skysight-inc/HackerNews huggingface dataset:
Yeah in general the existence of so many sophisticated peoples without surviving words or even names/identities -- peoples with the ability to wage warfare against established civilizations like Egypt -- is a bit haunting to me

It reminds me of Graeber's Dawn of Humanity (good book, though I would also say there are parts you can skim, and still get the message. Also I don't take everything at face value, but it's worth thinking about)

He reminds us that there were politically conscious groups of Homo Sapiens living for tens of thousands of years throughout history! They organized their societies in much different ways than ours.

But many of them didn't leave a trace, either because they didn't write stuff down, or because their documents were destroyed by other people who were able to get on ships with weapons and diseases.

(I actually didn't know that the Romans completely destroyed Carthage's documents and libraries before watching the podcast. They wiped them off the face of the Earth, so the only things we know about Carthage are what the Romans said. Also, "Carthage" isn't even what they called their city -- it's what the Romans called it.)

History is really written by the winners of wars, but there are other ways to live
I agree entirely. Obscuring the text was largely pointless even before smart phones became common.
I'd rather have a slow page because of lazy loading, than a wrong page because the related objects are not loaded (i.e. typeorm)
Do you first search online for the one you want to stay at?
Around here (Montreal), cabs were miserable scammers and scumsuckers that would drive you to ATM machines in the middle of the night to coerce you to withdraw cash to pay them.

I'm glad Uber fucked them to shreds. Now, of course, they're all polite and have credit card machines.
You are the outlier. This is not the norm. Passkeys do this for the broad public, with the keys backed up to ecosystem cloud storage and defended by strong security systems at Apple and Google. Lets not argue passkey sovereignty in this thread, there are efforts ongoing to make them exportable so you can manage them in password managers. I agree it is a valid concern to prevent ecosystems holding users hostage.

Long strings in password managers was a shim until Passkeys got here, because passwords suck. This is a well worn path in enterprise with PKI. Passkeys are PKI for the Average Joe. Folks here will always have esoteric auth use cases, but you design for the average on this topic (consumer auth).

https://passkeys.directory/

https://passkeys.2fa.directory/us/

https://bitwarden.com/blog/a-closer-look-at-password-statist...

> 19% of respondents said they used “password” as their password (!!!)

> 52% use easily identifiable information in their passwords, such as company/brand names, well-known song lyrics, pet names, and names of loved ones

> Best practices are still diluted by bad habits, with 85% reusing passwords across multiple sites and 58% relying on memory for their passwords

> A majority (68%) of respondents manage passwords for 10+ sites or apps and yet 84% of respondents reuse passwords

> More than half of respondents forget and reset their passwords on a regular basis

> Around a quarter (20%) were affected by breaches and a majority (80%) were prompted to reset their passwords

> Over half (56%) are excited about passwordless options, and 50% are using or would use ‘something you are’ forms of passwordless authentication
Big tech would _love_ to "loose" these cases so they can gain a complete monopoly on it. It would take massive capital to pay the aggregate license holders, working in Capital's favor.
Anything and I mean fucking ANYTHING to prevent devs from having to sanitize inputs.

smfh.
Is this not fraud? Why have users not been able to recoup their funds?
Was lessso taking issue with burying, and moreso with the recent spate of bullshit "This is good for everyone" or "The world suddenly changed" or "This was always the plan" posturing in announcements.

"We optimized for one thing. Things changed. No we're optimizing for a different thing."

Doesn't need to be more obfuscated than that.
It would be less effective than just taxing co2.

If you’re not sure about the price you can do an auction of a limited contingency of emission certificates.
I think you would be right that simulation was a bit misleading. In my experience, a simulation is related to time, and updated in discrete time steps. Maybe "Procedural Generation" would be a better term...
>Spotify Connect is a real game changer.

