skysight-inc/HackerNews huggingface dataset:
Show HN: I'm building an affiliation platform based on blockchain
Hey HN! My name is Junqueror, and want share with you a project I've been working on the last months.

I am a software developer, I build my own apps, but I have always had problems in the marketing side.

Some time ago I struggled with affiliation marketing.

I thought that blockchain characteristics (transparency, security, reliability, payments) can really help to improve the weaknesses of current affiliation and referral systems:
- program restrictions and conditions
- unreliable tracking and attribution
- hidden actions
- commission rates
- bad incentives
- payment delays
- platform commissions
- contractual terms
- fraudulent activities

So I'm building BreadCrumbs, a decentralized platform dedicated to the promotion of products wand services with crypto rewards and using blockchain as a tracking system

Not only improves deficiencies of affiliate and referral marketing, but also opens it yo anyone in the crypto space.

I would like to hear feedback and know what do you think about it.

- Do you think that blockchain and crypto can add value and improve traditional systems?
- Is it interesting for crypto business and crypto users?
- Does the "Share To Earn" make sense? Well, it already existed, but improved and moved to crypto
Click on your username, go to the submissions link at the bottom, click edit on sodic post.

You can only update within a certain amount of time!
Starbucks and McDonalds are 'restaurants'?
What? No they don't!
I admit I mistakenly submitted those posts, I'll carefully post next.

Are these posts visible to you? because in a private window I checked they aren't visible to me.
If you want to put it that way, the United Nations is at war with North Korea.
"since Google doesn't operate in China, they don't really have to respect Chinese laws"

Well, they buy the data from
one of the few blessed Chinese companies, which is a form of doing business, and regardless what Chinese law says Google has most likely a contractual obligation not to convert the data. In other words, if they did convert the data they'd probably not get updates anymore.
You don't do strategic shifts in direction on the spot, with the team finding out they were fired from news articles, a few days after investors call where you say nothing about this plan and babble about robotaxis instead.

Yo do throw bossy tantrums that way. I mean, he flat out wrote he made an example of the sacked team:

> “Hopefully these actions are making it clear that we need to be absolutely hard-core about headcount and cost reduction,” he wrote in the email seen by The Information, which also announced the end of the public policy team led by departed executive Rohan Patel. “While some on exec staff are taking this seriously, most are not yet doing so.”

But sure, it was a planned move by a genius CEO.
Lock it up with the bike.
> looking at VO2 max in relation to all-cause mortality, we see a very clear trend. Simply bringing your VO2 max from ‘low’ (bottom 25th percentile) to ‘below average’ (25th to 50th percentile) is associated with a 50% reduction in all-cause mortality. When you go from ‘low’ to ‘above average’ (50th to 75th percentile) the risk reduction is closer to 70%!

https://peterattiamd.com/category/exercise/vo2-max/
Yes, I'm aware that it's very inconvenient. I did the same for my TOTP codes because Google Authenticator didn't restore your keys if your devices were different.

So, I had to manually migrate TOTP secrets from 30+ accounts back then, by removing 2FA, and re-enabling it with a new secret.

As I said before, it's a sliding scale trading off between security and convenience. Select your poison and its dosage, and do your own cocktail.

Or, providers will develop a workflow to migrate or add new devices easily. Like "validate on another validated device to add this new passkey" scheme.
Even iOS has different users for all those processes running on the device. :)
> Then it hit me. I’ve probably been jogging a lot in Zone 3. Or higher? Because the harder you go the more benefit, right?

That's unfortunately not fully how it works. For maximum benefits, you would want to train your aerobic energy system, and to do that without risking injury, zone 2 is the recommended zone. The claim is that pain is gain, but more often than not, pain is your body telling you you are over the limit. By the description of your running experience, you were possibly closer to zone 4.

Of course, the body gets lazy, so you will want to vary your training. Repeat the same type of load, and your body will get efficient operating at that load, meaning your fitness gains will eventually stagnate. That's where the other zones come in.

