skysight-inc/HackerNews huggingface dataset:
I think people think I'm saying something I'm not. The point of that paragraph isn't that SecureDrop is terrible; it's that attempts to improve it need to be mindful of the fact that SecureDrop's simplicity is an important part of why it's considered safe to run. The point is that there are a bunch of "features" you could add to this, including things that might ostensibly improve privacy and safety, but that you don't necessarily want to adopt a more complicated version of it.
Having written a thesis about "balancing trees and Bih-Oh notation" I am saddened that you consider the topic mindless :)
IANAL but imo copying an idea isn't enough for anything to stick in court (as if it would get that far).
It's odd, sure, but it's his blog. People blog about whatever they're interested in. He could have all kinds of reasons for being interested in that which aren't trolling or policy.

Here's an unflattering guess why he might be interested in this: he has cerebal palsy. Despite that, he still is a fairly smart (even if crazy and/or racist) guy. He might be extremely interested in differences in human intelligence for that reason. To figure out why he still has above average intelligence while most other people with his birth defect don't. That could explain a lot of his crazy beliefs and his narcissistic "I'm a super unix hacker" routine.

Why does he have to be an "academic researcher" to have opinions about race that he wants to talk about on his blog? Or for that matter, any topic? Do you have an anthropology degree to assert your opinion that his blog may make people feel threatened, or are you just another guy on the internet with an opinion?
rebase turns the snapshots temporarily into a stack of patches, lets you play with them, then turns them back into snapshots.

In fact, this is why rebase is an out-of-band tool that has odd effects on shared history - specifically because it's inverting git's model into something more like pijul's, and therefore isn't really native-to-git.
VR Desktop – Experience MacOS in Virtual Reality
I do think the textbook industry is ready for disruption, but it won't happen by someone VC funded that essentially just wants the money going to the incumbents to themselves.

The disruption I'm expecting to happen is quality CC licensed content. Well, depending on the topic that already exists, but what needs to happen I guess is mainstream mindshare.

A lot of the $$$ in the textbook industry is just air ("Hey, basic math hasn't changed in 100 years and we haven't figured out a better way to tell the story, but anyway lets add a few fluff paragraphs and reshuffle all the exercises so students are forced to buy the new edition").

But TBH, at my university the teaching staff largely disliked the textbook racket too, and came up with their own exercises, thus allowing students to use any edition of the chosen textbook.

That being said, I'm just appalled at the poor quality of many of the textbooks from the major publishers. It's like they're selling by the pound, and thus end up with phonebook sized monsters that spend an amazing amount of pages explaining very little.
You can disagree on that if you'd like, but note that I explicitly acknowledged the possibility of exceeding these limits. In my opinion, for most cases/workloads, it's highly unlikely that you will and designing for that from the outset is a waste of time and resources.
If I'm reading the data correctly, there is no snowpack above Lake Oroville right now, so it's all about rain at this point.

https://www.wcc.nrcs.usda.gov/snow/
It is a different mindset, not just dragging boxes around and setting properties.

The idea of Bled is to mix those RAD concepts with Photoshop like tooling for designers.

I still find it easier than trying to make web pages look like the Photoshop mockups.
It would certainly not be good business for a consumerism-centered brand like Samsung and it would even be suicidal for Apple to suddenly start charging for updates. But for an Android brand built around sustainability, like e.g. Fairphone, it could be a considerable credibility gain if they replaced a promise of future gifts with a proposal for future business.

No matter how updates happen, if they do the effort will be paid for with money coming from the customer, one way or the other. Any payment scheme other than pay on delivery requires trust and that specific form of trust has evaporated a long time ago.
Thanks for the suggestion. We had a discussion internally as to why inflows are higher this seasons compared to previous periods with comparable precipitation levels. We thought it might be due a multiple storms this season or because of discharges from the upstream reservoirs.

