society. "We have firearms, but we also have emergency services," he said. "It's easier to kill, but easier to save lives."'

I wonder what the attempted vs success rate would be then vs now.

Do you really have firearms? It seems they're only involved in about 6% of murders. It seems the most prevalent methods are still the ones that existed then - knives and personal weapons. So I would expect the emergency services would be the bigger difference.
His oppositions seems to be nitpicking and he says it is fine for hosting?
Wrong, this only applies to public repos.

https://docs.github.com/en/code-security/secret-scanning/abo...
100% agree, although I wonder what the Venn diagram of "heaps of empathy/natural empath" and "CEO of large company" looks like.
Idk? joke aside, I think it's a way to sound less bossy or imposing or something like that on text communications? (see, I did it again, maybe?)

I know I use it in slack as a way to invite comments on a message, sort of like saying, "hey, this is my opinion because of this reasons, but I want to leave this conversation thread open to hear back from you)

Probably different people do it for a bunch of different reasons, but with all the voice inflection data lost in Slack, what else can you do?
Ah yes, you make complete sense. Forgive me for not realizing that when wading into a comment thread on a submission that is baiting the anti-woke crew to vent that I would be dealing with this. Should have known better.
If you want this functionality on a WordPress-powered site, which is one of the use cases stated, this is the industry standard way of doing this within the WP world:

https://easydigitaldownloads.com/
Could be blocked based on referrer?
Just got the stupidest excited grin on my face from seeing this. Looking forward to trying it!
Ask HN: Interviewing Software Engineers post release of ChatGPT
ChatGPT and Github Copilot being able to quickly answer interview-style questions and leetcode exercises. Sites like Hackerrank or Codility can only offer comparison of the solutions that have been submitted. Already today, they flag duplicate and similar solutions as ways to combat leaked questions and copy-paste submissions. It seems that the effectiveness of those platforms is lower with time for verifying whether the candidate knows how to code.

There is a difference between the tool increasing the productivity of a developer vs. using the tool to pass an interview while not having the know-how. ChatGPT is especially good at knowledge questions and such that compare approaches X with Y. This means that it's necessary to approach interviewing differently in order to extract more signal from the interview session.

How are you planning to adjust the ways you interview candidates for Software Engineers?

One way is to test for experience and dive deeper into past projects of a candidate and let them present how they solved problems, why and what alternatives they considered. This puts those under NDA at a disadvantage as they can't speak about their past projects.
The US reliance on judges and (poorly written, centuries old) "amendments" to decide what is or is not a right is badly dysfunctional and actively politicises the judiciary.
I think you missed the joke, friend.
Wasn't there a book exactly like this? A guy took over some business and made all these perplexing business decisions.

Some of the decisions were designed to simply draw attention to the company, others were actual changes to improve the company.

This Twitter drama reminds me of some work of fiction, I just can't remember which.
There was a driverless series in development
https://en.wikipedia.org/wiki/Roborace

Unfortunatly it looks like it might have floundered
I wonder how it'll go. If this ends up being used professionally, we may even see companies offer it for free to students to build a reliance on it (much like Microsoft when it comes to Word or Google with GSuite Education).
I am not from the US. I know there are places where this approach isn't feasible, especially in ethnic conflicts.

But the idea that colorblindness is outdated and a liberal US TV audience cheering against people with allegedly backward views merits some criticism. This is group think without any reflection and certainly not the next step to combat racism or any prejudice.

Again, contrary to most civil rights movements, including their own.
That's exactly right. This service wouldn't be appropriate if you were trying to protect access to (for example) a full web application. It could be appropriate if you were selling (for example) access to an individual Zoom call or Google Doc and didn't have concerns about the link being shared afterwards.
I was a bit surprised by this. Unless this was originally meant to be printed I can't see why a simple animation couldn't have been included.

It's essentially pointing out the biggest issue with the article and then shrugging it off, while obviously putting a lot of effort into the writing.
what the heck is full stack typescript
Even by this account, America has only even been trying to be 'race blind' since the 1960s, and even then it was only the liberal elites in Universities saying it, and we know what kind of Marxists institutions 1960s american universities were, full of communist jews (desipite all the efforts to keep them out) trying to promote race mixing and so forth to undermine western civilisation.

But now, the right, rather than carry banners saying "race mixing is communism" like they did at the start of the 1960s, is telling us that those crazy marxist university professors were right, we shouldn't treat people from differenc races as if they are inferior.

