skysight-inc/HackerNews huggingface dataset:
As always, these discussions get brigaded by trolls so it's no wonder lots of comments were hidden.

However, several hidden comments were, as far as I could tell, made with good intent. That does create an impression that certain opinions are not welcome. The argument for hiding these comments seems to be that they've already been used in other discussions (i.e. "opt-out is illegal under GDPR" being used in a discussion about opt-in/opt-out design despite not being mentioned in that thread before).

When I read the comments by the Go people, it looks like the implementation of opt-out telemetry has already been decided on. Objections like "have you checked if that's even legal" are ignored with a simple "I'm not a lawyer". As rsc puts it, "This is a technical discussion, not a negotiation.".

The discussion is clearly set up wrong and I doubt it will matter in the end, now. The Github discussion is focused on technical implementation, with the moral discussion already having been decided upon; that way, people with arguments against telemetry have no place to voice their concerns. Maybe the moderators simply couldn't imagine being anti-telemetry or maybe they don't consider the position relevant, but this approach was going to stress out the moderators and cause unproductive discussion from the very start.

Personally, I'm somewhat disappointed (but not surprised in the least) that this is being suggested, but I suppose this is what one should expect when running any kind of program from Google (or Microsoft, for that matter). You simply can't trust these companies and the open source developers that work for them to respect your privacy.

I have to say, though, the proposal doesn't seem to take the risk of bad data injection seriously. I myself would definitely run the theoretical AdNauseam style fork of Go if the team behind the tool choose to go through with an opt-out mechanism.
I think you had something there in the first half but took a turn into fantasy at the end.
It's really cool.

Sorry for the ignorance, but how you run Janet on the browser?
That'd likely break a lot of CI workloads.
> Do i really have to treat every program as spyware and restrict its internet access ?

My feeling about Google is that they do not respect privacy, no matter the product. Invasion of privacy and tracking their customers are behaviors deeply ingrained in Google DNA.

Doing so for all other products has been incredibly profitable, so why not Go? It’s not like Go the language has a history of respecting the PL community (the resolution of Google stepping on the Go name was Google throwing their weight around and told the Go! author to pound sand), so why should anyone expect they respect their users?
The term you'll actually hear from the conspiracy theorists regarding this is "predictive programming".
Ukraine has no chance of outright battlefield victory, however sufficient military aid can keep them in the fight and produce a grinding stalemate like in WW1. The hope is that this war of attrition will eventually lead to regime change in Russia and perhaps a further fragmentation of the country to continue the process started in 1991. Even if Russia holds together politically and continues to occupy parts of Ukraine, they are losing so many soldiers that they won't be able to credibly threaten our allies for years to come.
That's creative. I'm not sure if I should call it abuse, but I'm leaning heavily in favor.
The last paragraph reads:

> If you would like to see interesting innovation, check out what Cosmopolitan Libc is up to. It’s what I imagine C could be if it continued evolving along practical dimensions.
Oh, so that's what Odin is doing. Ensuring a safe, ethical future for our children.

Autonomous weapons will literally be the result of our desires. Their absence could be as well, depending on what we do next. Making them go the way of bioweapons, blinding lasers or the neutron bomb will also require effective coordinated regulation, political will and cultural pressure, including publicly shaming those that seek to profit from the unethical use of new technologies.
Genuine question: How is that ironic? I'm simply not following, which happens to me a lot.
Anyone developing a program is a user of that program, in the model of the GPL and the four freedoms it established.
I'm glad had a chance to think about this question and figure out the riddle before choosing a pseudo permanent location. For those analytical types, please weight this appropriately in your optimization.
The U.S. has been pushing the UK to not include any Chinese equipment in any infrastructure they buy.

It’s not clear to me what the Chinese could have learnt thst they didn’t already know.
>By asking nicely. Not by siphoning data out of my system.

THIS !!!

I suspect like many people, I feel that if they had said "We're going to introduce this ... but don't worry, it will be opt-in", then they would have avoided 99.99999999999999% of the negativity.

Instead, by making it opt-out, they are basically doing a classic Google shit move.

And that's before we start getting into questions about GDPR and opt-out.
Is that most people in the US, or most people?

But am generally in agreement, I did a big upgrade a while ago and while it's great for a few things, the extra hardware and resolution don't mean much while playing Stellaris.
Uber Signs Cloud Deals with Google and Oracle
I don't understand why people insist on comparing Go and Rust, when they clearly don't compete against each other. Rust competes with C++, Go competes with Java. The only thing they have in common is being relatively modern and recent languages, but they just don't share the same goals and don't have the same promises.
Silly. If this was Apple instead of Google. These comments would not be so reasonable.

