skysight-inc/HackerNews huggingface dataset:
I’m not sure if I understand your project correctly, but can this fix the issue with tracking people by location from their phones? Either way it’s a cool project.

I’m Danish, I think the only way to really prevent mass surveillance through WiFi is through laws and legislation. It used to be legal to track people here, but thankfully it’s not anymore. I still remember when there was an outcry from smaller municipalities when they could no longer track people on their “walking streets”. I’m not sure if you have those in other countries but they are basically the “central” street with a lot of shops that are only for pedestrians. Virtually every Danish city has one, larger cities have multiple. Anyway, smaller cities used to track people to see which parts of those streets were popular and which weren’t.

Now they didn’t exactly do it for sinister reasons as such. Our smaller cities have issues with what is called “city death” where their “waking streets” lose shops because people go to larger malls. Then they might add a play ground or other cultural things, or even help shops with rents in order to increase an even popularity in their “waking streets”.

Despite their good intention it was still mass scale surveillance.
I'm still surprised that only one mathematical form has been found with the beauty and depth of the Mandelbrot set.

One would think that like in the physical world, there should be many "species" with different types of appearances. Each a beautiful system on its own, but in comparable complexity.

Maybe the complexity of the Mandelbrot set is to the mathematical universe what is the complexity of life in the physical universe. Something that is very rare. For some unknown reason.
Telus’ insurance would have a deductible, they can’t claim for every little thing
(author)

> In other words, like a bytecode VM?

Kind of, but it's still Forth of the era, so it's still threaded execution. You're still jumping from execution address to execution address (either native 68000 code or another set of Forth words heralded by a JMP to the nesting subroutine); you just have a layer of indirection by having to look them up in the token table first.
For MacOS, Macpine has a similar premise: https://github.com/beringresearch/macpine

With a view to use lightweight Linux VMs (alpine) to:

* Easily spin up and manage lightweight Alpine Linux environments.

* Use tiny VMs to take advantage of containerisation technologies, including Incus, LXD and Docker.

* Build and test software on x86_64 and aarch64 systems.
If the value of your house rises rapidly, you cannot just sell because then you have to buy another house to live somewhere, which has also appreciated. See the other comments about this.
Isn't the FDA the same agency that authorized the use of Thalidomide for pregnant women, and then much later deauthorized it due to birth defects?
Can you recommend some of the better ways to understand and learn it properly?

(Worked with it extensively 2009-2011, including authoring/modifying plugins, but never felt like I really understood it, only vaguely understood/appreciated it)
The Soviets wanted to create a new world in which everything was under control of the Party. Only approved artists were given opportunity to create and exhibit and those who weren't approved or had fallen from the Party's grace were essentially cancelled. If the painting ended up in Poland, it may have made its way from storage into private hands, in Poland or after 1989 in the West.
> You don't think that a model is something abstract?

Models definitely don't have to be abstract. For example, researchers will talk about studying a disease or the effectiveness of a treatment in a "mouse model"[1].

That model is an actual concrete mouse that is being used as a model of a human. It's not abstract in the sense of language, mathematics, or a sketch, and they do the research by looking for the physical effects on the mouse model and drawing an analogy to what would correspondingly happen in a human.

[1] eg https://www.ncbi.nlm.nih.gov/pmc/articles/PMC7121329/
I recently learned the concept of B Corp (a type of for-profit corporation ) that is closer to what most people think a nonprofit is: https://en.wikipedia.org/wiki/B_Corporation_%28certification...
Can you restore a closed tab of unsaved text?
What's your own political tilt, so that I can "just note" it?
So, author boils everything down to anti-Western politics a 1000 years ago and insists Cyrillic just got lucky that it spread so wide. And then puts Putin next to it, so that this celebration looked definitely shameful. That's just as ridiculous as pumping it with anti-Western sentiment from the other side.

