skysight-inc/HackerNews huggingface dataset:
This is a good example of pointless advice - pointless because depending on how you interpret it, it's only either trivially pointless or actually bad advice.

e.g.

"It's important that the UK government prepare for the collapse of RU Fed because it's a possible, extremely bad event. Planning should be updated and maybe a little contingency put aside."

Errr yeah. And no one should have to tell you that.

"Sunak should put the 3rd Division on boats and starting sailing them to Estonia. Move King Charles into a bunker. Somebody read the manual for how the nukes work. etc"

Obviously also a bad idea.

"Well ackchully they should take appropriate and reasonable action somewhere in between the two"

Yeah well obviously that's trivially true as well.
There is/was full service at a gas station in Menlo Park on Sand Hill Rd - That is the only full service gas station I recall ever seeing in California
If a law has been effective and is still relevant it should be easy to get it renewed.

Lines of code is actually a great analogy. The Linux kernel frequently removes old, irrelevant code that is poorly maintained and is no longer useful.
Treaty – a data sharing project (idea)
Hi all. I wanted to share a hobby project I have been working on for the past year (realistically past 5 years) called Treaty.

Treaty is an experimental data sharing service intended to give users first-class access to their data.

I have written a lot of verbage explaining intent and trying to be clear-eyed about direction on the README.md along with the FAQ and Manual. There is also a demo, though you will need to build the docker images yourself.

This is a hobby project and does not have a release. I am hoping to solicit (tactful) feedback. This project was written as I was trying to teach myself Rust on the fly, and is not idiomatic Rust.

Thank you.
Ah! Good point. Yes on my iPhone if I press one or both volume buttons while pressing power 5 times it doesn't trigger, and yes on my Pixel the power button is above the volume button.

It seems strange that Samsung wouldn't do something to tackle this. Part of the point of Samsung and other OEMs taking ages to roll out new Android versions is that they're testing and ensuring compatibility.
This might be one of the few actual solutions, given it's impossible to regulate these things out of existence.
Excuse me I had to recheck the CDC data, the most common spots are actually in urban areas on shoulders or where there is no crosswalk. Basically in places where pedestrian infrastructure is poor.
"Walking without looking where you're going" needs to be a ticketable offense. Extra fines if you walk into a street.

Sometimes I'll see someone heading right towards me, not looking, and I shout "Hello!" Frequently there isn't even an apology.
Some discussion yesterday: https://news.ycombinator.com/item?id=36452101
Uno R4: The new dimension of making
Can those be deployed "anonymously" though? Publicly destroying another nation's satellite would be an act of war. Quietly and secretly cutting an undersea cable, while being able to plausibly deflect blame, is a bit safer.
> A few more buses and trains are not going to cut it.

So add more buses and trains.

> You need to outcompete the convenience of a personal car.

More buses and trains will make this happen. More bike lanes will make this happen. With the proper infrastructure people can go longer distances without a car. All these things can be done incrementally and you're trying to claim they can't be.

> The bus or train has to run at least every 10min, otherwise one missed connection and you’re wasting 20min+ with your refrigerated groceries.

No it doesn't and your groceries are fine being out in the heat for 20 minutes. They won't go bad. They could be out there for 2 hours and be fine.

https://www.fda.gov/consumers/consumer-updates/are-you-stori...

> Refrigerate or freeze perishables right away. Foods that require refrigeration should be put in the refrigerator as soon as you get them home. Stick to the "two-hour rule" for leaving items needing refrigeration out at room temperature. Never allow meat, poultry, seafood, eggs, or produce or other foods that require refrigeration to sit at room temperature for more than two hours—one hour if the air temperature is above 90° F. This also applies to items such as leftovers, "doggie bags," and take-out foods. Also, when putting food away, don't crowd the refrigerator or freezer so tightly that air can't circulate.