At the zone 3/4 threshold you start using your anaerobic energy system more, with a stronger build-up of lactic acid as a by-product. Training in that range means your body will get more efficient at faster-paced work. Of course, as you build-up lactic acid, it also means that it is not a pace you can sustain.

But if you do short bursts of exercise at the lower-end of the anaerobic zone, you are actually contributing to making you aerobic energy system more efficient, without over-straining your body too much. And it's exactly the type of exercise variation your body needs to not get into the "lazy" mode.

The traditional way of approaching that is to have a base of zone 2 days (say 80% of your runs), and a few days of zone 3/low 4 days (say 20% of your runs), so that you alternate your loads.

Another approach with similar benefits, especially if you train less often, is the Fartlek approach, developed in Sweden in the 1930s. That's a type of training where you mix-up the load intensity during your runs, in about the same proportions. Fartlek means "speed-play", and it describes the method well. It's generally about approaching your training as you feel it that day. At some point during your run you might decided to increase the pace for a short time. Or you see a small hill that you can decide to attack at a faster pace, thereby changing your training zone. It's all about having fun and making your trainings less boring.

There was this belief in some circles until not that long ago that if you would enter a zone 3 or zone 4 training load during a zone 2 training day, you would mostly destroy the benefits of a "pure" zone 2 training. (Or the other way around, having some zone 2 stretches on zone 3/4 days). That turned out to be nonsense.

All in all, for good progress, and against boredom, Fartlek is the way to go, all the while keeping the bulk of your training in zone 2.
Sorry about that, should be up again!
Postnatal depression convinced me I'd never be able to have another child
Australia, India, China, Brazil, EU. That I know of.

US have id.me which is even worse than everything under the sun, and passkey bound by device would be a welcome alternative.

Pray you never get poor enough to have benefits gate kept by digital goverments logins.
Boeing whistleblower dies of sudden MRSA complications
Seems to be common in at least western countries.
Hello Des, I recently watched the intercom video series that kicked off about AI. I thought it was absolutely terrific! Great production and content.
they wont give up on carbon capture fantasies because it means they can keep making buckets of money on free hydrocarbons...
theres plenty of space
I've used postgresql's jsonpath support to create user defined filtering rules on db rows. It made things a lot easier than whatever other methods I could come up with.
Got a link to that raytracer?
"Face-Lift" is a very poor descriptive of the work being done.

Taking a 45,000-ton ship out of the water is expensive, and is done only when the bottom of it needs serious work.

A better description of the work might be "bottom inspection, rust and leak repairs, and replacing the undercoating".
Nuclear is way too slow and carbon intensive. Solar and wind with battery storage make way more sense from every rational angle. They are cheaper, they are faster, they have less embedded carbon, they have far less tosk, etc. Nuclear has been getting hyped and pushed hard by big money interests but the truth is its time has come and gone abd it no longer makes any aense.
> Good luck with getting Windows or a Mac talking to Lanman/NetBEUI

I'd bet it's possible. Older versions of windows were capable at least so you could probably upgrade from DOS to windows NT or 2K. Honestly though, I'd stick with DOS for as long as you have a good stock of replacement hardware.
> a skin cream to improve mental health — say, to offset the harm caused by social isolation or to treat anxiety or depression?

I know there are some serious mental health ailments that require pharmaceutical treatment, but using Soma-like chemicals to make humans simply feel okay with what's bothering them sounds to me like a surefire way to destroy a society. Things like antidepressants, weed, porn and social media have are already moved us in that direction, but seeing this sort of stuff as an achievement just sounds dystopian to me.
Consensus has nothing to do with how one can know what things sounded like 2000 years ago, when we have no means to verify anything.

The consensus might be bang on. Or it might be wildly wrong. Or something else. Who can say?

My point is a pretty straightforward one. To say you have knowledge of a thing, you need to be able to personally verify whatever-it-is. I can personally verify I'm sitting in a chair. I can never verify that music sounded like that 2000 years ago, cos I was not there. I can read a book that describes the sound, but that still doesn't mean I can verify it!

