skysight-inc/HackerNews huggingface dataset:
Steve Beyer Productions | Jr. Sysadmin | Las Vegas, NV | Onsite, Full-Time, https://stevebeyerproductions.com/

We're a small office doing entertainment booking, event productions, photography, videography, graphic design, along with operating our own little studio stage for auditions and recordings. While our IT infrastructure is fair, we would like to hire a junior network systems administrator to assist the office staff, keep our systems safe and up to date, and assist in the operations of our multi-media services.

The right candidate is confident in both Mac and Windows, interested in Linux or FreeBSD, and willing to dabble in Adobe Photoshop and Premiere. Daily duties such as monitoring data backup routines, monitoring network uptime, and updating our website webapp/database. Special projects including assisting in photo editing, video recording, audio mixing, stage hand labor, and stage lighting.

Qualifications & abilities we'd like applicants to come prepared with include clear writing & conversational speaking skills, and open to learning & adapting from spoken, written, & real-life example training. Able to move around within MacOS & Windows environments easily & quickly, able-bodied to lift PA speakers & rackmount servers, and agile to multi-task several projects simultaneously.

https://stevebeyerproductions.com/our-team
Email me for further details: presence@sbeyer.com
And people wonder why I am only lukewarm about encryption and opsec. I use both for myself, but I've given up evangelizing other people years ago because (as I've said here on HN many times):

For regular people, the effort of encrypting things is simply not worth it because they're powerless against a really determined attacker. It's rational to protect against casual attacks from spammers and scammers, but protecting oneself against state-level attackers is futile unless you make a full-time job out of it.

Someone usually pipes up at this point saying 'we need to limit the powers of the state', like some sternly-worded law is going to undo the existence of the technology or take away the vast economic and political incentives to deploy it. Get real folks, technology doesn't get un-invented, and powerful organizations are just like powerful organisms; they're opportunist, they maximize their own chances of survival, and when they do collapse the resulting power vacuum is filled as rapidly as any other vacuum would be. One can certainly seek to govern the behavior of a state or state organ, but attempting to limit its technical ability is naive, for the same reason that you'd be naive to try to fix police brutality by legislating about the design parameters of police batons.
Besides the initial titlegore, these tools really aren't that surprising. I've always operated under the assumption that if the NSA, CIA, etc are in your threat model you've already lost.
While true, that still doesn't justify Uber's actions. Uber doesn't give a crap about those regulations, or reforming them. In fact, they want them to stay in place so they can have an unfair advantage.
The problem is that there are very few IT systems that are purely foreign.

For example, if the CIA finds an exploit in a wireless router made in China and sold all over the world, that hole can also be found by others and used against targets in the United States.

Is being able to hack others worth letting ourselves get hacked?
CIA trying to inject into Little Snitch
If I remember well it had no memory protection, incompatible by design so..
For most people it is because the (desired) security updates come bundled with (undesired) UI changes, default search engine changes, increased telemetry, etc.

I work with a visually impaired PhD student, and we had to turn off browser updates because of the hell it was causing him (eg why are my search results different all of a sudden? why are pdfs opening differently?).

This isn't limited to firefox, google voice recently got a UI update that lowered the information density. Where he used to be able to see who he was talking to now there is a big colored shape surrounded by whitespace, etc. If he didn't limit the updates, probably 25-50% of his time would be spent dealing with interface changes.
For serious, thank you for taking the time to engage. I do take this seriously.
Well, you've nailed it in your parenthetical comment. Lack of a credible motive is one of the telltale signs of conspiracy theories, but has never kept conspiracy nuts from presuming all kinds of nefarious motives if they fit into their preconceived world-view.

Of course the CIA could have constructed a complicated false flag operation to get Trump elected, but they lack a reasonable motive. Similar things can be said about many conspiracy theories, only few of them attribute credible motives to the state actors and/or individuals involved.
AWS lambda and 'serverless' to replace a cronjob

And paying Amazon for the privilege of doing so!

