skysight-inc/HackerNews huggingface dataset:
You frequently saw even large sites being down with an expired HTTPS certificate in the past, for days, or even longer. And if you mess up your HSTS headers, what recourse do you have? None, from what I recall.
Hey digitcat - Don't see your contact info. Send me an email pls?
Ask HN: What's Your Favorite JavaScript/TypeScript Database ORM?
And what's your use case?
As a parent I can assure you that both things need to happen.

It’s like how cigarettes weren’t allowed to be advertised to children. Sure, parents were responsible for teaching kids not to smoke but companies need to also be held accountable for the well-being of their product and it’s users too. It’s not an either / or. There is enough responsibility for all parties to be accountable.
You got it reversed, developed countries have stopped to use their forest when they industrialized and start to use coal/oil instead of wood and when increase in food production make the use of less productive land unnecessary. Thinking you can be richer by destroying Amazonia is pure delusion.

For example, the forest is bigger in France now that is was 1000 years ago :
http://geoconfluences.ens-lyon.fr/geoconfluences/images/arti...

Destroying forest is a short term low-productivity cash grab. It will not make any country rich.
Does this service have yesterdays ranking somewhere? Similarly to HN past pages?
There is a lot of opinions now, and you seem to be conflating a lot of groups of people ad-hoc just as they are of you. It is true that you can re-catch Covid, so the people claiming Natural immunity as some cure-all for the situation are wrong. What if we didn't lock down, and let it spread naturally, then the entire population like your brother would be sick at the same time, thus overwhelming the system and more people dying.
Right? Not doing so is either disingenuous or amateurish
> there's been a long series of other API changes in Windows

Yes, sometimes native Windows is not the best solution. But wine on Linux is far better than anything else - including running native Linux GUI binaries should they be > 10 year old: the rate of change and the introductions of incompatibilities in Linux is far higher.

Unless you think Windows in 2063 will not be able to run something like vmware or wine, I think bitwize is perfectly right: win32 binaries are what's the most stable and supported.
I think you can reformulate the old "bank debt" adage for social media and still have it hold true:

If 10% of your users are using your product wrong, the users are at fault. If 90% are using it wrong, it's your fault.
I feel like I already explained it's not even part of the language itself, it's a library feature, you aren't given this feature without the rest of the hosted C++ standard library.

Which is fine if you write Windows desktop apps, but this is an array type, unlike a GUI widget, or an XML parser, it seems like I'd probably want an array type for this $1 per unit micro controller I'm writing firmware for. In Rust the nice array type works just fine, it's a proper first class type, it knows how big it is, mutable arrays coerce into a slice I can sort (only unstably, but hey, we're embedded firmware let's not get fancy), I can iterate over it properly... in C++ only the crappy C-style array is available unless I can butcher the std::array so that it works outside the hosted library. Ugh.
> You should always use paper ballots and people from different parties should be on the table.

It is easy to tamper paper ballots the way the US uses them, i.e. by having to manually tick the candidate box.

I think that, for some elections, using different ballots for each party and/or candidate, should be the way. This is done in many other countries and it works consistently better.

You also want an electronic trail, just because there are certain places where you cannot trust that the manual count would be accurate.

I think most people do not trust voting machines because they do not understand the security preconditions they have to comply with. In many ways, they are way more reliable than paper and manual counting.
Possibly not what you're asking since it's nothing like HN, but the other two sites I constantly check for news are theguardian.com and spiegel.de (because I'm German).

Quite hilarious when I read about some Elon Musk drama or similar in the main stream news before it shows up on HN - usually stories I end up finding in both turn up on HN first.