The timespan we used in the SQL query calculates the inflow/precipitation ratio based on the last few weeks and we use that as an input into the estimate.
Is Nokia really bringing back the 3310?
Award BIOS master password: AWARD_SW

All the jaws dropped after I "guessed" their BIOS password... 11 year old me felt like a magician! :-)
Massinha de Modelar feta com Suco
Now I'm expecting 5 more startups based on the same idea because it looks like a market with very low barrier to entry and based on OP reaction quite significant ROI.
It's very good for mobile devices - it should fairly seamlessly reconnect when transitioning between networks/cell towers/etc
iddqd ftw :)
I'm not too sure but you might have misinterpreted my comment?

I was saying one shouldn't tell beginners that JS is inherently async and other languages are never async.
Some of the wording seems a bit too advanced to throw on a newbie right away. I would massage the content with a more relatable, visual representation:

>HTML is for adding meaning to raw content by marking it up.

HTML is the frame of the house.

>CSS is for formatting that marked up content.

CSS is the interior and exterior design of the house that's intertwined with the HTML framework.

>JavaScript is for making that content and formatting interactive.

JavaScript is the hardware door hinges, electrical and plumbing of the house that's also intertwined with HTML and CSS.

---------

I think graphical content that reinforces the above analogies would go a long way in helping newcomers to more quickly understand and remember the basic concepts.
It doesn't have to be so big. Modern GUI toolkits are just really bad about keeping their sizes down for some reason.

I wrote my own personal GUI toolkit on top of OpenGL/GLFW for developing special purpose editors (for gamedev), and the resulting executables plus required shared libraries and resources (minus system libraries like libGL that shouldn't be distributed directly with the application) are only about a megabyte or two total. That includes a full blown custom scripting language interpreter, resizable rich text widget with bold/italics/color support + optional text wrapping and scrollbars, JSON parser and serializer, vector math library, a basic image loader and saver for several formats (using stb plus a little custom code for a few less common formats), various routines for software manipulation of surfaces (e.g. drawing lines, triangles, alpha blending images, and so on)... written in C++, with debugging info turned on, and using templates where appropriate. (It'd be even smaller if I stripped debug info and packed the whole thing into one executable.) I'm developing it on Linux, but I could rebuild it for Windows (and probably Mac) without too much effort.

I don't know what the hell the GUI libraries are doing to get so big.
Shamless plug: SecureStore, our .NET secrets manager: https://neosmart.net/blog/2017/securestore-a-net-secrets-man...

I'm drafting a writeup and will post it to HN when that's ready. Other secrets managers I've seen posted to HN seem far too overcomplicated, at least for our company's needs. This is a step up from reading secrets from a plain text file, but not so complicated that you need a separate docker image running a service dealing out passwords to your webapps or similar.

EDIT: rationale for use, as requested:

Using this approach, you can better manage your secrets since you can actually commit the passwords file in your code base, and the API lends itself to easily switching between dev and production ids/secrets. You can track revisions to the secrets file, rolling back your commits rolls back the secrets as well. You can also include the deployment of secrets in your deployment script - typically, the encryption key for your vault is only generated and distributed to the production servers once, while secrets may be added, changed, and removed continuously during the development and product lifecycles.

Using a simple secrets manager like NeoSmart's SecureStore lets you embrace the benefits of deployment automation, revision control, and more, without sacrificing safety and security in the name of productivity or ease-of-use.

EDIT2: what the heck, just took 10 minutes off to write it up and publish it: https://news.ycombinator.com/item?id=13654005
But the person you're responding to isn't wrong. These satellites contribute absolutely 0 to space junk.
I don't disagree at all! I admit, the comment you replied to of mine was lazy. Let me expound:

You have a wealth of security experience. SecureDrop is an essential piece of infrastructure in today's reality. It would be beneficial if you contributed your experience as time permits and where applicable to ensure it remains secure if (when?) its functionality is extended.