To put it in a perspective, imagine what tone would a piece on the day of Arabic writing have.
I want to believe! Anyone tried this yet?
Ignore them and record anyway. They won’t (and can’t) throw either of you out.

I did this while my daughter was in my wife’s womb. They tried to say that we couldn’t make any recordings of the ultrasounds. I made recordings of the ultrasounds. They asked me to stop, and I didn’t stop, and that was the end of it.

Admittedly you have to be willing to break social norms for this to even be an option, which is immensely difficult for most polite people. My solution was to remind myself I wasn’t being rude, and that I was a paying customer. (Unlike most people who say "I’m a paying customer," I always treat everybody well and respectfully; it still boggles my mind how awful most people are to e.g. support reps who are only doing their job. But this isn’t that situation, and it’s useful to remember that sometimes it’s true that you’re a paying customer and deserve to get your money’s worth when the only obvious downside is "they’ll be slightly annoyed for a few minutes.")
Huh, I don't understand your reasoning.

The first half of your comment provides a sufficient reason why something resembling journalism stays alive: readers want these stories.

What does this have to do with democracy, and what's the causal chain that goes from democracy (or the zombie of democracy, I guess) to keeping journalism in suspended animation?
>> AI promises to elevate healthcare; but, to the degree that it replaces doctors and nurses, it also threatens to depersonalise patients and to wash off their distinctive colours until everyone has the same drab tint.

> I don't perceive AI as the thing that's doing that. That depersonalization was a foregone conclusion the very moment someone came up the idea of privatizing healthcare

AI is the apotheosis of that.
> “As we now know that Moscow did not really esteem the gift of Frida Kahlo’s painting, and found it not worth exhibiting and too expensive to transport,”

Art was extremely political. The Soviets had a robust censorship system about what was to become public art, put in the museum, shown on TV or published in books.

That style of painting would have been considered garish, ugly and decadent. And most of all, if capitalists produced it, enjoyed it or praised it, it became even more unacceptable.
I’m open to this cynical perspective but what do you think the journalists feel about their profession? Are they simply doing this to survive and earn a living? Or are they aware of its corruption? Or do they somehow think they’re still performing the job of defending democracy? What about people like professors who teach journalism? It’s hard to imagine that everyone is totally corrupt as to not want facts, although I do agree that news outlets have biases…
I would, because the thing that used to primarily fill this hole was religion, and thats the hole people are trying to stuff.

I'm not religious btw, this is just what I see.
Revocation is needed because you want to disable access to an intruder in the very second you detect unauthorized access using a stolen token. Same for certain kinds of banned users who must lose access immediately.

But since such a revocation list is going to be short (usually 0 entries, dozens at worst), it's trivial to replicate across all the auth service nodes (which can as well be worker nodes) or keep it in Redis replicated per DC, with sub-millisecond lookup times.

Things get harder if you want a feature like logging out other sessions, or just an explicit logout on a shared computer (think about business settings: stores, pharmacies, post offices), you may have to have larger revocation lists. This may still not be a problem: a million tokens is a few dozen megabytes, again, a per-DC replicated Redis cluster would handle it trivially and very cheaply.
Would be good. It somehow should take into account relations the person has with other people. LinkedIn tries to do something similar but they have no idea of my relations, hence sending notifications like "Wish HB to the <person I've never talked before>"
I'm not defending the idea of using two out-of-phase 110V circuits, but... this theoretical EVSE could detect its two inputs not being out-of-phase, blink its red "110V only" light, and only use one of the inputs to charge at 110V instead of 220V.
> The vaccines didn't do much to help stop the spread. Herd immunity did.

How would you say vaccines work?
What’s the crazy history?
I believe that this can be solved least for housing.

If you construct a housing cooperative that has the following properties the entity should be incentivized to maximize the number of housing units:

1. Each tenant must own shares of the coop.
2. Shares per member are capped.
3. Profit must be reinvested
4. New shares can only be issued for new units build.