That's all I read - no social media or anything, too much noise, costs too much time. I'm just trying to keep an eye on what's going on in my country, the world and my field. Used to read Slashdot and others for the latter, but lately I noticed HN has pretty much everything I find relevant (and the odd delightful oddity, my favourites).
Maybe so, but my claim is that social media is an important part of our social landscape, one that you can't simply deprive a kid of without consequence, not that Facebook is this or is that.
A high performance embedded database
This database is for C/C++ programmers.
It supports RDBMS model: DB, Table, Index, Cursor, etc.
It supports transaction.
It supports table schema auto-upgrade.
It supports ISSU.
More to be discovered.
Please have a try and share with your friends.
a...secret water-dwelling species, who has achieved high technology without being seen?
> Meanwhile, here's some attacks or concerns that are actually seen in the real-world and which DNSSEC does nothing for:

DNSSEC also does not press your suit or iron your shirt. How is this a criticism against DNSSEC? A security technology can not possibly solve all problems, and not solving some specific problems should never be a strike against it.
That might actually be a good idea, considering the obesity crisis is well-known.
Not much that can compete with HN.
Dev.to
What legal theory is that? The whole point of lawsuits is to exercise power over things you don’t have direct control over. And that’s a good thing.
For general world news&commentary I've chosen Axios and The Conversation. For the quick&dirty pulse check on tech/science trends or rumors - Futurism and Futurity.

https://www.axios.com/
https://theconversation.com/
https://futurism.com/
https://www.futurity.org/
A First Course in Causal Inference
I think this is a small step in the right direction.

IMHO, Flatpak (and similar schemes) with strict sandboxing should be the only distribution method for user applications. If I install LibreOffice, I want to be asked for permission before it tries to access my microphone or location or other sensitive resources.

If you want to give that application access to everything your user has access to, that’s fine, but it shouldn’t be the default.
Ask HN: What algorithm does the windows start menu search uses?
Windows' start menu search famously doesn't show the best match at first for any search query, so what algorithm does it uses to rank the filenames based on the query ?

My latest example is :

Typing "St" top result is "Steam"

Typing "Ste" top result is "SteamVR"

Typing "Stea" top result is "Steam" again
Not to spoil the good time here, but where’s the standing?

I don’t think the courts have ever broadly recognized schools’ standing with respect to things that can harm students outside of the school’s walls. I would think that the appropriate regulatory tool here is having each school (or district) institute bans on device use during school hours, not suing random companies.
>> If RH find it to be a lot of work that is supporting very few users, then it doesn't have to say anything about their solvency. Just a spreadsheet cost calculation.

A Linux distribution is more than the sum of its parts. Having out-of-the-box ability to read MS office docs is a huge deal. Nobody wants to fuck around installing something extra to read a defacto standard document format.
Not a mod but mods have complained publicly about the sense of isolation for years
It’s not a dysfunctional law. It seems perfectly reasonable for a company to have additional responsibilities as a seller of shares. It seems quite ludicrous for the company to be liable when a third party sells shares even if that third party is an employee. It’s not that the share inherently comes with additional protections it’s that there are additional responsibilities based on who the seller is.

I think if a company failing to publish certain disclosures forced people to hold and not sell their shares until such time as the disclosures could be made people would be outraged.
Which I'm glad has been the case here since it results in the most stable and trouble-free Linux distro and package manager I have ever used. Complete with full source reproducibility for everyone to top it off. It'd be hard to convince me to switch back to a traditional distro at this point.
Probably easier to figure out way to detect one using a imaging system in space.
It does, been using it for a year or so.
Not true, some do (stereotypically the surgeon with 4 ex wives and children that don’t know them) but it really depends on your country/practice pattern.

On one extreme Canadian physicians are (generally) ineligible for pension/retirement benefits. Many US private practice jobs are the same. Academic US jobs usually have some form of retirement support.

Add in the opportunity cost of not earning income until you’re 30+ as well as loans and I don’t think it’s a fair characterization to say “most physicians in the 50-70 age range want to work”, especially full time and considering burnout rates of ~50-60%.

