skysight-inc/HackerNews huggingface dataset:
The problem with adopting requirements more stringent than national requirements is that many people may not be able to comply. As an example, one of the things this site suggests as an option is "Require vaccines, including boosters".

In my country at least (UK), it's not yet possible for an individual to pay to have a booster and so the only way of getting another vaccine shot is for free via the NHS. However, this is only available if you are sufficiently old (I believe over 50) or in a "vulnerable group", so teachers, someone working in healthcare, or someone who has a pre-existing medical condition that makes them more likely to have more severe effects. So, far from making it more open to all, this suggestion massively limits the potential attendee pool.

Of course, the other suggestions like not attending if you have any symptoms or having negative test results, seem like good steps in the right direction.

Masking is another issue - maybe it'd be OK for a 1 day event, but personally, I wouldn't attend a 3 day event if I had to wear a mask the whole time, because they are uncomfortable for prolonged periods. I was super vigilant during and after COVID and always wore a mask when I would encounter people, but because I didn't enjoy wearing a mask, I decided it was better to largely stay at home where I didn't need to interact with people instead. I'm happy to agree that the preference to not wear a mask is selfish, but it's still an interesting question on how many people would choose to not attend because they don't want 3 days of discomfort compared to how many vulnerable people would choose to attend if everyone was wearing masks. My gut feeling is that people who are that vulnerable would still rather stay away and avoid crowds because there would still be a non-zero risk, but equally I can see that some people might be glad for an opportunity to finally do something in a larger group that's safer than normal larger groups.
Do you know on what channel registration opening is announced?
Allow me to disagree. Finding good engineers that are knowledgeable with Elixir has been difficult to the point that we’ve hired people that never professionally used the language to senior positions. That’s not a problem on its own, since the language is mostly easy to learn, but there definitely is no abundance.
There should be a difference between someone doing things professionally and an "amateur".

"Programming" is not the same as "hacking".

I can hack away in any new language and produce something that works, and I have the benefit of a programming background and decades of experience.

That said, the areas where a hardcore, professional "programmer" is really needed, are quite few and will be even fewer in the future.
I dare to say the opposite.

Students still care and should have learned these principles in uni.
They tend to overengineer and focus too much on the technical challenges

In bigger companies, most IT people tend to be people who got the job because they started coding back in the day when you could get by using just common sense and gut feeling. Today we know those often lead to dark patterns and bad database design, but those people have now grown into architecture and management positions and have no clue what they are talking about.

This is very prevalent in tech teams of non tech companies (e.g. manufacturing, banking, healthcare, CPGs,...)
I look for hotels on booking.com and then deal with the hotel directly once I find something I like. There's no good reason to include booking.com in the process.
We did map existing v4 addresses into v6. They're not two totally separate networks at all.

But the limitations of v4 and of existing v4 devices limit the ways that can work. Reinventing stuff and calling it "4.1" won't change that. You'll still face all of the same limitations.

> They'd focus on getting everyone onto the v6 protocol first, then open up the new addresses for use. That's the transition period that never happened.

That's basically the transition period that _is_ happening, except we aren't delaying the "open up the new addresses" stage -- the new addresses are usable straight away for anything you've migrated.
see https://news.ycombinator.com/item?id=37780788

and https://news.ycombinator.com/item?id=37782982
> all states will be cycled through

That's only true if there are finitely many states.
the fact that even if it has been done before, the experience of making it yourself will benefit you in the long run
Sudden spike in cases in Germany around this time of the year iirc. The authorities were openly talking about having to bring back mask mandates and the like for the Christmas season.

CCC decided to cancel because they didn't want the event to risk getting blockaded by that.
> What I'm really tired of, though, is everytime there's news about something worth criticizing about China, these comparisons with the West are mentioned. It only serves to muddle the conversation, which can be seen as the intent of whoever brings it up.

They do this because this is the most efficient strategy that works every time - not just in Internet discussions but also in political debate. Look what happens whenever any of atrocities committed by Russia hits the news again - you can be 100% sure that one of the first comments will be something about the USA bombing Sarayevo or Syria etc. Some of these accusations do make sense (like the invasion of Iraq on false premises), some don't (like in Yugoslavia where NATO pretty much stopped the war and "ethnic cleansing" i.e. mass murder). But it doesn't matter: the person who threw the bait have successfully managed to deter the conversation away from the problematic issue and made it someone else's problem.
Marble flooring in homes is quite common in India.
Seems very unenforceable. The fact that it is included speaks volumes about the creator of the site though. Wouldn't want to use such a service.
September Broke the Global Heat Record by a ‘Gobsmackingly Bananas’ Margin
https://arxiv.org/abs/2310.02207
by using logical fallacies.
I do not have a problem with the inconsistencies between implementations, this is indeed not really an issue. But what I do not like:

- Inserting a link is confusing, is it [url](text), (url)[text], [text](url), or (text)[url]

- Tables are a pain

- Footnotes are a pain

- Cross referencing headings are a pain

- Bold, italic, underline are the only features that are simple to use, but I do not need it that much

- No other things than the ones which are a pain or I do not use very often are not possible at all (image captions, table of content, ...)