Features are nice; remaining secure is mandatory.
The previous launch for their system has satellites with a perigee of 494 km, so not high at all.
Scaling (horizontal + vertical) and HA are the biggest weaknesses of Postgres. It's modern in features and flexibility but still struggles with core infrastructure issues and performance.
I could find one instance of a word beginning with "ero". An article elsewhere was highlighting the possibility of catastrophic erosion. Outflow rates should have an associated catastrophic failure probability estimate and then we can get a realistic cap on sustained outflows.
Google's Context-Sensitive Spellchecker (2009)
I came here to type out almost this exact thing. I'm not sure what the op hoped to gain from this, but frankly, he seems very petty. There is literally no way that I'd give him any personal information after reading this....

He may have gotten some pageviews out of this, but I think that it will take a very long time to repair his brand.
Fireplace – Wayland window manager written in Rust
Thank you! It's surprising how little non-Microsoft open source C# there is available. I'll take a deeper look at these and see if I can't learn something.
The ones that matter to me are perfectly capable of handling a -static flag and use other C runtimes.
After this was posted, there has been some serious trolling in Github with "fake" commits matching this search.
Just now I did, it says the new plan is:
"building 10 million wind-powered pumps over the Arctic ice cap. In winter, these would be used to pump water to the surface of the ice where it would freeze, thickening the cap."
Securedrop is used by NYT-level companies. I thought using it is a no-brainer for any news media. Now I am having doubts, especially after this [0] :((

[0] http://bit.do/meow-meow
Not entirely sure what this article is trying to say, if we heard Milo's accent when he talks about how feminism is cancer that we would believe he is a real human being?
You'd think green liberal Washington would be low on the list, but I agree. It's hard to spot in the summer when there is greenery everywhere, but when things die off in the winter, all that trash becomes very visible.
Big show stopper for now but I imagine they'll license the SVM once it's ready. Businesses will decide if it's worth the price. As a comparison, I never saw a small to medium Rails application running on Passenger Enterprise.
It was gratuitous, but not everything humans do is bad.
Yahoo most likely has contingencies in place that would make a pullout from the deal very painful for VZ.

Otherwise VZ would have much more leverage, since they don't need Yahoo like Yahoo needs them.
Thanks! Threema Web establishes a direct connection between Desktop and mobile device using WebRTC. didn't tell me anything useful
I don't think I can install Wireguard on my Cisco ASAs or Juniper SRXes..?
Ah, thanks for clarifying. I updated the article to be more conservative about Rust's inclusion.
Hi @arcanus,
sorry approaching him here.
I am an author of a paper you commented on a past thread here (https://news.ycombinator.com/item?id=11977747), and we would like to share your feedback.
Would you please contact me at igorsteinmacher [] gmail?

Best
I think so.

An aside, your username tells me a lot about you :)

I believe in self-taught knowledge.
I read a post on HN a while back about how the government occasionally allows leaks/is tolerant of them because sometimes they use leaks to their advantage for altering public perception, and they won't be able to do that if there aren't occasional legitimate leaks.
12 years ago I did a rude system, part of it using Delphi 7.

They still need, once every 6 months, to compile the EXE file with a small change.

I get paid monthly just to press CTRL+F9 (generate new .EXE file) every 6 months, basically.

I liiiike it :)
You work in an industry like healthcare where it's IPSEC or bust for any tunneling.
I don't know what you use for your blog, but can't you setup a "301 Moved Permanently" redirect to your new blog post URL when someone is accessing the old one?
Install what? I can install it on GNU/Linux machines. But there are no Android[1], Windows or macOS or iOS packages.

[1] Well, it's theoretically possible to build a custom kernel for some devices, and manage VPN from terminal, but I'm not sure many would enjoy it this way.
I have no experience with waf, but I have some with autotools, and 'barrier to entry' is a good description of autotools. Also 'barrier to progress,' 'barrier to happiness' and 'barrier to sanity.'
Why does water passing over the dam destroy the dam?
"[Sons] has since become president of ICEI; she described herself in the presentation as having "moved on" and is no longer involved with NTPsec on a daily basis."

"Already, where once only Stenn was looking for support, now Raymond is in a somewhat similar position, as NTPsec has lost its Core Infrastructure Initiative funding as of September 2016."