Rather than subsidizing rent, the government can subsidize the building of new housing, the corresponding shares can be handed over to new tenants.

Since tenants are shareholders, the system stabilizes at a point where rent and living conditions are acceptable.

In Germany this type of construction is called a “Wohnungsgenossenschaft”, and receives some tax incentives.
Currently about 3 Million people are living in flats provided like this.
It’s probably one of the only working pieces of socialism.
What they share is a subversion of the naive framework that ML works simply by performing gradient descent over a loss landscape. Double descent subverts it by showing that learning isn't monotonic in parameter count; grokking subverts it by learning after training convergence.

I'd put the lottery ticket hypothesis in the same bucket of "things that may happen that don't make sense at all for a simple optimization procedure."
Are you for real? What was that like? Holy moly, my skin is crawling just thinking about that.

I have two bottom wisdom teeth, and am terrified of the day that I’ll have to get them removed. I plan to be fully knocked out; it’s hard to imagine someone literally cutting out my teeth. Even if you couldn’t feel any pain, how did you stay calm?

Maybe I’m just a wuss when it comes to teeth…

To answer your question though, at my recent colonoscopy, this type of procedure was awesome. They roll you into a room, and then you see white liquid go into your IV, and they say "you’ll be out in a few seconds." I remember asking "really?" in surprise, and she nodded yeah. Then my next memory was waking up to my wife. She said I was snoring and sleeping well post-op. I didn’t have any memory loss, but reading this post I wish I’d had that experience. It sounds interesting.
So some entities call themselves "nonprofit" but are shady enterprises. By calling themselves "nonprofit" they get some relaxation like tax breaks. They enjoy public trust. After all they are in business for higher purposes. Are they?

In Switzerland there's the "Stiftungsaufsicht". That's a supervision office for trusts.

Does the USA and its states know such institutes?

The IRS should be really interested in not granting tax breaks to profit-oriented organizations masquerading as nonprofits.
Cloudflare's Trillion-Message Kafka Infrastructure: A Deep Dive
Don't know why you are getting downvoted. You are spot on.
Yes. I mean, no; you should use macaroons [1] instead, which are better than JWTs but are built on similar ideas.

[1]: https://fly.io/blog/macaroons-escalated-quickly/
I lost my grandpa (80+) a year ago to suicide. He had surgery for a minor GI issue, then came some complications, another surgery and then another one. He ended up very weak and couldn't walk properly, but his biggest complaint was that his body just didn't feel right after the surgeries. He'd often say that his GI tract felt as if it had been "disconnected," but also that the anaesthesia did something really bad to his head. He'd complain that he was seeing the world "like on a TV screen," as if he wasn't really sitting on the couch with us, living, but just watching things from a distance. Whatever it was, it made life unbearable for him, and he was gone in a few weeks.
I think differently. If multiple users need to query the database directly then postgres. If no one is ever going to look at the db except one person or one application then sqllite. It's an interesting question as to whether micro services should be sqllite.

Postgres is recommended because it's free, easy to maintain, install and it's has excellent query features.
I can only add to that - the hosted nature of Clojure is one of the most underrated awesome features of it. You can write for example a macro that's defined in Clojure code, but to be used in Clojurescript, and changes the behavior of a browser app based on a condition detected in JVM - for example, you can parse some .js library and based on that (clojurescript compiler would) emit modified compiled Javascript code. That stuff is useful for dynamic polyfilling, i18n, css-in-js, feature-flagging, using shims to ensure compatibility, and more.

Moreover, you can have namespaces where Clojure and Clojurescript code is intertwined. I have never seen so much code reusability, even when I was heavily writing for Node. Check this out: you can write specs that would represent your data, alright? Then, you can generate some random collections of data based on those specs. The data that you can use both - on front-end (e.g., for end-to-end testing) and back-end (e.g., for testing the domain logic). You can also use the same specs for validation in UI controls - 'not a valid email', etc. Neat, right?
Gigabit brings in all four pairs, so it's only at 125 MHz, five times faster (which is in fact exactly why it does that). That's not all that much worse than 25 MHz. And as for intuition... Howard Johnson is something of the authority on signal propagation, so if he says that's what your intuition ought to be, I listen!
> More so, if the software just didn't bother with hardcoding and just used the OS primitives for it's network activity (read: sockets and OS provided name resolution) then you don't even need to update it, it would just work.