That sounds like a minor quality of life feature, hardly a "game changer". Do you think this is impossible for other companies to replicate?
Location: Uruguay
Remote: Yes
Willing to relocate: Yes (Uruguayan + German dual citizenship)
Technologies: Rust, Rails, Clojure, Postgres
Résumé/CV: https://www.linkedin.com/in/nicol%C3%A1s-mayora-roth-356736227/ (Request pdf to email)
Email: mayoranicolas0104+hnhired [at] gmail [dot] com
> Why would failing a customs check cause you to be kicked off the train? Either your goods will be confiscated, or you'll be arrested etc.

It's easier for everyone if you deny entry rather than prosecuting for unlawful entry. If you can kick people off while they're still in a country they are presumed to be in lawfully, they can figure out their documents and come back later. If you arrest them in the destination country, they've got to figure that all out from immigration detention.
>middle class.

There's no such thing. Classes have clear boundaries. That's why we originally used the word class.

Children, reitrees, and the inedependently wealthy aren't working class because they don't (have to) work. If you must work, you're working class. That's it. Those are the real classes. Most of us are just working class, plain and simple. Myself included.

It's a propaganda term with no basis in reality other than people's feelings: https://www.fastcompany.com/90330573/who-is-actually-middle-...
I thought other streaming services have similar functionality, right? I know Deezer has Deezer Connect.
I can't speak for the OP but take into the current Media Matters "outing" of X over the ad placement next to anti-semitic content.

Basically Media Matters juiced the X algorithm to give them less than 10 impressions of big ad spend clients ads next to anti-semitic comments they entered on their own sock puppet accounts (with few or little followers), then passed that contrivance off as truth, stating brand-destroying anti-semitic content is rampant on X. Where are the disinformation experts now decrying MM's bullshit? Where will they be in 30-36 months after X sues MM into oblivion? Hint: likely silent at their desks. Just as they have been over numerous lies targeting non-liberal narrative-busting realities.
Have a pitch on what differentiates this from django-toolbar? Just the focus on query count monitoring?
Patriot Act expired in December 2020. It was not reauthorized by Congress. Trump threatening a veto might have influenced it though.
Can't have your data leaked when you put everything online yourself. /s
That's appalling. D-:
Plantarium was also developed in Firefox ;)
> regardless of any benefits Wayland may have over X, I won't be using Wayland.

That's fine. I don't really know what your 'mystery feature' is, but I feel pretty certain it's on a Wayland roadmap somewhere. The same cannot be said for new features in x11.

> I don't care if Wayland exists, I worry that it will become the only realistic option.

It is the only realistic option, if you care about security and isolation. x11 is very flexible and fun, but it's not surprising that the people taking the Linux desktop seriously are pushing for Wayland. It sucks that you're unable to use it for whatever reason, but people aren't going to reallocate development resources to give a dying protocol new features.
Bad article.

> The explanation is vague, so we don’t know exactly how many files were accessed

They didn't access "files" on 23andMe's servers; they scraped information that 23andMe was making available through its UI to even the most distant of DNA "relatives." In a way I think that makes 23andMe even more culpable than it would have been if someone were able to break into their servers.

> The company later confirmed the data’s authenticity, saying a hacker most likely used credential stuffing (trying an infinite amount of username/password combinations) to access its systems.

That's not what credential stuffing is.
A monopoly of what? A few people’s podcasts?
Presumably the union should calibrate its demands to the point where the cost to the employer is lower than the cost of replacing the workers but higher than what they get without the union.

Surely there is some room there. If the cost of labor were already equal to the cost of replacing the labor, then the employer might as well just replace them now. So it must be lower by some amount. The point of a union (it seems to me) is to capture a larger portion of that surplus, but leave the employer with enough that the arrangement is still worthwhile.
> They didn't hire "for the sake of hiring" -- they hired specifically to build up their podcasting and audiobook efforts, which were totally new products within the app. Which they thought were essential to staying competitive

How many employees does it take to take an app that already works great on playing audio files and do a bit of UI redesign and change those audio files from music to podcasts and books? It's not like they're building this thing from the ground up.