Of course you can say you can use a proper editor, but then I could as well use a WYSIWYG solution
> Gmail, Maps, Google Now, Hangouts, YouTube, and the Play Store

This isn't actually a very strong moat.

(Non Waze) alternatives to maps are becoming increasingly credible. Google Now and Hangouts are history. An alternate client to Gmail is easy, since it speaks imap, and the Android app isn't particularly amazing by itself. Youtube's possibly the toughest nut, but there are alternate clients to it, the web UI works very well in mobile browsers, and besides many would be satisfied with just having TikTok.
If you can put together (tasteful) songs by using tools like samples and software, aren't you a musician then? Many would consider tools like DAWs instruments, so mastering one of those would be considered playing an instrument, at least for those people.
Are phones really better? A scanner has uniform and perfect lighting every time. On a phone there are often issues with glare or shadows.
I find it hilarious that I still use the fridge to cool my iPhone in 2023.

I find it nostalgic to hear the word PowerBook in a time where you only hear MacBook
And chances are, new Rails projects will just be API backends with React frontends.

Also, if trying to do lightweight Javascripty frontends within the framework is important, we might as well just move to Phoenix. Phoenix is arguably better already... it just requires a moderate jump to learn Elixir (which unfortunately looks very much like Ruby but requires a very different approach to writing).
I have a question - what would happen if you were to drop one of these spoons of matter that weigh 5 billion tonnes onto the floor right now, where would it stop?
Well, society ignored the problem of infection through aerosols far too long.

Now at least some care is taken, and some spaces bought and configured large air filter systems to allow unmasking without infection risk.

You don't want a ransomware infected, malware spreading windows 95 PC in your intranet either unless it's heavily firewalled.
And at below 160 light years it could already show damaging effects (earthsky.org)
I'm from Denmark and have been to conferences in Germany in 2022 and 2023. Never heard about COVID regulations still in effect.
Those are examples of non-commercial licenses, licenses that grant rights, free of charge, but restrict commercial use of software.

When I say dual licensing, I am referring to the business model of offering software for free under a non-commercial license, and charging for commercial usage rights. Kyle E. Mitchell calls this Free-and-Paid Dual Licensing.

https://writing.kemitchell.com/2023/09/10/Two-Kinds-Dual-Lic...

To use such a business model you also need a commercial license. There's no one-size-fits-all solution, and it's normally something that requires input from a legal professional. Kyle has made a couple of recent efforts to improve things.

https://fastpathlicense.com/
https://commercial.polyformproject.org/
I got a recursive ticket in Ireland in 2019... check with your local hackerspace or security meetup.
That’s a good point hadn’t thought of it like that but it’s incredible how often I do this to filter out the BS - it sort of works!
you're in 5 or 6 different companies slacks?
> We should be an absolute beacon of morality and principles with a stellar track record to criticise ... other countries. That is not the case yet, so let's work on that.

I completely disagree. We can have many problems but when another country, say, invades another one, we should respond appropriately. Waiting until everybody becomes crystal will never work because it's never going to happen.

> (or even, instill change through violence in)

This is a completely different issue, and it is always wrong, no matter who does it, whether it's CIA in South America or Putin's agents in Ukraine. I haven't seen a single case where "instilling change through violence" brought any benefit, but I saw several cases where it completely ruined whole countries, see the so-called Arab spring.
TAP is awesome when you've got big projects with tests in multiple languages. Got tests written in bash, perl and node? No problem, just combine the results with a single test runner.
Even better would be to avoid diabetes and hypertension, diseases that are essentially caused and shaped by personal lifestyle.
Overeating, malnutrition, lack of exercise.
CCC was cancelled last year because of this and they are still making a big deal out of it this year.

Why? The rest of German society doesn't care. I live in Denmark and have been to plenty of social events in Germany in 2022 and 2023. Nobody cares anymore. Why does the CCC?
I love this comment thanks for sharing
At the hardware level, there is no distinction between a regular load, a volatile load, and a relaxed atomic
load (assuming small sizes and optimal alignments). But the compiler can still can do things that break your code or that miss optimizations when given incorrect ordering annotations.

It seems to me that volatile ends up falling almost between acquire and relaxed ordering, in terms of the behavior of most CPUs and compilers, for small aligned values: it doesn’t synchronize any other operation but does prevent folding of consecutive operations.
I think Linus generally considers splice a failed experiment. It works fine is some simple scenarios, but the generalized support for it needed to make it work failed to materialize.