Apple does this same thing with an opt-in. Google is evil. Stop supporting evil.
>”At least it's easier to hold public officials accountable - you can get rid of them by voting - than to hold companies accountable.”

I disagree because most of the public officials who would be accountable are appointed to these positions, not directly elected. The representatives we elect - mayor, house representative, senator, etc. - all have a good degree of distance from direct accountability.

Plus, I feel like regular partisan politics and gerrymandering also make accountability much harder to achieve.
There's absolutely some theatre going on. The only reason we know about the ones over Alaska and Yukon is that they told us. As several articles are noting, the US has recorded ~10 such balloons over the last year. None of which we heard about. Were they shot down without us knowing? Were they allowed to fly over without issue? Either way, why the change with the public statements now being made?

(Did they drop the ball with all those ones we never heard about? What about in previous years? How long has this been happening?)

The best hypothesis I can come up with is that when Americans on the ground saw the first balloon, the administration felt political pressure to act. Now that the American public, and the international community, is broadly supportive of the USA shooting them down, the US feels empowered to make a public statement, with China's leaders as the intended primary recipient, but also playing to a domestic audience to some degree.
How many internal libraries does your "separate services" contain? You service A depends on library alpha@1, your service B depends on library alpha@2. All happy now. Introduce another layer, your service A depends on library alpha@1, beta@1, and alpha@1 depends on gamma@1, beta@1 depends on gamma@2, what to do now? It does not even matter how many services you have now.

With Javascript it does not apply, alpha@1 can have its own gamma@1, beta@1 can have its own gamma@2. But the same does not hold for most languages.

left-pad is both amazing and sad. It's amazing because JS's "bundle entire dependency closure" approach, combined with npm infrastructure, successfully drove the usability of software reuse to the point that people even bother to reuse left-pad. This is beyond what a well-regulated corporate codebases can achieve (no matter strongly encouraged single instance or not, not matter manyrepo or monorepo), and it happens in open. It is sad because without being regulated people tends to do so too aggressively, causing, well, left-pad.
Not quite sure what the logic of "I want to use this tool because it provides me value, but I also want to sabotage the development process of this tool" is meant to be.
The author Michelle Donelan was appointed Secretary of State for Science, Innovation and Technology last Tuesday, this upbeat "go it alone" account in the Tory Telegraph contrasts with the opinion of many scientists: Adam Rutherford, geneticist and science historian, said the science minister "apparently has no idea how science works. You can't just forge new relationships, they take years and trust to build and nurture."

https://www.theregister.com/2023/02/13/uk_post_horizon_scien...
It’s not 1950. I’m talking about now.
Thanks! Regarding your first example, I'm not entirely sure I understand it. If you have a task that updates a progress bar as an infinite loop... does that mean the task never finishes? What does "progress" even mean for something that goes on infinitely long? What happens if the GUI is destroyed in the middle of that thread's lifetime (which it will be by the main thread, if the secondary thread runs forever)? How many threads do/should you end up with if you later realize you want to run your program itself (i.e. your main()) function multiple times?

The main cases I can think of where joining might not make sense is when you simply don't have the capability to do so in a reasonable manner, like when the main thread is in third-party code that you have no control over. Otherwise, if I understand the example correctly, you absolutely need to join such a thread - and not merely at program exit, but sometime before the GUI is destroyed.
I've been in several countries where the State Dept has made a habit of advising Americans not to stay. At least with the crowd I hang out with, it is generally seen as crying wolf. On the other hand, back in Soviet times, false arrests were a political tactic. I have a good story about that...

I knew a guy who was in the USSR as a grad student in 1968. When the Soviets invaded Czechoslovakia, he and his fellow American students decided they should exit to the West for a spell, because of that whole false arrests thing. They got on a train and as they were headed to the border, they heard some news about a trumped up smuggling charge when a tourist's baggage was searched. Fearing the same tactic used on them, they went back to the luggage car and searched their own bags. Lo and behold, one guy found an antique silver crucifix in his suitcase. They opened the car window and flung out the crucifix as they passed a field. When they got to the border station, that one guy was singled out by the guards for a very thorough search of his bags, but finding nothing, they had to let him through.
yes, there seems to be a lot of management pressure to disregard risks in order to keep schedule.
> Additionally, you can integrate Mozilla VPN into each container to add an extra layer of protection to your container tabs.

so you can have a different IP address per tab?
So basically they up in district 9
Surely related to another story on HN right now about long term and short term estimates.