I guess we need to check back in a few decades to see whether what current crazy campus fads turn out to be basic common sense after being fought by reactionaries for decades. Will it go the way of Civil Rights, Feminism, Gay Rights, hacky sack and other such passing fads? Only time will tell.
You want to buy one solar cell for under $50? What would you do with it.
My favourite this year is the Time management series by Oliver Burkeman via WakingUp app.
SQLite/filesystem and etcd or some kind of distributed store.

The SQLite and fs option would get you usage in Homelabs.

That's a heavy order for the SOC 2, especially if you're just starting out as a company.

Imho, it's more important that the code base is audited and the company is transparent.
Thank you!! Our contemporary 60hz world seems to have retconned broadcast video standards.
Hah! At first I was surprised they thought to guarantee at least one symbol, and then I realized you meant the base64 padding!
> Nothing which costs that much and excludes so many people can honestly be called egalitarian

But sky high costs of dense urban living is egalitarian?
The marketplace of ideas is a nobel and ideal state. However, its weakness shows in a low trust culture - those like Kendi will exploit it to initially be heard then discard it once they’re in power.

Without strict controls over who is and isn’t allowed in our culture we’re left with a “at your feet or at your throat” predicament. Subversive individuals are death to a culture (the thing Popper was referring to in the paradox of tolerance - you have to draw the line at life or death, not simply because you disagree). Trust is everything.
The universe we find ourselves in isn't very compatible with a species like our surviving for an extended period. If humans exist for millions of years we're going to either spread out to fill the galaxy or our machines will. The fact earth was free to develop us means that no other species like us existed long enough to beat us to it.

We ought to hope that's because species find some other priority besides expansion and power, because otherwise the reason we're free to exist is because species like us always wipe themselves out before they spread.
This isn't how governments or corporations define a labor shortage. Their working definition appears to be "businesses can't find workers at the (low) price point they previously could." This is typically then used as justification for undermining workers through increased immigration rates, temporary foreign worker programs, raising the retirement age, and other policy interventions that benefit the shareholding class over workers.
Obsidian is knowledge management tool, you can think of it like a personal wiki. So it gives you some different types of elements that you can place inside the Canvas, e.g. notes, PDFs, videos, audio, and even iframe web pages.

For example you can embed embed Markdown notes inside a Canvas, and embed a Canvas inside a Markdown note.
Who's getting a car for Christmas? Ask the people who sell giant bows
Ask HN: What keeps Rails from being ported to JavaScript as Rails?
Amsterdam's 'stay away' campaign targets troublesome visitors
Better. Much, much better than webpack/vite imo.
Can you explain why it's bad?
Edit: Actually and interestingly the fine is 5 € even in combination with endangerment – 10 € only applies if you're also causing property damage.
Yoga C13 Chromebook direct NVMe upgrade
So how can I trust that after paying for the link, I will get the content that was advertised? What happens if it just redirects me to google.com after that? How do I get my money back?

How do you ensure the paid links are safe to visit, and it won't redirect me to a malicious website?
I like this idea but wouldn't it be really easy to bypass? Once you pay for it, I imagine you get redirected and can just share the final URL destination for free.
Devils advocate: I read recently that GitHub is being used to circumvent censorship in China. Does this system of allowing them to provide regexes allow China to automatically obtain lists of users who are mentioning certain words or phrases? Or is that nonsense?
>Like .* ?

Assuming your question is not a joke...

The partner has to email the regex to secret-scanning@github.com for their approval. See the steps at:
https://docs.github.com/en/developers/overview/secret-scanni...

Once it's in the scanning system, the partner receives JSON messages alerts such as:

[
{
"token":"NMIfyYncKcRALEXAMPLE",
"type":"mycompany_api_token",
"url":"https://github.com/octocat/Hello-World/blob/12345600b9cbe38a219f39a9941c9319b600c002/foo/bar.txt",
"source":"content"
}
]

So instead of ""token":"NMIfyYncKcRALEXAMPLE"," -- the private repo owners would worry about '.*' regex leaking full source code instead of API credentials such as ""token":"#include <stdio.h>\nmain(){\nprintf("hello world");\n}","

The above scenario requires believing the following:

- Microsoft/Github is technically incompetent and an employee and/or their internal regex sanity checking tool will blindly accept open-ended regex like '.*'

- MS/Github will then allow that unbounded regex to leak petabytes of private source code out to China partners via the JSON "token:" response. (Github says they have 18+ petabytes of data and most of that is private repos: https://twitter.com/github/status/1569852682239623173)