Can’t speak about Europe which has very different compensation structure and debt burden.
It is arguable all three have evolved for the same reason.
It does mean that it won’t be in RHEL‘s package repositories anymore, as far as I understand.
This definitely lives in contention with Steve Schmidts view on properly handling bullies and the role of news media: https://youtu.be/NFrf1coIzfk

Granted, YT is not a news site. But does it want to be “post videos without nude sexuality” site and nothing more stringent?
It’s a prisoner’s dilemma which is why the companies need to be regulated.

Very similar to child labor laws where there were lots of firms refusing to use it, but were getting put out of business by those who did. Solution: use the law to force everyone onto equal ground.

Otherwise many many avenues of improvement for our society are impossible to take for the two reasons you and GP mention.
If the EMI is dissipated into water it must be detectable in some way.
Seems somewhat obvious to me when the people who are giving the gravest warnings are the same who actively developing the things they are warning of.
> We can estimate the amount of information processed.

I'm not sure this makes sense. Here is a simple dynamic programming problem from Project Euler: https://projecteuler.net/problem=67

You can estimate the amount of information being processed in a few different ways. But that's not really relevant; the whole point of solving this problem is that you can do the same job with less computation than it looks like you need.

There is no particular connection between "amount of information processed" and "amount of computation performed".
Isn't that the point? If we let everyone catch it 'naturally', the young, then it would be impossible to isolate the groups at risk. Everyone seems to decry the lockdown, but if it was allowed to spread naturally, to all the young and healthy, then how would you prevent all the old teachers from getting it? Partial isolation in our world is impossible. I think you are cherry picking from her a little, at the time people were not listening at all, so being extra scary, and end-justifying to save people probably did occur to some as ok. But her saying there was a 'white lie' isn't a gatcha, there was a conspiracy, it doesn't mean suddenly the entire endeavor was wrong, we should do nothing, no lockdowns, let it spread.
> made worse by DNSSEC:

> * DNS Amplification DDoS

Not really; with SPF, huge TXT records are all over the place, and can be used instead of having to use RRSIG records.

> * DNS server denial of service (on-the-fly signing or validating signed responses adds non-trivial overhead)

People said this about HTTPS, too. They were wrong.

> * Zone enumeration (NSEC and NSEC3 are hilarious)

Firstly, NSEC5. Secondly, no secret data should be in DNS. It’s not designed for it.

> * DNS server compromise through RCE exploits (not exclusive to DNSSEC, but handling signed responses adds a lot of complexity to servers and almost all DNS RCE exploits we've seen recently have been in the DNSSEC handling part)

Not on the authoritative server side, surely? Sounds like a DNS resolver problem.
No, that is not possible.
Well written article. Not funny at all.

The biggest benefit of EVs is clearly on urban air pollution. The Prius brought us high MPGs, also a huge benefit. EVs are a result of “if a little is good, more is better” decisionmaking, and all the green credentials got conflated. A sad example of what John Kerry called “trivialized decisiveness”.
2 to 4 weeks is not normal.
Quantum entanglement “AI 3.5 hackers edition”
In the story, when Alice and Bob suspect the presence of Eve, they introduce additional security measures and decoy signals to protect their entangled communication. These measures create disturbances and inconsistencies that can be detected by Alice and Bob. The presence of Eve and her attempts to intercept the communication cause a noticeable lag or delay in the exchange of information.

As Alice and Bob monitor the quality of their communication, they are alert to any unusual delays or disruptions that cannot be explained by the inherent uncertainties of the entangled particles themselves. This serves as an indication that someone else, in this case, Eve, might be attempting to interfere with their communication.

If Eve realizes that her attempts to measure and intercept the communication are becoming increasingly difficult or inaccurate due to the uncertainty principle and the security measures employed by Alice and Bob, she may eventually give up. When Eve ceases her interference, the communication between Alice and Bob returns to its normal state, without the disturbances and lags caused by her presence.

Thus, by being aware of the potential presence of an eavesdropper and monitoring the quality of their communication, Alice and Bob can detect any disruptions or irregularities that may indicate the involvement of a third party and take appropriate measures to safeguard their entangled communication.
URL completion in some browsers is similar.