Well done... golf clap
Hm. That's a nice definition. I like that.
https://www.washingtonpost.com/world/national-security/wikil...
It is not the Kafka.
No, no, no!

Defense in depth! Do you stop using TLS on your banking website every time a Windows 0day comes out?
Frankly, I am not sure if anyone in the White House has been able to truly control the intelligence agencies since the first Bush. And I say that only because he was a former CIA director, so he had a better chance of knowing where the control levers were hidden.
>And AMD should dump SHA1 acceleration in the next generation.

The cost to have that on silicon is probably close to zero. If you think SHA1 is just going to magically disappear because you want it to, well, you'll be in for a SHA1 sized surprise. Our grandkids will still have SHA1 acceleration.

>ARMv8 has had it for like 2-3 years now...

Because ARM cores don't remotely have the CPU heft an Intel x86/64 chip has, so ARM needs all this acceleration because its typically used in very low power mobile scenarios. On top of that, Intel claims AES-NI can be used to accelerate SHA1.

https://software.intel.com/en-us/articles/improving-the-perf...
Quoting myself from another comment:

I have been reading 'Mental Models' by Philip Johnson-Laird where the author argues that we apprehend the world by building inner mental replicas of the relations among objects and events that concern us, and then we act according to these models.

This book tries to argue against the idea that we think in terms of logical propositions.
Take for instance this example Steven Pinker in this lecture[1] presents a logical problem which stumps a lot of people. However, when people are presented with a 'real world' version of the problem they do a lot better. Phillip Johnson-Laird uses the same example and some other studies to claim that it is because people think in terms of mental models and not in terms of logical/deductive propositions.

Another example:

If J Edgar Hoover was born in Russia, then he would have been a communist.

If J Edgar Hoover was a Communist then he would have been a traitor.

Therefore if J Edgar Hoover was born in Russia then he would have been a traitor.

Clearly the transitivity doesn't follow here, and this is not the only example of apparent transitivity failure, but nearly everyone can point out the logical problem with the transitivity inference in the third statement, but a lot more people would fail it if presented in abstract terms.

This has been a very ameliorating book for me. It explains many things regarding people's beliefs. When people present moral outrage, this must mean that they need to have that mental model in their minds. Take for instance if you started to work in a store, and the manager informs you of the following rule:

> If the receipt is for more than $30 worth of goods, then it must have manager's sign on it.

Most people would have no problem in understanding and following that rule. But if the rule was following:

> If the receipt is for less than $30 worth of goods, then it must have manager's sign on it.

To most people this is confusing and non-sensical. To most of us, we would try to think for a reason behind this rule. Most probably come up with the explanation 'There must be a lot of theft/fraud going on for smaller receipts', or something which explains this anomaly.

This is the same reason why everytime it snows in the middle of April, conservatives are like "Oh god, the Global Warming is killing me", and whenever there is a hot day in winter, it's the liberals who take it as a proof. Because to all people, the data which doesn't fit into their mental model is noise. And all theories which people ascribe to, somehow fit in their broader mental models.

tl:dr; It isn't that there are limitations to reason, rather everyone uses mental models to separate signal from noise. '10 Photographs which prove that ghosts exist' are just noise to us unless the photos come with reasoning which provides 'patches/updates' to our mental model.

1. https://www.youtube.com/watch?v=1PXy3vWZiJo
Dictionaries are not sources of objective facts either. The subject you're looking to know more about is the philosophy of science and in particular how it relates to epistemology which tackles this subject.
fhoffa, you're everywhere!
He outright offered to send the drug at no cost to patients whose insurers did not cover it.
Hey zokier. Thanks for the comment.

In theory yes. I could provision a new function with an exact cron schedule to run once and then tear itself down.

In practice, this is a lot of extra logic to write to achieve this and would also potentially make own AWS account rather messy.