Like these powerful people can't look through history at what comes when the line is finally crossed for enough people.
My code is on GitHub as is a large number of other peoples. They can try to compile it themselves with all the profiling and probes they want, on their own machines.
I my experience, Wine (+ dgVoodoo for some DX7/8 titles) runs these pretty well. There are exceptions of course but usually there is some way to make them work. Some also work fine in a Windows XP VM without any 3D acceleration.
Thanks, so it is. :)
Does a hetzner dedicated box count?
But then the Earn program is the security right?

Just holding BUSD gains me nothing, it just sits there.

I've seen people argue that Eth is now a security IF you have 32ETH, because you can stake it (stake it yourself, not via a counterparties program) since it moved to Proof of Stake. But that's without involving a counterparty and their program and them defining the return etc, you can just do it.
Ohio catastrophe is ‘wake-up call’ to dangers of deadly train derailments
This seems to be the case for most science: You poke around in the dark, illuminated by past discoveries, you might need to wait for new tools for observation to be developed, you come up with some theories that are partly correct but only the next generations will be able to prove/disprove them.

I've been enjoying listening to The Song of the Cell by Siddhartha Mukherjee, which details a lot how the discoveries of cellular biology only came when e.g. suitably high quality lenses, microscopes or microneedles could be manufactured. As such, many of the early cellular biologists were at least part craftsmen as well.

Similarly for genetics, there the speed of discovery has been limited by tools: For sequencing (esp. cheap enough and accurate enough to start from limited genetic material) as well as editing the genome.
Ukraine has already taken over annexed Russian territory. Putin is pretending it never happened.

Again, it’s a lot easier for Putin to fluff himself to the Russian public than it would be to avoid Western nations wanting to assassinate him. Let’s not forget that until a few months ago the Russian public wasn’t even allowed to call this a war, and today they are sending their kids over to fight what they believe is a just war.
NASA’s X-57 Maxwell is a step closer to flight readiness
Those were line level employees, not fat cat MBAs. It'll be real interesting to see what sort of incentives those people were and weren't subject to.

You don't just order a train that might be on fire to keep going unless your equipment is chronically faulty or you are really, really, really sure it won't be your ass. Sounds like a "when everyone is responsible nobody is" situation.
Ask HN: How important is learning AI/ML now?
It seems like ChatGPT is rapidly taking over the world and similar programs are sure to follow suit. The ability for it to generate usable code on prompting as well as tailor it to your specifications seems like a mandatory skill for programmers. But if that were to start upending jobs, it seems like understanding the nitty gritty behind its implementation would be necessary to stay competitive.

However, I was talking with my brother about machine learning since he has been learning and playing with it for a while now, and he said the most important thing isn't the algorithms themselves, but the data they use to train the models. He said the data has to be really well-curated and selected, or the training will end up being basically useless.

So is it more important then to become competent at all aspects of data science? I want to not be rendered replaceable due to the AI/ML technology job takeover. Currently I have little experience with either, but I do have about 10 years experience in software development in general.
It wouldn't. Most (read: all) CI tools would allow you to set an Env variable. So you could just set the Env to bypass the input.
Imagine I'm running an MMO game where users can store arbitrary items in a stash, and then search for them based on various criteria. I would like to implement this stash as a Mongo DB instance for each user, and translate the user searches into MongoDB queries. Am I offering MongoDB as a service to my users, or using it as a DB?
ask: Would you try HN weekly newsletter?
I thought it would be great to have weekly newsletter since I am wasting a lot of time visiting HN many times a day.

Newsletter comprised of webpages made to the top 30. Comes in pdf format so offline and archival are additional benefits.

Thanks
RFC 7807: JSON API error response specification
>All people are asking for is that the IRS fill out your 1040 for you as one option for paying taxes. No loopholes, grey areas, or enforcement changes

Then how do you solve this scenario? Suppose my tax liability according to tax law in all its complexity is $1,000. However because it can't know everything, the IRS sends me an "optional" tax return with $800 liability, no questions asked, just sign here. What is to stop me from cheating in this case? It is only the risk of being audited that keeps most people somewhat honest under the current system.
To be fair, I fully agree with you.
Ukraine has many generals trained by NATO, and is getting more NATO training. Yes the west is propping them up, but they have plenty of training. They are also helped immensely by Russia making a lot of military stupid decisions. They are winning now - a good defense is often better than a great offense.
That's better than violating people's right to privacy without their consent.
Whoever did that should hide. It's so insulting that it must be dangerous.
> including a vending machine on campus

I've never seen a vending machine require a cell phone. I'm curious about what is the design of it.