The podcast app I use was built by one person, granted over a few years, and it works way better as a podcast app than spotify does. They are going to layoff 1,500 people. I assume those aren't all engineers but I think a team of 10, (including devops and QA) could build each of these features in the timeframe they did plus the additional business side of the ventures (negotiating contracts, acquiring rights, etc.).

What were the other 1450 people doing?
I’m not talking about marijuana. I’m talking about opiates. Often, initial exposure comes through entirely legal means, e.g. pain prescription for wisdom teeth removal.

Certain classes of drugs are highly addictive. There is a major profit incentive to hook users on such drugs. This really doesn’t apply to marijuana because it’s not that addictive.
Troy Hunt is such a treasure. And for us web application developers, there is no excuse for not having protection against credential stuffing! While the best defense is likely two-factor [1], checking against Hunt's hashed password database is also very good and requires no extra work for users!

I don't have anything to back this up, but my guess is that the vast majority of compromised user accounts comes from credential stuffing/password re-use. It's really surprising to me when I hear that huge companies don't do this check.[2] It's simple, easy, takes about a day to set up.

If you're a young CTO or early-stage engineer working on a web app and have never been targeted with a credential stuffing attack, let me tell you: It's coming! It's just a matter of time before it's 1AM and your phone blows up; your site is getting hammered; you think it's DDOS, but then realize most of the hits are on your login page, then realize that and then realize with a horrible feeling that some % of those hits are getting through the login page. You'll be up all night dealing with it, and then you have to make breach notifications, and that really sucks.

Troy Hunt's free database will save you that heartache (probably). Just do it.

1. https://cheatsheetseries.owasp.org/cheatsheets/Credential_St...

2. Like 23andMe. https://news.ycombinator.com/item?id=37794379
Did Hamas Make Millions Shorting Israeli Shares Before October 7 Massacre?
Yes, I do a map search.
Why didn't you move upvotes also? Because of this it disappeared from the first place on the front page.
I have always assumed the distinction was whether it had its own on-board memory or talked over the bus to external memory. That's a kind of who-cares thing in my mind.
They already did that; in France we have e.g. "Valence TGV" which is a secondary train station far from anything, whereas Valence already has a train station in the city center.

All other major cities have the same thing now.
I would think there is some possibility for wind to be combined with hydroelectric too; Both the drainage of cold water from the basin and the rapid cooling on the spillway should create air currents.
Canary Releases with Apache Apisix
I'm older than these.

Would you like to play a game?
Hilariously they had first registered their name as "PREVIOUS COMPANY NAME LTD" and then changed the name to "> LIMITED" just for the joke.
Extremely based
I’ve always found the breathless claims about genetic information being leaked, the shlockiest fear mongering of this data breach.

Seriously. What’s the threat model here? A human clone? Someone hacking a police database to replacing some criminal’s dna record with your record? None of these are plausible.

Even the reporting about compiling a list of people of Jewish ancestry is fear mongering. An antisemitic troll post? Absolutely. An actual novel threat? Well, probably not much more than a regexp and phonebook.

Seriously. Give me a real scenario that has been demonstrated that uses this information in a way that someone with… oh $10 million in resources could do. I’ll wait.
It looks like Critque is a branch of Gerrit. The user interface is similar. I assume that Critque is Grerrit with a bunch of Google-specific changes.

Gerrit itself is an interesting review tool. It uses Git references to manage the review changeset before it is merged into the parent branch.

I used it on a project that used Redmine for issue tracking and Gerrit for the git repo and review tool. It took a bit to get used to how to git to push changes to a Gerrit review so we ended up using Git extensions to manage that.
I'm very poor with CSS, nowhere near good enough to call myself "full-stack," but the work I've done is enough to convince me that merely centering anything goes against the grain of the web.

