skysight-inc/HackerNews huggingface dataset:
Those of you who use (or used) this as your shell: care to share your experience?

It seems a lot less full-featured than https://xon.sh/, but maybe you don't need a lot of bells and whistles for regular usage. I mostly run build, execute, and install commands.

I'm somewhat enticed at the possibility of being able to wrap common executables into forms that are typed (like nushell or elvish) and manipulate them in a way that leverages the type checker.
I agree that it is usually useless to rant about an issue in the first place.

In this case, I can see that they were really neutral and understanding in the very first issue. After two years with little to no progress, I'd say it is natural to vent. Especially if they cannot get out of the situation they are in.

It looks like the original poster needs to use MAUI in their production environment. So they are already dependent on it. Which is to be expected, because MAUI already comes with a go-live license.

Also, I'd like to point out that this is not the pet-peeve of a small indie team. It is the future UI framework of a multi-billion company. If the team is understaffed, there should be something done about. The resources should be available in this case.
Sacking, revolt, return: how crisis at OpenAI over Sam Altman unfolded
Reasons for not considering overseas contractors come down to friction: language, culture, timezones, payments and money, taxes, legal issues, etc. Small things can combine to make an overseas contractor too much hassle to work with. Cultural norms and language differences can scare off customers not experienced with overseas contractors.

Reasons for considering: significant savings in cost, unable to find, recruit, hire, and keep local talent.

Open source contributions mean next to nothing in most professional contexts. Unless you have your name all over a project everyone has heard of, don't expect much interest in that work. You have to communicate ability to solve business problems and add value; contributing to open source projects generally doesn't do that.

Referrals, word of mouth, reputation remain the best way to find good contract work (or f/t jobs). Cultivate a professional network and a real track record before putting lots of energy into a "tech stack" or open source contributions.
I don't think I've tried that.

Thanks for the heads-up.

[UPDATE] Ah. Now I remember [0]

It does roughly that, but it still insists on bringing in the entire repo (as does all Git).

The thing that SS did, was allow you to create a "chimera" workspace, composed of just tiny parts of other workspaces.

It was a great way to share sample and SDK stuff, without, for example, sending over a ton of testing code.

Many of my repos have more testing code than implementation code; not to mention a ton of documentation.

[0] https://git-scm.com/docs/git-worktree
>No, the application should be resistant to XSS instead

Or we can admit that vulnerabilities are a likely possibility, despite all of our efforts. Therefore the most secure approach is to understand that limiting the impact of one vulnerability is a reasonable way of dealing with it.

Otherwise you're suggesting running application code as root on the machine isn't a problem, since your application has no vulnerability.
I squarely blame Adobe for this stagnation, because I remember many people predicting that exactly this would happen when they bought Macromedia. Adobe just kills things, on purpose. Steve Jobs gets a side-order of blame.

So happy I don't give those shits money any more. Thanks Serif!
> Heckler's veto

Often motivated by https://en.m.wikipedia.org/wiki/Tall_poppy_syndrome.
SameSite=strict is weird, because it means if someone follows a link to your we application they will be treated as logged out in the first page they interact with, then logged in on any subsequent navigations they make within your site.
I work for IPinfo.

>the ASN is a string of asn and name, no org or country

Yeah detailed ASN information on the API level is available on paid tiers.

However, we have a free IP to ASN Country database that is updated daily and provides full accuracy. That database provides ASN, AS organization, and AS domain information.

I think the reason we don't have more ASN details on the API even though we provide more information for free in the database is because of the target audience and usability of the IP metadata.

Our API allows for tokenless API access for up to 1,000 request/day. There is no compromise with data accuracy. The goal is to be generally useful and extremely fast. Detailed ASN information is still freely accessible from the website, though. So, we have to balance out free API, free website information and paid API/database.

I have been reaching out to folks to adopt the free IP to Country ASN database, as it is free to use and provides full accuracy. If anyone wants to build a public API on top of the IPinfo free database that return more ASN information available there, they are more than welcome to that!
Svn externals provide similar capabilities, though I don’t remember if an external can be an individual file. TortoiseSvn on windows made it not to painful to use.

https://svnbook.red-bean.com/en/1.7/svn.advanced.externals.h...
> BBC has never really had a sustained drop in content quality,

because it was always at zero?
Sure I'd learn to code again. It's literally opened so many doors in my life it's ridiculous, and gave me a far better job than I'd have gotten otherwise.

As for how I'd go about it... probably more through experience than through tutorials to be honest. My experience is that I learn far better when I've got an actual goal to achieve and learn what's needed to reach that goal, not when I try to follow a pre prescribed set of instructions to build some useless toy.

I'd also tell myself that a complex/ambitious project is usually the result of many pieces of simpler, piecemeal work over time rather than something that's all planned and done in one go, and that I should learn the basics and get them working in a simpler form first rather than get discouraged I can't make my dream project right away.