My guess is that it might remember which completions you have chosen in the past

So for example

- You may have typed “St” several times in the past and chosen “Steam”

- You may have typed “Ste” in the past and chosen SteamVR.

And that combined with which is the “real” default that it would highlight would then make it a bit confusing.

But it can also be helpful in some ways.
The “Rest of America” and the Role of Joy
IMO social media should age check by law. The problem with parental control is that it’s very difficult to say no, if the child’s friends are on socal media. Let the social media do age controls, by law.
You mean this? https://carver.earth/en/
The bright colors made me wonder they are partly a result of the photos having been shot in early Autochrome. I didn't see mention of it in the article but the photos definitely remind me of photos in this YouTube video about the early color (and particularly Autochrome) film processes:

https://youtu.be/QsN2PBhYMPI
> What you ultimately want is to make sure you're communicating with the correct other party. And the way to achieve this is TLS with certificates, validated via the WebPKI.

The thing is TLS with certificates doesn't always achieve this and we know this because there have been real world successful attacks. E.g. intermediate CA certs being issued to bad actors, certificates for major domains being issued to people who don't control them, etc. The issue with the CA ecosystem is not that they're evil, it's just that they don't validate what regular users expect them to validate and that they are also subject to human error, governmental and commercial pressure.

The more common issue with the validation CA's can perform for DV certs is that it just tells me that you controlled a domain for a given moment in time at some point in the past (pretty much up to a year ago). To fix this we introduced ways to mitigate the vulnerabilities of TLS, watching CT logs for your domains, HSTS, CAA record restrictions. Unfortunately if you do secure your infrastructure in this ways you have added complexity and will likely discover how your infrastructure can break in new and interesting ways too.
See if a single solitary secondary source supports spurious sections of the silliest song I've seen.
oilprice.com - apparently a news source becomes surprisingly useful when it's not trying to hide its biases.
Tech news: https://www.techmeme.com/river
(mostly US) Political news: https://www.memeorandum.com/river
Workstation usually means a high powered system for one user (at a time) where you would run things like CAD, 3D tools, mathematics or science software etc.

So a focus on professional graphics features certainly makes sense.

A (relatively) low powered system just for productivity software and web browsing would usually be called a desktop.

At least some point there were actually different variants of RHEL for workstations and desktops.

https://access.redhat.com/discussions/3772571
Oh, people are already working on it; they do it because:

1. Doing DNSSEC manually is work.

2. Doing DNSSEC manually is risky, which all these outages show.

The more DNSSEC usage increases, the more work it will be to do it, and the more people will mess up, and the more the incentives to automate it will increase.
People should differentiate between introvert, knowledgeable, and intelligent. I most likely qualify for the first two but I wouldn't even begin to guess on how to know whether I'm in the third league.
Network of geothermal power stations ‘could help level up UK’
The US would hate the idea of compulsory voting, as the goal of Republicans is to make as few people to vote as possible.
The difference is Apple has the muscle to make that happen without, ya know, breaking the internet.
Isn't Sweden already spread out? Kind of isolated already? It does seem like Sweden is held up as some special case as justification that lockdowns didn't need to happen. But aren't Swedes generally thin and healthy? Americans are fat and sick already, and probably less sanitary too, so not having lockdowns would have bigger impact.
"For decades, the CIA read the encrypted communications of allies and adversaries."

Always the past tense for these articles. What, they don't do that anymore?

The CIA used to spy on the world, allies and enemies [, install dictators and foment revolts in third world countries]. It still does, but it used to, too.
It's crazy to me that people can't accept that most things have both positive and negative effects. Facebook was absolutely hated on for doing research into understanding and minimizing those possible negative effects.