On top of that, this two-hour thing is a general guideline for maximum safety and is overly restrictive on purpose to avoid ambiguity. Realistically you could leave things out for longer but the FDA would never admit that because it sends mixed messages.
Set Up Redirects from your domain to social media accounts
Thanks!

(I'm ... getting to that doc myself.)
Please take this as critical feedback, and not as a personal attack: The comments which you are making here suggest that you shouldn't develop any software which in any way touches personal data without significant upskilling on IT security. You're making false comments with complete confidence.

Most security scenarios came about as a result of attackers being able to bring systems into absurd situations, and moving systems through unintended pathways.

"Reductio ad absurdum" could apply to most digital exploits before they've happened. "Why would the system get into that state?"

That's a key difference between physical security and digital security:

- In a physical situation, I need to worry about what a typical criminal trying to break into my home or business might do. That requires reasonable measures.

- In digital security, I need to worry about what the most absurdly creative attacker on the internet might do (and potentially bundle up as a script / worm / virus / etc.). I do need to worry about scenarios which might seem absurd for physical security.

If you engineer classifying only "reasonable" scenarios as security risks, your system WILL eventually be compromised, and there WILL be a data leak. That shift in mind set happened around two decades ago, when the internet went from a friendly neighborhood of academics to the wild, wild west, with increasingly creative criminals attacking systems from countries many people in America have never heard of, and certainly where cross-border law enforcement is impractical.

I've seen people like you design systems, and that HAS led to user harm and severe damages to the companies where they worked. At this point, this should be security 101 for anyone building software.
It's hard to tell what's worse: a predatory juggernaut like JPM or the useless regulators that they've captured.

"72 Hours Before JPMorgan Offered $290 Million to Make Epstein Claims Go Away, a Lawyer Disclosed that the Bank Had Withheld 1500 Documents" [0]

[0] https://wallstreetonparade.com/2023/06/72-hours-before-jpmor...
> Actually in my state it is the opposite. Most roads are way too narrow. When two large pickups are driving at each other, one needs to pull over.

There are two interpretations. One is that the roads are too narrow. The other is that the vehicles are too wide.
My argument would be that as someone who is not addicted to porn/"booba", you might see it simply a decision to "operate in such a way", but for others they might struggle with addiction.
Fedora has been one of the most stable distributions I've ever used (I used it as my main system for ~6 years, but moved to another distribution now for unrelated reasons). It's also mostly developed by the community — Red Hat provides the infrastructure, but not much actual development.
> we all know that stop signs just dont

Are there some numbers on this? Even if your own?

I mean, _some_ people don't stop, sure that's valid on its face.

But they "just don't work anywhere", is that what, half of drivers refusing to stop at a four way stop? One in four?

I get that it's a fraught topic, but still...
That probably won't change will it?
I've seen that but I consider it to be a separate issue. Same result but completely different cause, and arguably a harder one to get right.
Transformers.js: Run Machine Learning models directly in the browser
Maybe you have smart lock turned on? https://support.google.com/android/answer/9075927
LOL, sibling comment voted to death, because I guess HNers know better than 2 native speakers (I am also one).

If you're talking about Indonesians refererring to Indonesian in an English language context, yeah some of them do this too (like the original commenter I replied to above), I can't imagine a context where an Indonesian would ask someone else in Indonesian if they understood "bahasa", because the Indonesian being asked would wonder "Which language do you mean?".

It would be like a Brit asking someone in London, "Do you speak language?".

But just like there's Singlish in Singapore, there's probably Indonesian English. Another pet peeve of mine is Indonesians using "married" as a verb (in an Indonesian sentence) instead of an adjective.
And HFT setups are also nearly colocated with the exchanges I understand -- as close as they can get physically, so adding a hop to space and back may be adding quite a bit of distance.
Never used it. We used Eclipse.
Interesting!! thanks!
This seems like a perfect use case for ChatGPT plugins (when those become available to everyone). As a stand-alone app, it seems a bit inconvenient (though cool!)
From what I hear, locals don't tip. Not a surprise given they don't have a choice (and a lot of Oregon has historically been poor, up until the recent flood of Californians).
I think the issue is in the last few years hot startups would just say sorry we are going with another firm. There was so much money flying around it was similar to home buyers buying houses with all cash offers and waiving inspections.
(Hi there! Surprised author here---I hadn't realized this made its way to the front page)