"We" cannot know a thing - there may be a consensus opinion (the wisdom of crowds and all that) - it might be a good guess - but this is not knowledge. And can never be.

This doesn't take away from the fun endeavour though. If you want to recreate sounds from the descriptions given in text, go ahead - I'll listen to it.
If I share the same private key for an account with "n" devices, losing (incl. theft of) that key will lock me out.

If I have "n" private keys for an account, I can use another private key and revoke the lost/compromised one. It's that simple.

Your secure enclave is not much different electronically from a smart card with a biometric password actually. People think Passkeys as SSH keys on disk, but it's more of a long private key on a single-way secure enclave. This is why people cry "platform lock-in". It's platform lock-in, but it's a secondary effect. It's actually a "proper HSM, but integrated".
No doubt. Picking any new habit is quite hard.
If your immediate surroundings don't support running a treadmill could also be a good solution.
Longevity discovered by AI, implies[0] AI which is so good that none of us can work for money anyway — it comes with an economic change too large to make a reasonable projection of what happens next, as it's more different from what we have today than either Communism (any of them) or Neoliberalism is from Ancient Greek city states using electrum.

[0] but we can't say for sure until we have it, thanks to all the other things we assumed would need human-like AI and didn't, like Chess, Go, writing code, etc.
I guess this means Yuzu works really well now :)
A Minimal Model for Biological Evolution and Other Adaptive Processes
Carmen Estrada, neuroscientist: 'Science and God cannot coexist'
and i bet it went like:

1. login on computer. click next mindlessly on setup flow.

2. use account

3. try to login on phone. click next mindlessly on setup flow again.

4. where's my data?! oh well, lost my old account. let's use the new one

5. eternal confusion while switching devices. never return to site again.

= 2.5 times per user
I think this is a good idea anyway. I love how if I install some dodgy app on my phone, it can't access the private, stored data of other apps. It can't steal my google or facebook credentials. And it can't cryptolocker my filesystem.

My desktop computers are designed with this old "user security" model that I don't use at all - since I'm the only user anyway. User security protects ... uh, the operating system I suppose, which I could reinstall in 20 minutes anyway. But we're missing a much more important security boundary - which is between one bad program and all my other stuff. Every program you run today on desktop is inexplicably executed with full permission over all of your private files, and, worse, it has full network access. Its an insanely terrible design.

We /could/ retrofit the user security model to help us isolate applications. But personally I think it would be easier to just design and implement something good from scratch.

(For the security people in the room, the threat model is a bad program, or single bad npm package gets pulled into a program you run. How do we limit the blast radius?)
Yes. It should point to the same site shown in the QR. I posted this from my mobile. So there was some issue with the link.
Also VSCode users are Eclipse (Red-Hat/MS plugin) and Netbeans (Oracle plugin) users as well, as their headless versions are what powers the plugins.
Ratarmount also works for that. However, it, and any other tool I know of, works only well if it was compressed with pzstd because of a limitation of the zstd format. It needs separate zstd frames for fast seeking.
OCaml has been going since 1996 and is managed by an academic institution in France. It's also much more portable and malleable than dBase for DOS on old iron.
When using a passkey as the only factor, it gets complicated, but I think that will be the future: Email and SMS as fallbacks with additional factors like risk-based location checks (or local storage hints) to have a viable recovery mechanism parallel to passkeys. I think Github has a nice approach that we use as a role model: Collect as many fallbacks as possible in a convenient manner. Adding passkeys on any new device and regularly reminding people to check their fallbacks. That's still way more secure than passwords only, where the fallback is practically always a form of email OTP. Also social logins from Google or Apple can act as a fallback as they are (mostly) 2FA.
I'm not familiar with people suggesting this. It should come from school counselors , college counselors, family doctors and therapists. The thing is all these people, statistically, are not exercising enough themselves so I find it hard to believe they will offer exercise as a first line.
> then spend 10 years of their life working with startups and have nothing at the end