Having said that, these days sendfile is implemented in term of splice, so in a way many HTTP servers use it.
It'd be nice to have filters for:

* Can be used without creating an account

* Requires a free account

* Has a paid account option

* Requires a paid account
The Rise of OpenTofu
I spent the last couple of days catching up with the OpenTofu Vs. Terraform saga, and put together this short 5min overview.

I also included a few resources (Articles, podcasts, etc.) you can check out if you're curious to learn more.

Nothing groundbreaking here, but I hope it helps those who haven't been keeping up with the whole thing.
Sure it is. The org insists on making your life difficult, and you just want to get your work done. If they really cared about security they would prioritise fixing stuff like this, but they don't, so you know they don't really care, it's just for show and a need for control.

And if they don't really care about security, why should you?
The standards claim that the existence of such a (SEED, a, b) tuple is enough to show that there is nothing special about the curve in question. But if one in a billion curves have a special property that only you know about, which would make it easier for you to attack the cryptosystem, you can try a variety of different SEED values until you find a desirable curve.
Yeah? That’s pretty normal from what I’ve seen. Three business related ones. Two local meetup groups. One personal one.
Code components will be coming in the next set of updates.
Color selector has a bug which will also be fixed shortly.
There are apps on here that are native-only installs. The data quality seems low, but the whole product is the data quality.
From the time of this post, Reddit has been having issues for 59 mins. It's currently down, saying their CDN is having issues reaching their servers.
Narges Mohammadi wins 2023 Nobel Peace Prize
Looks like generic boilerplate ToS to me. It's still bad, but I think this is unintentional.
Try posting your job ad on the Elixir Slack (elixir-lang.slack.com) - there's a lot of jobseekers in there.

(I think the only way to join the Slack atm is to be manually invited because the signup app got broken by Heroku's pricing changes - but if you email the address in my profile then I'll ask someone to invite you.)
Most people have Google account in general, so I think only Google login will work for me. I will add other options later when there is enough request for that.
So, they found 50 sites of early human settlements that look as if they were destroyed by nuclear explosions? I could make a conspiracy theory out of that.
Haha, I totally understand that. I kind of have a geeky love for cool domain names like this. I abandoned most of them with the time passing mostly because of unjustified price increase… but I still have a few of them. For examples :

- https://hecatom.be/ using the Belgian TLD to make the word "hécatombe" which is the title of the song of which the lyrics are on the web page.

- https://hachis.ch/ using the Swiss TLD to display an ascii art of a cannabis leaf.

- https://marselh.es/ using the Spanish TLD to make up the word "marsélhes" which means "marseillais" (i.e., inhabitants of the city of Marseille is the south of France, where I am from) in provençal (the local dialect of occitan, the historical language of this part of Europe), the website displays random pictures of the calanques (https://en.wikipedia.org/wiki/Calanque).

- https://libertai.re/ using La Réunion's TLD to make up the word "libertaire" meaning libertarian (in the sense of anarchism not of libertarianism) and it is simply a landing page that displays the logo of and links to a french political organization called UCL.

- https://alexandr.in/ using India's TLD to make up the word "alexandrin" which means alexandrine in French, a type a verse, where I still host old poems I wrote years ago.

And, not really in the same vein of using a TLD to make up a word, but still the the category of cool domain names, in addition to the one for my personal email address I mentioned in my first comment in this thread, I also have:

- https://pablockchain.fr/ mixing my firstname "Pablo" and the work "blockchain" — and also sounding like "not blockchain" (pas blockchain) in French — to centralize all my blockchain-related work, mostly in French.

- https://pablo.plus/ to have a single and simple link to see more (hence the "plus") about me (it's actually a kind of self-hosted linktree). I use it for the sole link authorized on my twitter profile for example.

I think I'm gonna stop here haha, I should get back to work!
> Or what is your point here?

That with enough money, all of the other needs can be fulfilled one way or another?
But outside of messaging, music and browsing the web. how many native apps do you/people actually use?

Because I'm personally under the impression that this is what most people use their phone for (maybe play a game or two as well). tough this might also depend on the countries where I lived (and when).

And some people also take pictures of course
> It's that serializers in Rails are the most prominent place where you'll have cpu-bound performance made visible.

Sorry, what other interpreted language has significantly better serializiation/deserialization performance than Ruby?
I'm not entirely convinced that the ninth case is necessarily an miscompilation. My understanding of the standard is that C99 6.7.3 p6 and C11 6.7.3 p7 allows for exactly this behavior. One can argue (as the author does in the linked paper) that the last sentence is about what it means hardware-wise, but completely optimizing away statements that have no effect on the abstract machine level ('x;', 'x = x;', ...) is something that seems not only permitted but even reasonable.