I love your questions because they get to the heart of how to make this stuff easier for more people, and in transparency, I only have some of the answers! :)

> What's the permissions/ACL model, and how do you keep that from getting too confusing for the average person?
(You asked a lot more here, but I think this is the root of this question)
The admittedly naive permissions/ACL model I'm envisioning/speccing now is at the database level, similar to GitHub at the repository level. If you create a database, you can add read/write and read-only collaborators, one of which is `public`/`world`, which would make the database accessible to unauthenticated users.

Your questions around table slices/views are excellent, and in the model I'm proposing, ayb won't be able to help. The model I'm proposing will be good enough for "here's my dataset, and you can build on it" or "I spun up a project and have a private DB that my webapp is gating" but not "I want user X to have access to row Y." Row-based auth would thus be pushed into the application layer, which seems to come with the territory with SQLite as best I can tell. To contrast, something like Supabase is able to provide both a database and row-based auth because Postgres provides better support natively, and Supabase then made it easy to add common auth providers.

> what makes your CLI wrapper that accepts SQL (or your HTTP API that accepts SQL) any easier for average users to consume than just installing SQLite themselves and running the exact same SQL
If the goal is to write/learn SQL, I agree that ayb offers nothing on top of SQLite. As SQLite is the database and ayb is the database management system, the things ayb makes simpler are on the "management system" side --- without ayb, it's hard to create a new one, it's hard to control access, and it's hard to access one from a web application. You're right that by that definition, it's more developer-friendly than power user-friendly, and I hope we can do better with future iterations.
https://archive.is/nKC11
Saying that a group is "seen as unwelcome influence" as an argument against said group is not a disagreement of some tenet of the groups faith.
Rust doesn't guarantee memory safety.

I think anything that can generate a trivial hello world program that doesn't leak memory is better than V.
This is literally a privilege-escalation attack: i.e. the user escapes from controls that are imposed on them by the device manager (which may well not be the user, but a corporate MDM platform).

Are you suggesting that privilege-escalation attacks are not security risks?
There have been two instances I have seen where the word 'freeloader' was used by someone internally at Red Hat.

And there are a number of examples in public comments (one recently in the Fedora mailing list[1]) where you can easily substitute the phrase 'freeloader' for a longer description of the downstream communities. The same sentiment comes across either way.

[1] https://lists.fedoraproject.org/archives/list/devel@lists.fe...
I spotted the American!

Seriously though, it does absolutely no good to anyone if you make such a snide remark. Even if you'd be right, what's to be done next from that statement?
Love to hear it! Sorry about the MacOS incident, I haven't launched it in ages as we play on Windows and Linux pretty much 100% of the time, I'll see what I can do to fix it :)
That was my frustration with the discourse around Zootopia when it released—people complained that the predator / prey distinction mapped badly onto US racial issues. But that was just people wanting the movie to be a thing which it wasn't, and then complaining that it didn't work.
This article is almost identical to the YouTube video just released, which I think partially explains the tone / style.

https://www.youtube.com/watch?v=kF5pyVUQBH8
How does distracted driving explain increasing pedestrian death rates in America while death rates are flat or down [1] in other industrialized countries? Unless there's a reason why distracted driving particularly affects America, I don't think it can explain this trend.

[1] https://w3.unece.org/PXWeb/en/Table?IndicatorCode=59
Declining worker power and American economic performance (2020)
Can't they just remove or ban anything cryptocurrency and Bitcoin?