I suspect if I'd known that as a kid/teen, I would have coded in more than just HTML and CSS.
This is just you confirming that tons of research is essentially fraudulent. If it can be contradicted it absolutely should be, that is how fields progress and weed out bad ideas.
"For security reasons, it is advisable for users to log out from a web application once they have completed their tasks."

Isn't that a net reduction in security?

Users are more vulnerable to phishing attacks if you've taught them to constantly login and logout of the applications they use.

Much better to have them sign in infrequently but more securely using 2FA.
You weren't kidding. Now I want to make a little bot too. In freestanding C with direct Linux system calls. :)
Adopting beliefs can be a strategy to signal commitment to an in-group
It is common to see people posting absurd beliefs/political takes on social media. One likely reason is that absurd/radical beliefs in the direction of your group's positions give credibility to your commitment to your group.
Stop using "Stop using X" arguments, without offering an alternative.
> Also related to the ending, I‘ve come to realise more and more that most people reason out of belief first and arguments second on a lot of things (maybe most things?)

This is the thesis to the introduction to Jonathan Haidt's The Righteous Mind. Boiling it down, he argues that self-justification is the most fundamental human reaction. We reason after, not before, and our reasoning flows to align with our own justification.

(Luther would be proud.)
Dev with agency here. There is clearly an issue, but "agile" is not it. "Agile" doesn’t mean "ship unfinished products and never care for issues".

In fact, it means quite the opposite: Start with as little as possible, as polished as possible and improve from there. It's actually quite nice to work with, if every role is on the same page.
> A counter example is software where an open source project typically requires no funding or approval to initiate, but equivalent initiatives in professional settings are frequently vetoed due to the emotional insecurity of a select few vocal participants.

Is that true, though?

"Equivalent initiatives in professional settings" require resources being allocated to projects that bear no relation with company goals. By definition, this means these types of projects require a company to fund a project that is not aligned with the company's purpose. Why would anyone pay for something that they don't need or want or care about?

Resource allocation is not silencing or vetoing projects. Just because your employer doesn't pay you to work on your pet project that does not mean you're being censored.
Ask HN: Are the Sodium-Ion Battery News Related to NASA's Sabers?
What the headline says. I think SABERS got some interest last year, as a _very good_ alternative to Li-ion. My question is, are these recent news about sodium-ion related to producing the SABERS one, or is it another technology altogether ? If its the latter, any posts that talk about the internal chemistry/how it's different from the one NASA aims to develop?

Link to a SABERS report: https://www.nasa.gov/aeronautics/nasas-solid-state-battery-research-exceeds-initial-goals-draws-interest/
Terrible article. JWTs can be stored in cookies giving you httponly and samesite. If you have XSS vulnerability, what you store your JWTs or if you use JWT do sessions is the least of your concern. Every request to the domain still has cookies attached even with httponly set, that includes all the AJAX initiated requests. HTTPonly just prevents javascript from reading the cookie. It just prevents cookie theft.
I only used OSH Park once before switching, but I ended up waiting many data just for them to have enough orders to batch together and send to the manufacturer. In comparison, I can order boards from JLCPCB and components from DK on the sane day, and get both around the same time.
That is debatable.
That's the thing with details; sometimes you don't know the extent or context in which they will occur.

Your perceptiveness at a particular moment could determine a good or not-so-good outcome.
However, you may not have the expertise or familiarity in a domain to spot micro, mini, or normal details.

My personal takeaway is to be mindful when you are on autopilot to avoid missing details and to avoid keeping your blinders on.
The problem isn’t so much JWTs for auth, it’s just where you are storing them.

The answer here is just to store your session JWTs in HttpOnly secure cookies, something we’ve done for years.

It honesty simplifies everything anyway. The client has no need to see it or manipulate it. The client code just watches to see if its requests come back as unauthorized and boops you into the authorization process if you are. No need to manually append any sort of auth onto any request. The cookie jar does it for you automatically. It’s really how you should be doing it already.

Only real hitch is you can’t cross domain barriers, but that’s not insurmountable. Couple ways to handle it, we generally prefer a little handshake process and a separate JWT per domain. That said, we try to keep everything on subdomains and set the cookie for .example.com
In this case it’s less fraud and more the fact that it can take months or even years to undo a death certificate during which time one would experience undue hardship. Making it hard to sign is by design.
Related: has anyone tried scheme shell (scsh) and what is your experiences with it?

https://en.m.wikipedia.org/wiki/Scsh
Unless you’re physically present for an event, literally all news you can possibly get about that event is a generated depiction of it.
Anyone have experience getting product involved in a community led open source project? Working with great product managers is the best bit of software engineering, but i can think of a billion ways that could go tits up if applied to a FOSS project.
Windows at 1000 Frames per Second: The Raymond Chen Interview [by Dave Plummer]
The most likely reason for bullshit around the UFO issue is to cover up secret aircraft:

https://www.military.com/history/why-first-us-jet-fighter-pi...