But it does not make much sense to actually want to force a read for side-effect in portable code. For a MMIO register of some MCU/SoC the code is not going to be portable in any meaningful sense anyway, and for things like portable OS drivers for weird hardware (like VGA...) you have to use some kind of OS-provided macro that does the right thing wrt. caching and barriers anyway.
> I tell you with certainty that yes, I can

So, you seem to have made up your mind. Then why do you ask the question here on HN? What do you hope to gain from that? Are you looking for comments to tell you how awesome you are? Must be quite the bummer not to get them.
I have no knowledge of ports except from what I have seen in the "The Wire".
Longshoreman and teamsters' union - is it all hyperbole or is it as inefficient and doggy as that ???.
He's not talking about the contents of the ToS. Click the back button on the page, it takes you back here. You'd expect it to take you back to the homepage of the site. If you deeplink to that page then there's no way out other than editing the URL.
> ElGamal/DSA is fragile and difficult to implement securely in a way that doesn't reveal secret k. ECC (and somewhat particularly NIST curves[1]) is also very difficult to implement securely from side channel attacks[2].

IMHO this isn't evidence of a backdoor. Side-channel protection is hard. RSA decryption and especially keygen are also tricky to implement in a side-channel-protected way, and a widespread timing attack on RSA decryption in many libraries was published earlier this year [3].

The NIST p-curves used the state-of-the-art elliptic curve shape for general operations when they were released: short Weierstrass curves over prime fields. Edwards curves are easier to defend against side channels and are overall a better choice (with their own rough edges, mostly involving the cofactor), but those were not known until 2007. Montgomery curves (similar rough edges to Edwards, plus the point at infinity) were known earlier and are nice for key exchange, but they are not as nice for signatures.

Overall I would not choose the NIST curves for a new design today, because Edwards/Montgomery curves are a better choice. But I think the evidence they were backdoored (mathematically or otherwise) is weak.

[3] https://people.redhat.com/~hkario/marvin
> if you have enough knowledge of a particular language, you can be very fast and secure in your applications.

So everyone using any kind of framework is a moron or simply doesn't know what he is doing? Really?!
I normally solder at 300C-350C, I can't imagine under 200 reflowing the solder, especially without contact. I have a cheap hot air rework station that I run at 400C-450C (or so it claims) and it is still quite difficult to get anything molten with it (except nearby plastic that I forgot to cover in kapton).
Maybe the closed space has some advantages that make up for the lower temp.
Do I remember the dotat.at domain for having some funny naming thing way back in the day? Was it the email dot@dotat.at? Yeah that’ll be it.

It might have inspired me to register `signaslongasitendswith.com` so that I could tell people that my email address was “put whatever you like before the ‘at’ sign as long as it ends with ‘dot.com’”.

Felt clever in 2003. I never got any mail.
Jack Ma is kind of a special case though, as he seemed to feel he was a special case that could get away with challenging the CCP.

While he was still living in China.

Maybe a case of high INT stat, but low WIS?
Others have explained it, but I'll give it my go:

A bond has these intrinsic components:

-Face value: principal amount the coupon/interest is calculated on

-Maturity: Term/length of the bond

-coupon[0]/interest rate: periodic payment based on the face value, often once or twice a year.

If I own a bond, I can sell it like I would my car or a share of stock. If I have a face value $1000, 10 year, 10% coupon bond that has 6 years left, but I need cash now, I might sell it to you for less than its worth to close the deal faster. So if you buy it for $500, none of the intrinsic components change. You're still going to get 10% of $1000 annually. But on the $500 you spent, to you it's really ~20%. That's 'yield'. The lower the sale price the higher the yield.

FDIC insurance only goes up to 250k but if you're a big company, what do you do if you want to keep 10 million cash on hand as safely as possible? You buy US treasury bonds because they're the safest thing you can and every other big company is doing the same so there's always demand and you can trade them for cash extremely easily. Think of them like 'big boy dollars'.

Depending on the supply/demand any given day, the going price for a particular face value/maturity fluctuates, and so therefore the yield does as well. This is seen as a proxy to market sentiment and used as a benchmark for calculating other rates. In practice most people will just use the term 'interest rates' to refer to it, even though 'yield' is technically correct.

[0] bonds used to have literal paper tear-off coupons that you brought to the bank to get your payment.
>This isn't actually a very strong moat.

That's true for the likes of you and me, but for the other 97% of the population, not so much. Most people just go for the default or are completely unaware of alternatives or don't trust alternatives
Agreed, it needs to be Android based - the other option would be to implement iOS APIs, but Android would be a lot easier.

An analogy would be if you make a browser, to use standard HTML and HTTP, not try to invent your own thing.
asdf handles Ruby just fine also. I use asdf for Ruby, Python, Elixir/Erlang, Node, and probably a couple more that I've forgotten.
I cannot find where they are for any of those things you mentioned in your comment.

They are still campaigning against biometrics, surveillance, Trojans, data retention and electronic voting systems.