That would be fantastic as it has no place on the App Store.
Fascinating discovery that will have long term implications for longevity research! I now wonder if caloric restriction works partially because when we're ingesting calories, we're often ingesting cooked DNA, which, according to this research can cause DNA damage in humans.
Actually, when I think about it some more -- perhaps the broader topic area here is not necessarily that about "trust" or "social proofs" -- maybe it's about "Credibility" -- what causes a person or organization or business or business idea -- to have credibility (or apparent credibility as some cases may be) -- especially when large amounts of money, large financial transactions, large investments -- are at stake?

Well, I don't know... but again, I reiterate that I think you're on to something with your observations...
What sort of work experience do you think the applicants for the jobs at the SEC ought to have?

If you need people people with experience in banking and finance, especially the legal and regulatory/compliance areas, where would you do your recruiting?
Looks really good. I'm curious as to what, if any, job board software/saas you use.
I interpreted this to mean that stations would stop offering full-service entirely, and thus they are not charging more for it since it doesn't exist.
“While traveling by car during one of his many overseas travels, Professor Milton Friedman spotted scores of road builders moving earth with shovels instead of modern machinery. When he asked why powerful equipment wasn’t used instead of so many laborers, his host told him it was to keep employment high in the construction industry. If they used tractors or modern road building equipment, fewer people would have jobs was his host’s logic.”

“Then instead of shovels, why don’t you give them spoons and create even more jobs?” Friedman inquired.
I have been seeing people drive the opposite way on a highway on the shoulder of the road to not sit in traffic. I have seen this many times in the past few years and never saw such flagrant dangerous selfish (in terms of no regards for societal laws) behavior before.
Show HN: Phase – open-source encryption and key management for developers
Hello HN!

We are developers and security researchers making tools for developers to encrypt data at an application level while maintaining sole control of their keys.

We believe that data should always be encrypted unless it is part of an active computation. Encryption is relatively easy, but key management is challenging. There are plenty of encryption tools and SDKs that are out there (Hashicorp Vault, AWS KMS etc.) but we are focusing on ease and speed of implementation, developer experience and self custody of keys.

A few months ago, we quit our jobs and started full time on Phase.

So far, we have created a dashboard to create, manage and deploy keys, a key management service (KMS) to serve encrypted shards of a private key to an app during each decrypt operation as well as SDKs for JS, Node and Python.

Give it a try (https://github.com/phasehq/console)! We’d love to hear what you think!

Website: https://phase.dev/ Docs: https://docs.phase.dev/
I think adguard works by running a local VPN on your phone. This way it can filter unencrypted connections while integrating properly in Android. Can also filter HTTPS by installing an (app-generated I assume) root certificate but I don't feel very good about doing that.

One issue is that it cannot work when using another VPN.
Maybe. I think the big problem is that people don’t want to tip the gas pumper guy, who usually only accepts cash. Or interact with them really. It’s very dumb and uncomfortable for a lot of people to engage in this kind of social ritual if they’re used to pumping their own gas.
THIS is why so many parents in the USA are afraid to let their children play outside alone.

Seeing a BMW fly down a sleepy suburban street is enough to scare the shit out of you as a parent, especially if your children are inattentive.
Fedoras big strength is the update speed.

The problem with distros is that you're always picking an update cycle tradeoff. Debian has decades old versions of packages that they'll backport security fixes into till pretty much the end of time (RHEL also does this but is well, commercially backed while Debian is entirely volunteer driven, which has opened up Debian to maintainer shenanigans a couple of times).

Ubuntu is more up-to-date by virtue of simply importing the Debian backports repo every 9 months.

Arch Linux meanwhile runs on "whatever the latest upstream is", and with that you have pretty much 90% of the actively used Linux distros covered.

All of these models are untenable for someone who likes to stay up-to-date with the latest version but doesn't want to drop down into the occasional shell hell that Arch provides.

Fedora kinda... sits in the middle of that. It updates to latest version every 6 months, has a generally sane-ish release cycle that follows the most popular scripting language (Fedoras cycle is specifically staggered to allow for python releases to coincide with it every other release). That in turn makes it the best OS to recommend for Desktop Linux if you're new to Linux.