If one believes their entire private repo source code is at risk of being copied to TenCent being leaked by the '.*' threat because the above scenario seems realistic, I assume the answer is to delete the repo.
so much of the web is php and rails it just feels alien to see this kind of thought process
They need to slow the cars down to be safe. Recently, there’s a push to make the cars cheaper.
sr.ht is paid.
Hurting someone's feelings is not contingent on the specificity of words. It's contingent on insulting them, belittling them, etc. And that still is not violence. Words have meaning.
Elon Musk breaks silence after 10M Twitter users vote for him to step down
This is absolutely insan- excuse my language, I mean wild!!
As long as the accumulated error is deterministic (i.e. you get the same wrong output given the same line), and that error is continuous over the field of possible lines, rather than jumping around (i.e. a line that sags to the left a bit, if translated by one subpixel, will still sag to the left a bit, rather than now sagging to the right), that'd be fine for what the author is trying to do, no? The lines just need to stay stable under animation rather than doing the https://tvtropes.org/pmwiki/pmwiki.php/Main/LineBoil thing.
Why not go all the way and just have RC F1 cars that are remotely driven like FPV drones? Then the cars can do truly insane stuff without any danger to the driver. But I feel it wouldn't be F1 anymore if this happens.
Imagine conflating using the pronoun 'they' as a gender neutral term has any link to communism or their atrocities. Ironically, the current rightwing US party has much more in common with Stalin/Putin than someone who doesnt want to assume someone's gender.

But you can't expect an honest interpretation of history and current events from someone like you
Are you familiar with FigJams?
Because of lazy evaluation or because the developers aren't properly documenting their work? A language with a formal type system essentially forces you to provide type documentation, but there is an expectation with dynamically typed languages that you will still document the types (probably in your test suite). Rails in particular makes this a core function of the framework to really push you to do so.
> Might have something to do with the fact that there is not much public transport in the US and most can be found in very large cities

Around the world, is there much public transit out of cities? And maybe public transit itself is a red herring. Maybe the right question would be on non-car transit?
How Capitalism Stole the Internet(YouTube)
I'm neither a statistician nor a pilot, but I think the author here actually undersells the need to be 100% right in your decision-making. Because the decisions are actually linked together by the fact that they occur on the same flight. If any single decision is a bad one, the whole flight is unsafe.

If a pilot makes 50 safety-critical decisions over the course of a single flight, at a 99% success rate, I believe the actual chance of completing the flight without incident is given by 0.99^50, or ~60%. So, 2 out of 5 flights would result in an incident.

Of course, the reverse is true, if you know your actual rate of safety-critical incidents to be 1% of your flights, you can calculate how good your decision-making has been by 0.99^(1/50), or said another way: you've made the "safe" decision ~99.97% of the time.
Ask HN: Looking for resources on semi/unstructured local data storage (~WinFS)
I'm building a desktop application that I plan to use SQLite to store not only text (documents, notes, etc.), but also semi- and unstructured data (could be anything from biometrics to finances). Furthermore, all of this data will have metadata and user-defined relationships--all of which could be useful to filter by.

Although I've taught myself SQL for various projects, they all had very strict (or slowly evolving) schemas. I've built some test examples with and without an ORM in Python, but at the risk of bike shedding or just plain procrastinating, I'm looking for resources that may help me consider potential solutions and avoid obvious pitfalls. For instance, I envision I'll make extensive use of SQLite's JSON functions, but I haven't been able to find much on the ramifications of this.

Finally, I'm not looking for internet-scale anything. This would primarily be an offline single-user desktop application.
the house sits on some land though, which I assume is probably worth at least enough to pay for the fire fighter though.
I'm taking the time to learn and use these tools now. (Co-pilot, etc)

They appear to be more autocomplete on steroids, then programmer replacement. It will make devs more efficient, but I doubt it will replace us.
Maybe not, but it's definitely relevant if the founder is the only employee.
But is it? We can detect things about the chemical makeup of the atmospheres of extra solar planets. Our own atmosphere is broadcasting the likely presence of life, plus near certainty of industrial civilization. We could detect that up to some distance with our technology. What could advanced aliens detect? What if they used gravitational lensing to magnify the signal?

We can’t rule it out.

Let’s hope the dark forest explanation for the Fermi paradox is wrong - because we’ve long had a campfire sending smoke up that’s been visible for many, many light years.
The explicit purpose of a list like this is to suggest that no, it isn't, for any context. That is the banality of it.
I read it for the first time earlier this year and it's probably the best novel I read in 2022. It's one of those books I wish I'd discovered years ago.

If anyone else can recommend something like it please let me know.
Financialization will continue until morale improves.
Archive link: https://archive.ph/ck64e

I cannot believe the insanity that happened in this company. Where was the board?!
And fair enough. If I were disabled, and you called me "differently abled," or any of these other awful bureaucratic terms, I would probably want to punch you in the face. It's just dripping with condescension.