If the premise of this article is that there is a graceful way to make things look good that doesn't required fighting against the grain of HTML and CSS, I'd like to hear what professional front-end developers think of that.
I thought the s tag was for sarcasm
This makes more sense when one recalls that a whole lot of powerful people, including and perhaps especially politicians, come from a handful of prestigious schools, and are surrounded by advisors and assistants largely from those same schools.

[edit] and of course the real rabbit hole is private prep schools. Good luck becoming president in this century without attending one. Wonder what their donor lists look like.
Spotify is a sales channel. Walmart doesn't actually make anything, US car dealerships don't make anything. But they have customers and that's all it takes to sell something.

And, strangely enough, once a sales channel is big enough it can begin taking a bigger slice of profits and telling suppliers what they should be doing (a la Walmart).
Is this a surprise? All of these universities are known to bow down to the biggest wallets, so why on earth would anyone expect that they wouldn't can any investigations to someone who donated $500 million? I'm shocked that anyone else is shocked.
Starling-7B: Increasing LLM Helpfulness and Harmlessness with RLAIF
Isn’t last in first out ageist?
"However, it must be taken into account that in most European countries routes are simply closed as soon as construction begins. This is not possible in Switzerland because of the busy rail network. That's why operations in Switzerland continue during construction and renovation work - which poses more risks."

https://www.srf.ch/news/schweiz/unfaelle-mit-bauzuegen-gleis...
They are a music distributor, and they have good relationships with the rights holders and will do their legwork for them.
It requires very little effort to get started and the rewards keep coming. If one starts with Monarchs, you have the help of voluminous amounts of research and advice online to help. The whole process is fascinating, and one will often start adding new species as familiarity with the first is gained. An added bonus is the chrysalis of a Monarch looks like a precious gem.
I wanted podcasts in Spotify, but you don't know me. Sample bias?
There's a lot of assumptions and assertions in this article and very few sources or links. Not even sure where to start with this one because almost everything here is just an assertion from the author.

> However, because so many people think that they’re supporting creators and “sticking it” to Big Tech in supporting these copyright lawsuits over AI,

I don't care about "sticking it to big tech", I think it's only fair to pay for using someone else's work to your own benefit.

> Copyright law, by its very nature as a monopoly right, has always served the interests of gatekeepers over artists.

Copyright has never served artists? That's a huge assertion to just throw out there.

> This is why the most aggressive enforcers of copyright are the very middlemen with long histories of screwing over the actual creatives: the record labels, the TV and movie studios, the book publishers, etc.

These are the groups enforcing copyright because in a lot of cases they are the copyright holders.

> This is why we’ve said that AI training will never fit neatly into a licensing regime.

Certainly true - we will need a new licensing regime to handle this. It's a brave new world.

> And, because of the nature of training data, which only needs to be collected once, it’s not likely that this will be a recurring payment, but a minuscule one-off for the right to train on the data.

This is a very strange assertion. Spotify only needs to download your band's MP3 files once so they should only pay you once? No, they use it on an ongoing basis to serve their customers, so recurring payments are appropriate.

> But, given the enormity of the amount of content, and the structure of this kind of thing, the cost will be extremely high for the AI companies (a few pennies for every creator online can add up in aggregate), meaning that only the biggest of big tech will be able to afford it.

Yeah this will lock out all of those scrappy mum and pop shops training their multi-billion parameter models on the entire internet.

I don't claim to know the proper solution to this problem, but it does feel desperately unfair to me to see companies like OpenAI slurping up the output of artists and benefitting greatly from it while the artists get nothing in return. I don't know if copyright law is the right place to look or not. Like I said, it's a brave new world. But this article is not convincing to me, at all.
It would be like comparing HN to Facebook, they are both technically operating social media sites but I don't think anyone would argue they are doing so at the same scale. HIBP ultimately is a hobby project that was really good at bringing the publics attention to the problem and booting Troy's social profile.
They may be able to get a refund from their bank, but this may depend on their bank's policy and how negligent the customer was.