As for why not Arch/Debian/Ubuntu for beginners: Arch requires wanting to maintain the OS for the sporadic breakdown or strange default setting (not to mention the shell being an expected skill beyond running package management commands), Debian is too out-of-date to be useful and Ubuntu is only slightly better than Debian.
Not in your account.
so you're saying the title is accurate
Allowing users to register to your app using another service (e.g. Facebook, Spotify, Google) requires OAuth. That’s what I use authlib for, anyways. It simplifies the OAuth process so much that I don’t have to think about the authentication process when designing an app.
The developer had a meeting with Apple representatives where they assured him that tipping profiles would be okay so he adjusted his app so people would tip profiles instead of posts. Then they still rejected the app.
I wonder if you can string it further.

You: We are OK to publish a blog post about it then, right?

Google: ...
> Like why not just allow them to charge more for full-service? What's the downside to the public of allowing this to just be another option?

If gas stations charged more for full service, that would lead to an eventual decline in full service availability and use.

You would have a cycle where customers shift to self-service to save money, making full service even more expensive, meaning more shift to self-service, etc, etc
I'm actually from one of the countries they are moving jobs to, it's very US-centric to see racism whenever someone uses any geographic location that's not the "rich West".

Red Hat had some pretty sizeable layoffs recently and a bulk of their recruiting efforts are in the countries with cheaper labour.
For all the RHEL to Debian refugees, here are some Ansible roles. I made the jump when they killed CentOS:

https://github.com/liv-io/ansible-roles-debian
> How… “inconvenient“

For JPMorgan, sure. That missing evidence gets interpreted adversely against JPMorgan, which means those cases are basically won. The question is how many more will arise in the coming months, perhaps years, that find reasonable claim to damages arising out of evidence the defendant has conceded it can’t bring to its defense.
IMO - killing animals for the purpose of eating them is wildly different than trophy hunting. I'm fine with calling hunting to eat "harvesting", I would not buy that nomenclature for trophy hunting.
The key comparison cost is real.

I remember coding a balanced binary tree of integers once in OCaml and wondering why the standard library's implementation was 2x faster. The reason was that the tree I had coded used polymorphic compare (the >, < and = operators) which isn't specialised for a particular type while the standard library's balanced tree would use a specialised `Int.compare` function. Of course other types have varying comparison costs too.
Mojo is not a programming language, it's a waitlist you can signup for.

Nim has the advantage of provably existing and being fully open source.
But that's in normal course of usage. A person walking from their car in the parking lot into the restaurant is normal. A person standing the drive thru isn't.

It's dumb and it's stopped me from getting food late at night too, but that's the lawyer-based corporate CYA logic.
Zoning is how you start to fix density issues. And getting rid of parking minimums. Charging fair market rates for existing parking can funnel more money in to public transport while also making it the cheaper option. Dedicated bus lanes and signaling changes can make busses faster than cars. All of those can be done with words written on paper or paint on roads.
There is frequently residual petroleum, and therefore petrol stank, on the pump handle from incompetent previous users. Especially the Diesel pump.
Your experience is not necessarily others': IME, OAuth is widely adopted, and OIDC is rapidly gaining traction. GitHub Actions, for example, offers ephemeral identity credentials through OIDC.
Plus, IIRC, Slackware may provide custom support for unsupported releases for a fee.

>If for some reason you are unable to upgrade or handle your own security patches, limited security support may be available for a fee.

From https://slackware.osuosl.org/slackware-11.0/ChangeLog.txt
To save anyone the few minutes it took me to figure out what this means: https://news.ycombinator.com/item?id=14120362

A black bar (mourning band) is sometimes added to the top of HN when an industry figure dies.
Bailout by whom? Banks? They are already struggling, you even mention SVB.

The government? Sure... print more money.
Probably designers who make new products (that are likely to get cancelled). While their popular cash cows are maintained by lowest bidders since it is boring / difficult.