The hourly cron runs about 720 times a month which is far below the 1,000,000 free invocations that lambda provides under their free tier.
In general, in sports there's something of a distinction between fouls that are simply a violation of a game's rules and fouls that also cause or at least risk injuries. The former are generally regarded to be just part of the game and, presumably, penalties are commensurate with the foul. It's not uncommon for "dirty" play to have consequences in addition to the foul called at the time.

The basketball example is an interesting one. One assumes that if the league wanted to eliminate that type of play they'd change the rules to increase the penalty in some way by docking points or whatever.
> Again, your solution doesn't stop this.

I'm honestly quite confused here. What solution, exactly, are you talking about? I don't remember proposing a solution.

In the Shkreli case, the drug price was raised in September 2015, and a cheap replacement was available on the market in October 2015 from a different company.
I think it's still easier to blame a group run by a well funded nation state.
Superconducting loops and hydro seem to be the most realistic options at the moment. Hydro is limited by geography, superconducting loops by technology, though there has been some real progress on the latter the last couple of years.

A combination of wind + superconducting load levelers already works quite well in that grid load fluctuations are dealt with efficiently (and in a very compact package) allowing windfarms to feed old and fickle electrical grids.

The knowledge gained there can be applied to longer load shifts but it still is a real challenge.
It's been good for me! I don't miss Chrome at all. Plus the "send tab to device" is pretty sweet (if not exactly new or original).
I would say that's kind of the point, the manner in which that opinions is expressed aside. There isn't evidence in either direction that's been released to the public. So why respond to a comment with more conjecture?
Glider: Quote with Code
Given that there's no proof that Amazon is doing anything untoward with the Echo right now, arguments along the lines of "but they might in the future!" are an instance of the fallacious version.

If for no other reason, the behavior would be blatantly obvious to the kind of people that run Wireshark for funsies, the alarm would go up, and Amazon's reputation goes into the toilet.
Everybody makes mistakes, including bloggers. From my experience, if something is wrong or doesn't work your readers will let you know in the comments. Just be humble and ready to correct your mistakes and there should be no issues.
> Next time I won't post in a rush during work hours.

I'd suggest taking the same approach with your "secure, end-to-end encrypted communications" app you keep mentioning here[0]

A one-way sha256 hash of a message using a password that has to be 8 characters long[1] and can't accept special characters[2] is not a secure communications app

It is trivial to find the plaintext in these situations.

Your Chrome extension has a very elementary RCI bug in it[3], which because of your extensions broad permissions[4] profile means anyone with your extension installed can have any code executed by visiting any page.

To release (excuse me) crap like this on one hand while FUD'ing Google's security practices on HN on the other requires a level of hubris that I don't think i've ever previously encountered.

[0] https://www.gibberit.com/

[1] http://i.imgur.com/CsgOkZ2.png

[2] http://i.imgur.com/uZg0E4l.png

[3] http://i.imgur.com/eq19mET.png

[4] http://i.imgur.com/lOsibBP.png
The LexisNexis link 404s (added a space), I believe this is correct:

https://www.lexisnexis.com/privacy/for-consumers/opt-out-of-...

Also, the following can't hurt:

https://www.lexisnexis.com/privacy/directmarketingopt-out.as...
Ask HN: How to stay secure on the web?
Is it possible to avoid surveillance? (https://news.ycombinator.com/item?id=13810015)
If you believe the US government you are a complete fool.

The US government has dedicated itself to lying.

Clapper lied to Congress.

We have secret courts, we have secret kill lists. We have a secret mass surveillance program.

But do go on about how we can trust the government.

God HN commenters are just shills or idiots.
It seems like regardless of ultimate outcome, then, musk (or humanity) wins because we are researching tech that will be super useful on Mars.
When was it decided that it was the users responsibility to use the latest version of a web browser (regardless of how inconvenient it is for the user)?

Oh right, Google and the cabal that runs the web decided so.

Just because something is "old" doesn't mean it is obsolete. This mentality is very wrong, and needs to be opposed. It isn't helping the users, it is helping the platforms.