They will have gone through security on their bank's app or website, which will have warned them about common scams like this and told them to check that what they are doing is legitimate.

https://www.psr.org.uk/our-work/app-scams/

I am assuming this is an "Approved Push Payment" scam where people are transferring money from their bank account directly to the fraudster, rather than by using a credit or debit card. If the payments were by card then a chargeback should be easy to file.
Florida seems like it’s terrible if you’re white. The weather is actively hostile towards you. People must spend a fortune on sunscreen. The vision of blue eyed people is relatively worse in bright light.
I think ideally the creator would be compensated by PrintThatVideo, who is taking their content and repurposing it.
Do podcasts that could be played on iPods but started publishing in a newer audio format cease to be podcasts?

The iPod has been discontinued. Should the term podcast be discontinued?
> traits related to leadership/followership , and a cognitive bias to assume integrity of leaders seems plausible

Also learned behavior.
If you really need VueJs in the frontend, consider, that you can simple serve the VueJs on any page where it is actually needed. VueJs does not necessarily mean you must create a SPA. VueJs can be delivered like any other script and this is often the easiest way without having to commit to build a full blown SPA.
And don't they make money from ads or subscriptions via YouTube or whatever platform they're on? I don't want to bother paying each creator, but I'm fine subscribing to YouTube or Pandora.
That’s the first time I’ve heard my analogy to job - relationships being taken to its logical extreme.
I used both Gerrit and Critique. There are some similarities, and some configurations of Gerritt can be similar. But...

Critique is not git based. And so a lot of the complexity around rebasing & commit management is just not there. Nor is the stuff about patch-oriented workflow, etc. It's a much simpler mental model (central monorepo built on a fork of Perforce, though they've added some DVCS stuff with 'fig' onto that since), and consistent across the whole giant monorepo. Some of the pleasantness comes from that. Some of the decisions and twiddly knobs in Gerrit probably come from Google teams wanting some of the Critique (or Mondrian before it) workflow, but on top of Git.

The UI in Critique is somehow a little more consistent and fluid and attractive. Many of the keybindings in Gerrit come straight from Critique, and having keybindings is one of the things that makes both of them much nicer to work with than the crap in GitHub, etc.

Gerrit is also extremely configurable, as you've pointed out.

The query language is one thing they have in common with each other, and it's very nice.

In my last year at Google I went back to working in Google3&Critique after working in Gerrit & git for some years, and I quite enjoyed it.
> We're just messy as a species. It'll be okay. Everything is mostly working out.

{Confidence interval we won't cook the planet}
Most of the important functionality that’s been added didn’t require the changes to UI that I consider a downgrade.
As long as we're creating confusing names, are there any Hypertext Machine Learning projects (HTML)?
I never run into this issue but isn't it that Django uses inner join for select related, so it does what it's supposed to do?

You can always prefetch related, or even use outer=True. This will return the results you expect.
I'm frankly getting sick of this whole "staring at phones isn't much different than reading a book" argument. Yes it is.

There's a difference between "seeking entertainment/novelty/relief of boredom" and the methods/mediums to attain those feelings.

Our collective brains have been seemingly re-wired by these things. I'm not suggesting that we gotta get rid of smartphones or something, I just think it's a little ignorant to be stuck in denial about it.

EDIT: Just reread my comment and it came across much more snarky and confrontational than I intended. I'm sorry for that.
How many people have bought the shirt?
Yeah it's just playlists and network effects, mostly.

There's a Spotify playlist for everything, young people regularly share Spotify playlists each other, and for many: the hardest part about switching to another service is losing access to those playlists.

The "official" playlists provide two other functions. One is to initially amplify artists. Record labels can buy slots on these playlists, just like they used to buy airtime on the FM radio stations of yesteryear.

The second is that Spotify can use its own filler muzak on its playlists to keep licensing costs down. E.g. they pay a pianist to play generic "Christmas piano music," make up an artist name, and put a bunch of those songs on its official holiday playlists.