I've seen some that require tap-to-pay, but that would of course work with a credit card with NFC without any device.
They wouldn’t even need to check the resource. If the hash (which you get for free since it’s part of the git commit) was the etag then they can quickly reply to that request from an edge.
Yeah, but the element of surprise and cold-served revenge is something that bad actors thrive on. So the least expected attack becomes the most impactful.
Easy enough to check for the presence of a TTY and only prompt then. CI wouldn't have a TTY and thus wouldn't prompt.
In practice, I can imagine the software packagers of various Linux distributions would set an environment variable to disable the offending behavior. This may be good enough for the majority of the software's stakeholders (users).
By using telemetry you are losing the statistics from people who block it, i.e., the most tech-savy users.
The answer here is not to micro-examine how badly Google needs telemetry or doesn't need telemetry.

The answer is No. No telemetry to be used on people who don't want it.
It's a misuse in the same way using a flathead screwdriver to pry something open is a misuse. It may be a reasonable way to get the job done, but it's not what a screwdriver is designed for.
The State of the Seed Union
Assuming that Booking.com is telling the truth, i.e. only a number of property owners has been compromised, how come 2FA is still not mandatory for property owners?

How come their (optional) 2FA only offers SMS, which is known to be insecure, even though FIDO2/WebAuthn/TOTP has been a thing for years?
As I said:

> if an environment variable (eg. GO_DISABLE_TELEMETRY=1) is not detected

It could also easily rely on whether the shell is attached to a tty to detect a CI environment, and disable telemetry by default in this case.
Firefox MAC is one of the first extensions that I install, after uBlock Origin, Privacy Badger, and Cookie Autodelete.

I install MAC despite my dislike for what the UI has become.

The UX was fine until Firefox started pushing its VPN service via this extension. I encourage the use of VPNs, that isn't my objection. But now the installation of MAC requires too many clicks just to configure it, and some of those clicks are to dismiss things that I didn't request.

Good UX practices:

1 = offer reasonable defaults

2 = be visually intelligible (make it easy to recognise borders, boxes, controls)

3 = make it easy to access important properties (don't bury or hide what people need)

4 = don't be annoying, nagging, exhausting, or confounding

5 = favour exposing features in an organised way

6 = let the user customise

The MAC extension suffers in points 2, 3, and 4 during installation. Now that Firefox has forced the grouping of all extensions in an Extension folder that cannot be moved, we now have a problem with point 6 too.
The volume of Western tanks is low because the West has been hesitant to send any modern weaponry to Ukraine. What they’ve basically sent so far, with which Ukraine has demolished the Russian weaponry, is old, almost decommissioned weapons they weren’t using anyways.
As ChatGPT's popularity explodes, U.S. lawmakers take an interest
I mean, some folks in the thread were absolutely arguing in bad faith.

A lot of people just go ahead with the "telemetry=bad" message + critique of telemetry in general without even taking a look at the actual proposal[0] (which has some important points regarding collection frequency, data shared, and architecture). Not saying there should be no critique, but blanket statements that often criticize aspects that are irrelevant here don't help.

They're really trying to approach this in a way that, to me, is as reasonable and transparent as effectively possible (yes, I'm on the side of "opt-in telemetry doesn't work because of the majority of people who don't care either way; won't turn off if prompted, won't turn on either", so being opt-in is in fact unreasonable to me).

The Go toolchain already in a sense "calls home" by default to the Go module proxy hosted by Google.

Anyway, it's open source, they're the maintainers, it's up to them, while if you want, you can fork it. Telemetry is immensely useful to understand what features or technical improvements are worth prioritizing to benefit the actual average user the most, and not just the vocal minority. Telemetry being opt-in breaks this by once again prioritizing the vocal minority that turns it on.

[0]: https://research.swtch.com/telemetry-intro
https://archive.is/zXmOa
Debian on a DO droplet, Nginx, Passenger, Rails.
This seems like it should be a bigger story.
Or there wasn't much left after being shot by 20mm Gatling rounds and falling from considerable height.
https://archive.is/bIgkl
love ambigrams and illusions, any description on how one can create their own ? Thanks!
The bill pegs the cost at nearly $300M/year for 5 years, with the funding coming from the state's "General Fund". According to the State of NH, that fund supports about $1.7B in total spending. There's no way a state with such a limited fund and desire for taxes is going to spend such a large percentage of the budget on that effort.
I've found Firefox's built-in autoplay controls work well enough for video, but I'm still curious to know what extension you use for that.
Show HN: I made a bot to help split your big group dinner bills
I tend to volunteer putting my card down for big group dinners (for the points), but hate the Monday morning accounting sessions just to get paid back.

I built a bot to try and help.

I didn't want to make my friends download an app to claim their items, so the bot is SMS based. It generates a link with your itemized bill that you can share with your dinner party.
Scientists discover a new antimicrobial molecule and named it after Keanu Reeves