But that doesn’t mean looking into aliens is silly. The Fermi paradox is genuinely mysterious and one potential answer is “well actually, they are here…”

What is necessary is to just ignore all the crazy bullshit in the UFO field including all the new age wackos. Unfortunately even renaming it to UAP didn’t do the trick. There’s a whole grifter infrastructure here.

I don’t think you need to involve the CIA. There’s plenty of grassroots insanity here. If there is or was CIA involvement I’d suspect it was gorilla masks for secret aircraft.
The latter part should really be looked closer at. You cannot simply attach a company’s market capitalization to how funded a team actually is. People constantly overlook that. That’s true at many big tech companies too. The assumption harms just as much as pitchforking.
Automating Reminders
Automate a reminder to perform manual work, if you cannot automate the output.
90% of ‘new’ is just reposts of things that have already been heavily discussed here.

Personally, I am glad to go through the new queue and flag topics that have been beaten to death.

I’m sorry that you feel participating in the curation of this site this makes you oppressed, but you need to learn not to take things so personally, and realize that there may be many reasons users flag posts.
I’m new to HN, could I check how does this report/vouching thing work?

If someone is new and their comments get reported (because people disagree? or must there be a violation of the site guidelines), then the comment would be marked as dead and thus hidden?

Who can vouch for these users then? Is there an upvote/downvote mechanism too that’s not visible to me because I’m a new user?
The Grusch testimony points to a vast off-budget organization that researches exotic tech. They protect their turf from traditional science.
> The first problem you’ll encounter is that cutting your 2x12s to the right angle is a bit complicated because there’s no obvious way to trace the correct angles. You can either get creative (there is a way to trace it), or you can bust out your trig book and figure out how to calculate the angle and position of the cuts.

My first thought would be using a string: Fix a string to the floor at one end and to the wall with the other end, at the places where you want the upper edge of the 2x12 to meet the floor and wall (the exact locations are "input parameters" that depend on your design, i.e. on how steep you want the stairs to be - you can't trace or calculate them)

Then pull the string taut and now you can measure the exact length that is suspended in the air (which will be the length of the 2x12's upper edge) as well as the inner angles it has with the ground and wall (which will be the cutting angles from the upper edge towards the lower edge).

Of course even this is easier said than done. I'd assume that keeping the string taut and not hanging through might be a problem (catenary curve etc).
I just wait until I can buy it on the Apple TV store or I don’t watch it. Torrenting and maintaining the software to play movie files on my TV takes time and it just isn’t a priority for me.
I have been locking my computers by habit since I was a child. To this day I will lock before walking away to even use the bathroom in a house alone.

I even noticed this locking behavior a few weeks ago and chuckled at myself. That Windows+L motion as I get up is just so ingrained.

If I'm not actively in front of my PC it is always locked.
So did you just steal the name of another component?
Does that get all posts? I thought it was just the first "page".
You could still have assigned reviewers like in a conventional journal, which maybe if done right could stimulate broader discussion

JOSS has a review process like this, but I don’t think I’ve heard of any journals focused on primary scientific results using this kind of GitHub based review process

https://joss.readthedocs.io/en/latest/submitting.html#the-re...
I think I am far less likely to be successfully phished (compared to earlier internet) now that I have a password manager programmatically checking domains to choose credentials. I wouldn't think everyone is doing that, but maybe iOS and Android have kinda nudged the majority to use password managers?
I'm rather sympathetic to the issue in general, but it's comical coming from Loeb.

He's been steadily pushing into at the very least fringe territory, and at the worst outright pseudoscience and quackery. He's mad people are pointing that out. That's what this all stems from.
I don't care about Binance or CZ or even crypto but it was worthwhile wading through the article just to learn this:

"The U.S.’s point of view on the matter, elucidated at length in any indictment for financial crimes, is that if you have ever touched an electronic dollar, that dollar passed through New York, and therefore you’ve consented to the jurisdiction of the United States. Dollarization is very intentionally wielded like a club to accomplish the U.S.’s goals."
> Metal Gear creator / problematic gaming legend Hideo Kojima

Why is this particular phrasing necessary?
It’s counterintuitive, but yes, depending on the project cross-platform frameworks can actually be harder for small teams or one-person operations to manage well because they increase the number of layers in which bugs and quirks can show up in — instead of just e.g. Mac AppKit and Windows Win32 bugs, you’ve now got to deal with those plus whatever bugs the cross platform framework has.

This is particularly true for projects where the UI is not overly complex (and thus, not where most of your energy is going), in which case it can make more sense to do code sharing in a library that’s pure business logic (no UI) and platform independent.
Maybe it's Schadenfreude? (The experience of pleasure, joy, or self-satisfaction that comes from learning of or witnessing the troubles, failures, pain, or humiliation of another).