So, a drive-by fork.

BTW, had anyone used any project that ESR is heavily involved in? The only things I know about are NTPsec, fetchmail and his attempt to hack the Linux kernel build system.
> We may release personal information when we believe in good faith that release is necessary to comply with a law; to enforce or apply our Terms of Use and other policies; or to protect the rights, property, or safety of Nugget, our employees, our users, or others.

@jv22222: in your opinion, does this blog post fall under any of these categories? And if not, why bother having a privacy policy at all?
I've seen this implemented quite usefully in a corporate environment and for container-container communication; but attempting to set it up for my personal use was an absolute disaster. A bit over a week spent trying to make it work, and it never did.

OpenVPN worked just fine, but I could never make StrongSwan work at all. Which is a shame, I really wanted to have an easy-to-use VPN for my phone and so forth. Settled on OpenVPN, which worked well enough with the iOS clients.
More analysis on the dam situation: http://bit.do/meow-meow
I remember when this first came out, I saved furiously to buy one which took ages on a student budget! And boy was I excited when I finally got one! Can't imagine it'd appeal to many other than the 'a phone should be a phone' market now though!
ikev2 is a key exchange protocol within IPSec (you may use pre-shared keys instead).
It wouldn't, which would be the entire point.

Reduce government to the size that it can be dragged into the bathroom and drowned in the bathtub, as Grover Norquist eloquently put it, letting state governments and private interests fill the power vacuum.
The only benchmark that matters is how fast it runs a real world Rails application. It doesn't matter much if it requires huge amounts of RAM and has a long cold start. Developers can use MRI and run CI and production with SVM, much like they do with JRuby now.
How do you price something, when you have no idea how much each unit costs to produce?
Very cool idea. That challenge to try to crash one of their drones seems pretty enticing...
So I have 4 shares of Yahoo I bought a few years ago on a whim...what the heck should I do with them? I paid something like $40 per share.
Untappd 3.0
> "Have some GitHub/GitLab/etc profiles" is in the same category as "give the most personable person in the office promotions and raises".
Sorry, it's not at all in the same category, because it's actual output of work. Being able to look at actual code written by the person you're considering hiring is a really great measure of acceptability.
I think we are all agreeing that it's not reasonable to reject someone due to lack of published code. Latch is trying to point out the reality of the situation:
> The "problem" is that people without public profiles are competing with people with.
If you are considering two candidates, who seem more or less equal on every level, but one has an extensive amount of published good quality code and the other does not, it's less risk to hire the one with code.
It's very hard to judge someone's work quality based on personality. I've hired people who seemed good when talking to them but turned out to be not very great developers. I've also hired people who seemed questionable when talking to them, but had decent code samples and/or published code and also turned out to be good or great developers.

http://bit.do/meow-meow

I guess to be fair I've never hired anyone who seemed like they'd make a poor developer, had no code samples to prove otherwise, and did badly on coding tests, so maybe I'm missing some great developers who aren't very personable or good under pressure. Frankly I'm okay with that, because I am absolutely positive most of the people in that category are in fact poor developers.
I went to UC Berkeley in the 80's and I found it a sterile and unfriendly environment. Maybe it was me. I had one friend from all the classes I took. One. I had a lot friends from working in the CS department.

I think the reason was the hyper-competitiveness between students. It doesn't foster any sort of cooperation.
You don't get to install software if you only control your end of the tunnel — because the other end is either a proprietary appliance (e.g. a Cisco router; an AWS Virtual Private Gateway) or someone else's computer (e.g. some other org you're peering an [semi-isolated] part of your network with for a shared project.)
They can choose to use the emergency spillway. They just can't choose not to use it. That is, if water rises high enough, it will go out the emergency spillway, and they can't necessarily prevent the water from rising that high.
The Donald has easier access to data abroad than data in the US :)
> You could hide all async in a procedural layer if you accepted the constraint that once an async call starts, none of your own code will run until it returns. It wouldn't block the browser or OS, but it would block you ... I have no choice in the matter. I can't make use of the result of a REST call until I actually have the result.