This is only true if you use DNS for every network request. That has never been realistic for any home network.

> sigh At this point I need to conclude what the network guys are... just dumb. Like, come on, I needed to learn every year from the time I touched my first 286.

This attitude is part of why many people love IPv6 evangelism.

> If anything, IPSec with it's idiosyncrasies is way, way more convoluted both to learn and implement.

"Easier than IPSec" is not exactly a ringing endorsement.

And note that IPv6 doesn't replace any of this. You still need to know the IPv4 way, and the IPv6 way, and IPSec in both flavors etc.

Sure, it's not neuroscience, but it is needlessly more work, and most people like to not fuss with more work if they can avoid it. Especially when it's entirely duplicated, since, again, you can't drop IPv4 support, you still need to do CGNAT and all that, and then add IPv6 management on top.
You don’t need jwts to pass internal permissions. We don’t, but we still extract claims from a jwt token at the beginning of a user flow. Then later we only use the claims to determine which resource a user has access to.

It’s not necessarily easier than just passing the jwt, but with our internal setups where when you first pass through the authorisation system, our traffic on your behalf is secure it doesn’t really warrant a reason to decode your token multiple times rather than simply passing your access permission claims.

We do still pass your jwt between isolated “products” where your access request doesn’t pass through dapr, but rather back through our central access gateway and then into the other “product”. A product is basically a collection of related services which are restricted to be a business component. Like a range of services which handles our solar plants, and another business component which handles our investment portfolios, and so on.
Nah, that’s not how it works. People are also complaining about the quality of Google‘s search results, but has anyone come up with a something that can beat them?

Technically, yes! But practically, Wordpress has such a velocity, it’s mostly impossible to stop at this point. There’s an ecosystem of millions of plugins, themes, entire agencies around Wordpress, that’s something you can’t really solve.
So just because Wordpress sticks around doesn’t mean it’s the superior solution; it just happened to suck less than the competition a decade ago.
600,000 homeless times $10,000 per tiny home, clustered where social services are made available, voila, the problem is solved for $6 billion, which is nothing, excluding the cost of those social services.

The issue is really there is a lack of genuine desire to solve the problem because the cruelty and baked-in lies within American self-reliance philosophy put such a solution outside the Overton window of what is possible.

Instead of a one-time investment, we dump more than $6 billion into the problem but never solve it.
I think developers underestimate the ecosystem and community aspects. Software is definitely not a space where "if you build it, they will come". There is better codebases, but no one has held a candle to the ecosystem yet. I believe this is because the core users of WP are not it's developers, the users (admins, agency clients etc) hold a considerably larger stake in typical business engagements.

I have been doing eComm agency work for years and even if the chosen eComm platform does have a CMS, we're very often asked to integrate a wordpress site for the company's marketing/content team to use.
Sandwich in Kent would be one of the best known.

New Romney? It's riverine, but I think they had to dredge it to keep it alive.

Kenfig in wales.

Dunwich.

Rattray in Scotland. covered in Sand, like Skara Brae maybe?

Faversham may have been, The isle of thanet is no longer an island

Tenterden -once part of the cinque ports. Also Lydd.

I would agree "meaning seaside" was a strech. I think most of these have mixed etymology.
> Tattoo pigment particles are quite inert.

Asbestos is quite inert, which is a good property for fire retardant materials to have. However it does have an unfortunate effect when inhaled.
Finland seems to have found a method that deals with this. They have nearly halved homelessness in eight years.

https://www.weforum.org/agenda/2018/02/how-finland-solved-ho...
That's a really good question. Right now I'm making £55k, which is not terrible money, but it's way less than my industry peers are making whilst doing arguably less.