Up until a few years ago, it was the responsibility of the developer to gracefully fall back and support as many users as possible.
Now, instead, we design under the assumption that everyone has a computer made within the last 12-18 months, with the latest updates, on a high speed, low latency connection.

And that is awful, because it is cutting out users who aren't privileged enough to afford the web.

The new "improved" Google Voice is utter trash. It makes my 2011 Macbook grind to a halt. And for what? So that it cosmetically resembles their new phone app. And most tech reporting websites are gushing about how it looks.

And what is the justification for all of this garbage? Is the web faster? more reliable? More accessible to people with disabilities?
NO.
Do you live near a University? I got offered $35 an hour to tutor intro CS kids the other day. Not sure if that is what you are looking for, but a few hundred a week is a nice supplement, particularly if you are a grad student.
It is called Visual C++ and hence the focus is on C++. The only C related updates are done to the extent as required by ANSI C++.

For anyone else that still wants to write straight C, there are other compilers and Microsoft has integrated clang's frontend with VC++ backend.

This has already been communicated in a few places.

Cloudfare's crash just proved once more why the world needs less C.
What's the difference between grids and flexbox? To the untrained eye, they look like two alternate layout systems where one should suffice.
Yes.

I switched to Microsoft Teams.
I'm getting the sense that there's some kind of orchestrated effort to take down Uber. The whole "Kalanick must step down" talking point is ridiculous. There was an HR problem he wasn't personally connected to, so now he must be removed despite being an incredibly effective CEO? Because SJWs now rule Silicon Valley and investors bow to them? Um, no, they don't.

The fake "I'm an Uber survivor" anonymous blog post and the leaked cab video seem like they're possibly the work of anti-Uber conspirators. And then you have other bloggers cashing in on the situation by writing these kinds of posts to get page views.
These ones?

https://www.washingtonpost.com/world/national-security/wikil...
This shouldn't be happening. We have explicit code to force view-source to read from the cache instead of hitting the server...

If you can reproduce this problem in a clean profile, please file a bug, cc "bzbarsky", and I'll take a look. Obviously, steps to reproduce would he helpful too.

If it doesn't happen in a clean profile, then we start looking into what's special about your existing profile.
I seem to remember a passage in the Count of Monte Cristo where the Count has large emeralds turned into little boxes. I remember thinking at the time that it seemed extremely wasteful (and out of character for a guy who so shrewdly managed his affairs). Now it makes more sense.
Because your opponent might not be the CIA and because your phone might not be compromised.

So in that case switching to something less secure will instantly make your problems worse.
You've obviously never been to France nor to a third world country.
I think "most everyone" just uses Resharper - Microsoft kind of has a background of letting a healthy ecosystem of 3rd party addin providers exist, and only gradually incorporates the best features into the core product.
You're both right: encryption was bypassed, but mentioning specific apps implies those apps were specifically affected and is misleading.
Ah, it was intended as half tongue-in-cheek. Making light of tough situations is usually for the best.

Sorry for not making that more clear. My smiley face budget had already been reached by the latter portion of that post. Anything exceeding one smiley and you end up looking like you're on something, especially on HN. Heck, even just one can be suspect!
Plug in Dropbox and You Can Chart Anything
We have evidence that the FDA errs too conservatively and doesn't approve (or delays) drugs that would have turned out totally safe and helped people.

I'd like to see evidence for that. My impression, from all that I've read on the subject, the truth is quite the opposite. The FDA's funding has steadily been cut over the years and the restrictions on drug trials have been more lax over time. For example, drug trials have famously small sample sizes and are completely run by the companies themselves.
Better Compression with Zstandard
I assume that you have a couple of things going on.

On the one hand, cities recognize that it's more or less impossible to make deliveries in a city without violating the law a decent portion of the time. But people want to get packages delivered.

On the other hand, they want to provide incentives to at least try to obey the law. (And they're almost certainly not averse to having the revenue stream either.)
I've been drinking a smoothie for breakfast the past few weeks.