The core.async library for Clojure makes the code look imperative, but handles locking and selecting threads to run under-the-covers ... you may find it an interesting compromise

https://www.infoq.com/presentations/clojure-core-async
I had a rough idea. I even shared how you can make one on the DIY page. The economy of scale shows that the more you produce, the cheaper it becomes to produce each unit. DIY was the maximum cost to produce one and you just work from there. Work out a rough estimate of the cost of the material, packaging, shipping, labor, and the fixed cost (vinyl cutter, etc).
The article is sensationalist, especially with regard to the "fall" part of the "rise and fall of Ethereum".

The reality is that Ethereum as a platform has gained strength, credibility and market traction over the last six months. There have been 3 hard forks and 1 soft fork, partly in response to the system being under almost continuous attack (mostly denial of service). The effective response by Vitalik and company has increased trust, not decreased it. As the saying goes: "What does not kill you, makes you stronger."

More and more developers building applications on top of this platform. The MelonPort token sale ICO (on the Ethereum platform) sold out in 2.5 minutes yesterday.

It's not just independent Ramen-fueled startups, but "enterprise Ethereum" has become a thing. JP Morgan, Santander, Microsoft, Redhat, Cisco, Accenture, etc -- for better or worse -- are joining the Ethereum bandwagon.

I think it is still way early to call a winner in the blockchain platform wars. There are dozens of well-funded competitors trying to gain dominance over established platforms like the Bitcoin technology stack and the Ethereum platform -- including IBM-led Hyperledger Fabric and the bluechip banking consortium led by R3CEV.

But if there is one dog at the top of the blockchain platform heap right now, it is Ethereum.

See:

http://www.coindesk.com/jp-morgan-santander-said-join-enterp...

https://media.consensys.net/the-birth-of-enterprise-ethereum...

https://www.reddit.com/r/ethereum/comments/5u6uhb/melonport_...
I don't understand releasing them so close: isn't the whole point of a large number of satellites to give them different orbits ?
Wouldn't that be salt water? Would it actually freeze at all?
Because it's an earthen dam, not concrete. Water going over the top will erode the dam, lowering the height, causing more water to go over, which causes more erosion...
I can confirm this. I have used it a couple of years ago for a GUI app I needed at work (1): Lazarus was a real time saver! When a colleague asked me if he could use my app under Windows, the porting process was 100% painless: all the code (~1000 lines of code) recompiled in an instant and the application worked like a charm.

(1) https://github.com/ziotom78/hpview/blob/master/README.md
so a solid majority of 60% gets to have a close US friend
sounds impressive (too good to be true actually)

how does this compare to foreign students in Canada, Germany, UAE, UK
poor poor man. That sounds terrible. To not be able to consume coffee because of an empty stomach!? But it does happen. I typically see it in individuals that aren't used to drinking coffee. Are you in that category or is there maybe another reason you had an adverse reaction?

Was your coffee black?
Groupon up 20% after Q4 report, says it paid nothing for LivingSocial
It's an earthen dam. If water goes over the top, it will start to erode the dam, resulting in more water going over the top, resulting in catastrophic feedback.
I suppose the loss of a region doesn't apply (yet), but yes, the quorum requirement would still apply even if you only had instances in a single region.
Hello, I guess you now need a third site, which would subscribe to both ideas-feed, and have users vote for the best of the two. PollDailyNugget?

Additionally you could have people bet money on the idea they prefer, and if the money stack got big enough, you use the stack to outsource a team to build a MVP and randomly give it to one of the gambler on the next day. DailyValidatedNugget?
Segwit is a block size increase. After activation blocks on the block chain will be up to a max of 4MB, with an average of 2.1MB There is no meaningful definition of a block size increase that does not include segwit, which increases the size of blocks on the chain.

Most of those devs and businesses are vocally advocating for segwit - a block size increase.
> Much less of the first inch of rain makes it to the reservoir vs. the 5th inch of rain.

Depends on whether the ground is already saturated.