I actually don't know how quickly my pay will scale in 2-5 years in industry. My general feeling is that regardless of how good I might be (or think I might be…), I'd still be older than the other entry-level candidates, and when a promotion would come up, my age might become an issue (e.g. I would be more likely to start a family in the next few years and therefore my work would come second).

I want something that pays at least £65k, which I don't think is unreasonable for my skill set, but without industry experience, I can see why employers might cover their mouths and laugh a little.
DPoP described in RFC9449 - you can see from the RFC number it's quite new. I don't think there's wide support for it, but at least Okta supports it[1] and I think Auth0 are also working on adding DPoP.

Is it good? I'm not a fan. To use DPoP safely (without replay attacks), you need to add server-side nonces ("nonce") and client-generated nonces ("jti", great and definitely not confusing terminology there).

You need to make sure client-generated nonces are only used once, which requires setting up... wait for it... A database! And if you'll be using DPoP in a distributed manner, with access tokens then, well, a database shared across all services. And this is not an easy-to-scale read-oriented database like you'd have to use for stateful tokens. No, this is a database that requires an equal number of reads and writes (assuming you're not under a DDoS attack): for each DPoP validation, you'd need to read the nonce and then add it to the database. You'd also need to implement some sort of TTL mechanism to prevent the database from growing forever and implement strong rate limitation across all services to prevent very easy DDoS.

It seems like the main driving motivation behind DPoP is to mitigate the cost of refresh tokens being exfiltrated from public clients using XSS attacks, but I believe it is too cumbersome to be used securely as a general mechanism for safe token delegation that prevents "pass-the-token" attacks.

[1] https://developer.okta.com/docs/guides/dpop/nonoktaresources...
> And most of all, if capitalists produced it ..

Probably worth mentioning that both Frida Kahlo and her husband Diego Rivera were well known members of the Mexican Communist Party and worked together and seperately on Revolutionary murals etc.
a slow to compress format that does a good job sounds great for physical media which gets distributed, but sounds like it would be bad where the things being compressed are most probably many millions of individual images uploaded by users as you want a fast enough compression that you can start to return the compressed image to the user within milliseconds.

That just sounds to me like what happened to it, although I can't say for sure - did it perhaps also have other things about it that would make it a problem to be running lots of concurrent fractal compressing processes on a server?
I completely agree with you, I also think that authenticate and authorise carry different meanings than permission and login.

A login is an active thing that you do, but systems can authenticate you with things like single sign ons, so that you don’t actually “login” to many of the systems you want to be authorised in.

Similarly permissions are the roles and claims your digital persona carries with it. These grant you permission to resources, but these can be trusted once your persona is authorised.
Can you please lookup "Millennium Park, Chicago" in the search bar on the map and once your map goes to that area you should be able to see a cluster of banners. I have also conceptualized this as a different kind of notice board where content is organized in the two dimensions of the world map. I am really experimenting with the token concept, these are currently not crypto tokens.
I believe “login” is the process of actually logging in, or the set of credentials used to log in. “Logon” refers to the act of connecting to something. They’re often used interchangeably, though.
That was indeed a great movie.
Ask HN: What metrics you track as an Engineering Manager
Seeking your opinion on what are top 5 metrics you measure already, what more you would if the data collection or calculation was easier for that metric
It's important to note the tilt of opinion pieces that color issues of civic concern in any direction.
The performance is quiet nice. I was able to find some very interesting patterns, unfortunately, it is quiet hard to find interesting spaces though given the UI.

The constant velocity is a problem.
To dive deep into fractals you need to move at increasingly smaller scales

If there was a +/- key that should shift the order of magnitude of velocity it would be very interesting
QuickWit also sends telemetry by default: https://quickwit.io/docs/telemetry