Although as far as I know that usually requires the others to have wronged you in some way.
Lossy compression.
That’s sort of general problem with people regardless of industry who’ve drunk the startup coolaid … wrong way around, let’s say. The point of innovation is not to reinvent the wheel. Saying you are startuppy does not excuse you from actually learning about the field. One could even radically propose knowledge of field helps to find innovations. What one should avoid is saying ’no’ just because such a thing does not exist yet. If the thing exists, has a name like ’Big Bad Mistake’, you should at least acknowledge it. (Yeah yeah, rockets were impossible and Musk beat them but that happened via respect of existing art and extending it, not completely ignoring it).
> The point of JWT vs opaque tokens is that you can just inspect the token itself to derive permissions without hitting any sessions in DB, right?

No. Focus on “token” instead of “JWT.” JWT is just a standard.
I think the developer is justified in his self-described rant. He has gone through other channels and engaged with the project leaders directly. He has waited years for the bugs to be addressed.

Microsoft is in the wrong here for selling this as the future and not dedicating the resources necessary to fulfill that promise.
The sounds are not that intrusive...While others have pointed out the costs involved in solving them, the real question is "will muting each and every sound sell more cars?". Of course from an engineering point of view the other question is "are these sounds indicative of something that will fail prematurely?". The complexity of adding some sort of muting may introduce other modes of failure. Sometimes the best solution is the simple solution.

At this point in the EV marketplace the I would say the answer is no to both questions. Tesla is far better concentrating their engineering teams on new products that can continue their growth.

Now if some competitor comes up with a perfectly quiet car and that becomes a selling point, then it is time to revisit the engineering.
I work for IPinfo. We have higher level IP category information on our website for free.

We categorize ASN and companies/organizations based on 4 categories: ISP, Education, Hosting and Business. This ASN level categorization are done mainly from WHOIS and other public internet records.

We don't sub-categorize by schools, university, public research institutions, k-12 etc. The reason is accuracy. Even though I can understand the possible methods for doing this, the issue is that it can not be done reliably at scale.

As a data provider, from our end we hope to provide the highest possible accuracy and vouch for the service we provide. For this level of classification, we will generally request users to say what data they need from us, and we try to help them come to a solution that they have to build on their own. They can do whatever classification they want to do based on their personal level of tolerance for accuracy.
The law has never been about cookies themself but about tracking user and asking their consent for selling/sharing their identifying data for things unrelated to the displayed purpose of the site.
Not long ago someone from Maui posted here about the “momentum” within Microsoft.
From the large corps I've worked with - those that made $B in revenue - they do everything to reach rev goals they told investors they would reach, every $100k counts. If you think a large corp is throwing away money, think twice.
Very common in rural Ireland, and having such a wall repaired or made is either going to cost you nothing or a LOT of money.
So, the author links to a 32-page arXiv paper that criticizes his own paper, and calls that criticism "toxic" (and "misinformation", too), and contextualizes it with angry Twitter mobs? That's an odd perspective.

What exactly does he mean when he says Harvard astronomy department postdocs are being "terrorized" by "aggressive" criticism?
No. He was replying to this post:

> Actual heating systems can be better than 100% efficient, while crypto mining or cinebench or whatever is <100%.

The intricacies of why a crypto minor is less than 100% efficient when working as a heater are easily deduced, unless you’re precisely the sort of midwit that likes to leave replies such as the one you left.
Large carbon capture has been solved and demonstrated using a technique called iron fertilization. Basically just dump iron sulphate into ocean to simulate large algae bloom (nature best carbon capturer). They will then die to sink to bottom of ocean or eaten as part of ocean food chain. It was so successful weather actually registered temporary cooling in one of the experiment. It scared the regional government (Canada if I recalled correctly - probably directed by USA) this can solve the global warming and swiftly banned it. Government loves carbon taxation. Solving carbon issue is never a consideration. Even Greta has been trained to not touch about the real solution iron fertilization to solve climate change. Everything else solution at this stage can be effectively smoke and mirror scam encourage by worldwide governments. You can talk to Putin about how much he wants Siberia thawed. USA and EU loves the carbon taxes. Anyone thinking governments wanted reverse carbon capture, I have plenty of climate change books to sell you.
I love the ellipsis. Ruby has made so many good choices as it moved into 3 and I’ve only been happier and happier with it.

I also write my Ruby Seattle style, so I’m one of those weirdos.
That would also incentivize the paper writers to be exacting in describing their methodology and lead to higher quality papers.

If a paper needed to clear the bars of

- can be reproduced by reading the paper and/or a few meetings with the original team

- data is independently reproducible to within the usual statistical parameters

It would presumably increase the signal:noise of research.