- 240g almond milk
- 40g figs
- 85g spinach/chard mix
- 3G spirulina
- 12g chia seeds
- 100g apple
- 32g peanut butter
- 38g "naked" chocolate whey protein
- 60g frozen beets
- 70g frozen blueberries
- 4g fresh ginger
- 2g turmeric
- 2g cinnamon

It's right around 850 calories with a good blend of carbs, protein, fat, and dietary fiber. A good high speed blender is crucial to ensure the final product is drinkable.
Because the story broke this morning and it takes time for someone to read the dump, write a story, get comments from technical experts, etc? There's not really a big dramatic revelation here – “Intelligence agency spies on people - film at 11!” – so they probably aren't pulling people off of bigger stories to cover it.
with every large telecom player slashing internet rates in india..why would people use wifi dabba. This is like creating an awesome credit card holder when we are moving towards e-payment and bio metric identification. But am sure YC must have seen something in it. I wonder what.
This just in: man looking over your shoulder bypasses strongest Signal encryption!
Or it's just a healthy portion of self-deprecating humor.
I wrote a stack based, concatenative, operator language. I demoed it live at a tech talk in Italy on the future of programming and databases.

Its core feature is emergence/composition, to demonstrate its power, let me show you a SCARY example of a factorial function:

factorial : [ = ] ? 1 | [ - 1 factorial * [

Now, let me show you the exact same program using an EVEN SCARIER "language pack" (note, this is the exact same program, nothing is different) here:

Define the factorial function to be that if the left parameter is equal to the right parameter then return 1 else wise please take the left parameter , subtract one , recursively calling the factorial function again multiplied by the right parameter .

That terrible "english" is the EXACT SAME program as the first line, the interpreter doesn't know there was any english. I do not recommend ever coding with plain english, but it demonstrates the power of emergence/composition/currying with the language.

If anybody is curious, I'd love to explain more / chat with people / show demos. I'm ultimately going to switch the programming language's interpreter to be built with a database (the one I'm working on, http://gun.js.org/ ) so that way I can have a Turing Complete database system. Once that is working I will then be able to evaluate programs across multiple machines simultaneously and modify programs dynamically on the fly, as well as reduce O(N) operations to O(1) by spinning up N number of machines (for large enough data sets that make it worth the overhead of splitting up the load).

I wish they recorded the talk, I'll have to do it again and post it. It had a lot of other interesting ideas, like combining it with Machine Learning to sample inputs and outputs of functions to see if the computer could optimize algorithms and then issue a pull-request to its own code, becoming a contributor. :)
I think you replied to the wrong comment, but I don't know.

However, I don't think this is the first underground structure in an earthquake zone.
That's exactly what that is. Basically, if you're rich enough to where the fine doesn't matter, you don't have to follow the law.
"Akin to putting your seatbelt knowing full well a thermonuclear attack is always possible."

Yes, catastrophic compromise is possible, but that does not render all security measures moot. A precious few attackers have the capability for such attacks, they are very costly to develop and therefore very precious and well kept secrets, to be used on high profile targets.

Unless you are a spy, a terrorist, a state official with significant power or a dissident against the likes of Russia or China, end-to-end encryption like Signal will keep your communication private.
This part:

> if I went to the Doctor it would be free

probably reduces what people are willing to pay.
People use non-SI units.
The 5-Second Rule: The Ultimate Procrastination Killer
Guessing it isn't terribly useful.

You guess correctly. The issue is that POSIX states that

... all of the standard utilities [...] shall be implemented in a manner
so that they can be accessed via the exec family of functions as defined
in the System Interfaces volume of POSIX.1-2008 and can be invoked
directly by those standard utilities that require it (env, find, nice,
nohup, time, xargs).

Note however that /usr/bin/cd isn't completely useless: It has the same diagnostics (error message and exit code) as the command, so `env cd $FOO` is a way to check if you can change to that directory without actually doing it.
I like that philosophy. Try hard but have low expectations. Makes it harder to get discouraged, when things inevitably don't pan out.