I mean, for fucks sake, attending schools themselves has been directly linked to increased suicides (https://fee.org/articles/new-study-shows-the-striking-correl... and https://www.scientificamerican.com/article/childrens-risk-of..., for example).
I'm a bit tired of the argument that everything must be subjected to critique, thus even baseless claims should be allowed. This is akin to inviting quack to TV to counterpoint actual professionals, or to publish unfounded rebuttals to established science in proper scientific journals.

Have not learnt yet, that debating with certain people is not only pointless, but counterproductive? Many people would rather believe to professional polemists and politics dilettantes, than engage in a honest conversation.

And YouTube would happily undermine democracy for the extra $100M they will get by allowing these quacks back in their platform. It is not about freedom of speech, but money.
Am I alone in thinking this is batshit crazy on a multidimensional fractal of levels? What possible standing does a school have in the relation between students and a third-party website? What possible resolution could one ask for, that doesn't trod all over the First Amendment like a rabid horse with muddy hooves? Also, how is "internet causes mental health issues" even an acceptable cause of action? It's just people speaking freely with each other. To say that's a "crisis" is to utterly reject the free-society value that people speak freely with each other, that that's everyone's inalienable, unquestionable right. It's unvarnished authoritarianism.

(And yet again, if people are contemplating this direction of authoritarian control, it's simply because they perceive a small crisis, and don't know how else to answer it besides brute force. (But all of civilization is a series of little emergencies; if you start thinking in policy in terms of emergency measures, you'll never have normality again)).
Why and how to hide the Python stack trace
The california version of house hunters

https://youtu.be/mrMunV4y39I
Stranger Things X Casio Watch
OpenLara – open-source Tomb Raider engine
>These lawsuits make no sense

Do you mean legally? Because ethically, I think they make perfect sense. And I would think similar about going after fast food companies and possibly other industries.
Nothing else comes close tbh.

I probably lack some worthwhile cultural hinterland due to HN's liberal but sciencey remit. Arts & Letters Daily would be a good addition.

But there's nothing that really feels of comparable value for me personally and I've tried many of the options that are suggested here and have been before in these kinds of threads.
If the ‘j’ in `jq` stands for ‘JSON’, what does the ‘f’ stand for?
I am RE-ing some binary file formats for games. Should those be contributed as well?
> In the future it will all be unlocked at once and they may be unable to deal with the addictive nature of this stuff.

I’m adult. I’m still unable to deal if I don’t implement heavy restrictions on every screen I use. I don’t even have Tiktok, FB, IG or Twitter, just HN and reddit. I know how addiction feels, and this feels like it. Social media is poison.
You can absolutely function perfectly fine without social media as a kid or adult.

Hypothesis/opinion: a large portion of the world has no access to the internet or social media and those people are doing better in terms of mental health than those with access.

Also there's a significant amount of kids without access (because their parents don't let them) even in the Western world and they seem to be doing fine (if not better) as well.
> Everything from an unintentionally snarky comment in a PR

To avoid this, teams need to come together and learn how to be respectful during code reviews. I find this article to be a very good resource:

https://www.michaelagreiler.com/respectful-constructive-code...
Smartphones are most definitely in elementary schools by now, correct.

What's more, most of them will have TikTok and/or SnapChat installed.
And there's the problem on SO. Previously, we could do exactly that - Flag the content for a Mod to review. Now Mods are pretty much prevented from taking any action when we (the community members) and they believe it is a bot.

I saw one user yesterday post 10 lengthy, detailed answers in an hour, in 3 different programming languages. But the Mods aren't allowed by SE to consider that (or pretty much anything) to be an indicator that it's AI-generated.
This, the Ruby team introduced RBS (.rbs file extension) which allows you add static types but I find it cumbersome to having keep track of two of the same files.

If they only allowed static types in the same source code!
(I know Sorbet exists, but I haven't really used it yet)
If you get an expired certificate, you can fix it close to immediately. It's all under your control. For dnssec you can't do anything until the cache expires.

If the large sites were down for days because of expiry that's their own failures, not because of unexpected complexity.