How do they avoid starving to death after the first few days?
AssemblyScript?
Wrong. There are Google offices in Beijing and Shanghai, where local software engineers are employed to work there. They develop software for global usage for Google. Google just stopped providing services in China.
> https://www.engadget.com/google-says-its-secure-entry-passke...

lol. engadget literally copied and pasted the press release they gov via email! it still have all the links hidden by their corporate phishing thing:

like: https://urldefense.com/v3/__http://g.co/passkeys__;!!Op6eflyXZCqGR5I!GFYwYEDk1Zq0xZpr4q834hOMHa1R4ovVB7D37okCF9TxEVdc5cuJkzdaExbdZ1BvCPR5xkjYtLaF_0Ldk8v53R8$
Can you give an example of a western country that restricts map creation?
At some period in our evolution, it gave us pre-dispositions to certain tastes.
Like our fondness for sweet & salty is universal.
Hey, I'm Wolfgang.

This is my first little SaaS I built. It would be super helpful if you could provide me with any feedback!

To jump straight into action and see an example of how it works, you can try the live demo (https://www.autoactive.io/?d=662bc7caead24d8c031f788e).

Thanks,
Wolfgang
Um, yes?

Google isn't #8 on the Fortune 500 list because they give a crap about truth, justice, or their ranking on Santa's "Nice" list.
I don’t know anything about this. But let me guess: they also require you to use edge or chromium or some closed source and shitty sidecar application on your desktop?
I mean how would it work, if you tried to hold the AI liable?
Candida auris is a really bad example, given it predominantly affects people with weakened immune systems.

To make that point better, you could've gone for COVID-19, what with the number being the year it popped into existence.

But if you had, then the point would be: yes, the world is dynamic, that means our world needs to continue developing new things, not that we can't get eternal youth.
Polestar 5 promises to charge battery from 10% to 80% in just 10 minutes
I'm not against using a passkey as a single factor, and having fallbacks. It's reasonable if you can reliably attach that key to a physical device, so the device can't be impersonated.

I don't think that we should target MIL-xxx standards for daily use, but my security is comparably important to me as military's missile codes are important to them.

So, I don't want my passkey-based services to have a security theater in the name of convenience. There should be some friction to force a baseline security.
No its not. There's all sorts of stuff you can do with capabilities that are really awkward to even think about with users. Like, when a database starts, you can hand it the capabilities it needs to access a specific directory, listen on a specific port and append (but not read) a specific log file.

User based security is usually done by the folder being owned by the database, or an ACL or something. But with capabilities, you don't need to make a database user or set any flags on the folder, or make sure the database's configuration matches the filesystem permissions. The capability is basically a pre baked file handle that can be used directly. And capabilities can do lots more stuff! They can be more fine grained - eg, "Whatsapp can only access these specific photos in my camera roll". And a program can pass a subset of its capabilities to a child process.
When I read the title, I first thought it was about the political dispute over the border between India and China, keyword "Actual Line of Control". Depending on your perspective, this is also why every map from the other point of view is "wrong".

https://www.ncesc.com/geographic-faq/what-is-the-difference-...
I've been running a consistent 10-11ish kilometers 5 times a week for the last 13 years. Recent (old) re-injury has forced me to switch to weight training about 6 times a week - and absolutely loving it. I'll probably switch to something like Crossfit next year to take up a more cardio-routine, but it's showed how you don't need to necessarily "run" to stay fit & healthy (although I do miss it a lot).
> when the Agile meetings at my last job got so absurd that we were being asked to estimate JIRA task time in T-shirt sizes

Feels like a very outsized reaction to have to something well-intentioned, useful, and not-ridiculous.
Fedora with a WM and Lutris for games.
Works well.
Oh wow, I work for a supplier for ABL and am today in the process of putting some of their stuff into our thermal chamber for cycling. Thats neat.

We work for a lot of launcher companies, but ABL is the most interesting for me (even though we do relatively little for them). The containerised approach to the entire system is a really clever adaptation of existing methods to create a rapid launch system.
Looking at a few files, there's definitely some generated comments in there.
Do you have any method to quantify how much of it is (likely) generated?
Show HN: A Python Swiss-knife to manage Wayland compositors (Hyprland, Sway)
Easyland is a Python framework to manage your Wayland compositor (Hyprland, Sway) configuration by reacting to events. With Easyland, you can dismiss many side tools like Kanshi, hypridle, swayidle, etc. and script your environment according to your preferences.
On mac, the preview app.

On Windows, okular. But honestly, pirating Acrobat is the best way if you have a tough economy.
Ask HN: Why is my post shadowbanned?
I want to request help from a security researcher, but my post was shadowbanned. Can someone help me?
Yeah sure, by instant I meant ‘get your affairs in order’ type of message from the oncologist after detection. Aka an instant death sentence. For some kinds of cancer where you got that in the 90s, now you have a good chance of walking out cancer free. Like a familiar cancer gene my family has: agressive, nasty, death sentence after detection in the 90s. Now multiple family members have been treated in the last few years and walked out cancer free. That was incredibly rare 25 years ago even with early detection; now it happens even in later stages. If it comes back they are dead but still; every few years added might result in yet another bump.

But sure others pop up, not sure if we ever can stop that; this is where AI could help; tireless and very fast moving wack-a-mole with diseases, new and old.
Qualia is not that hard to me to explain when you consider that the outside world as you experienced it, is just a mental representation. A very faithful one, but still just a mapping. Why there is seeming dichotomy between the inner and outside world in terms of quality can be attributed to how the brain compartmentalized it. Both are in your head. This is qualia of the brain, how its seemingly apart from the 'real' world is because it's made so, because it's useful. So in short, it's as simple as 'the brain make some transformations to the signal'. I find that acceptable.

How about the real real outside world? We don't know it. No one knows the thing in itself. So far, to see the world you have to be embedded in it and see something from a specific POV.

Why there is at all consciousness, idk. Why not? Consciousness seems functional... because humans can't really do anything while unconscious. So it seems to me very much part of evolution.
Supporting software is the hardest job, IMHO. People ask some really dumb stuff -- not out of stupidity, but of ignorance; they just don't know what they are asking. To them, the "why is this broken" is "100% your fault and 100% fixable but you are too lazy to fix it."

It's maddening, annoying, and 99% of the time, not worth dealing with if you can help it.
I know, I use yubikeys for all my important stuff.

But I view passkeys as more for the low-hanging fruit. All the crap accounts that every webshop and news outlet makes you create these days. I have 500+ accounts in my current password manager. Not being able to migrate that away to another service would be a nightmare. Being locked in with a big tech company would be too.

What my ideal would be is to have the master key on multiple HSMs (like multiple yubikeys) so they are safe but mobile.

Also, if software password managers don't offer export options it doesn't mean it's impossible to export. They just don't want to make it possible. But an adversary could. The only way to really make it impossible is hardware tokens which is great for important stuff but not really for those thirteen in a dozen accounts.
Same thing works for email/text alerts that tell you to open a link. I go to the service my self and see if the message is there.
Is there a general name for the kind of data structure JSON represents?

We see this kind of Nete’s data all over the place (json, yaml, python dictionaries, toml, etc, etc) and I’m thinking wouldn’t it be nice if we had a path language that worked across these structures, just like how we can regex any strings?

So we can have a pathql executable that we can feed yaml and json data to, but I can reuse the query in Python when I want to extract values from a json stream I just deserialized.
It's quite ridiculous for a number of reasons, well documented by research and experience: software engineers can't estimate how long something will take with any kind of accuracy.
Can the whole supply chain of modern technology operate with zero carbon emissions?
Single-user means I have to trust everything I run.

I mean, some of us here actually remember MS-DOS. It's not a huge secret to us.
define "afar" given the level of resolution of the US spying satellites