skysight-inc/HackerNews huggingface dataset:
> "Why won't the Right in America criticize Radical Evangelical Terror"

Because that doesn't actually exist and it's just a faux and very poor argument.

If you are intellectually honest you would understand there is a big diference between someone from a certain group (may it be christian, muslim, etc) just committing a crime as an individual and someone from a certain group committing a crime invoking principles that derive from belonging to that group (like their religious supremacy for instance).

In that regard, yes, there are a lot more islamic attacks than there are christian attacks. We had one single attack in Europe that could (emphasis on could since the guy was by foremost an extreme right winger and not some christian fanatic) be connected to christian ideologies in the past decades (by Anders Behring Breivik, which did in fact kill a lot of innocent people)... but now go and check how many terrorist attacks you have connected to islamic ideologies.
It's also very simple "sour grapes" thinking. Most people can intuit that knowledge leads to status and privilege, so when they don't have it themselves, their ego suffers when adjacent to those that do have it. So, in a simple act of self esteem preservation, they demean the very idea of knowledge.

Given how pervasive our intelligentsia-dominated media has become, low-knowledge people everywhere are now in a constant state of defensive ego-preservation. Presto, wide-spread belligerent anti-intellectualism.
Still True: Chilling Effect of Mass Surveillance Is Silencing Dissent Online
This is at least a few years old, I remember reading it when the family was stuck in the snow in the southern Oregon mountains.

Rule #1. Don't ever leave the car and setoff overland.
My wife and I have been using Stitch Fix for six months. The first box was magical, especially the fix for pants (as @xb noted). Part of difficulty (and noise) for SF feedback is that you get a discount if you keep the whole box. There's been a few items that I would return if I had to pay for it, but the discount i received covered the cost of the item so I kept it. That seems to mess with the feedback loop. The main complaint I have about SF is that after the fist few boxes it feels repetitive. The clothes all start to look alike. I now own three color variations of the same plaid shirt and two sets of the same shoe in different colors. My wife's complaint is that the 'I don't like pink' request made multiple times was ignored. She sent back the entire box last time. I will try and give them feedback and see what happens.
Check out the Sleepy Pi HAT. It's possible, though more complicated than it would be on a computer with power management options or on an Arduino.
Conflating market corporationism and fascist corporationism is an idiotic and ridiculous category error leftists often make. The purpose of fascist corporatism was to achieve organic national unity by putting both corporations and unions under control of the government. Market corporatist ideology believes that separating government functions from the government would make them more efficient.
Ha, good anecdote. This is the same technique that I wrote about in this post, though mine was about Unix man pages:

m, a Unix shell utility to save cleaned-up man pages as text:

https://jugad2.blogspot.in/2017/03/m-unix-shell-utility-to-s...
Some of the statistics seem to be so hyperbolic and I wonder whether it is due to Americas preference for the imperial units rather than metric units. It is much better to use terms that people can readily visualize.

Does the writer prefer gallons because it makes it look so many? Why not barrels instead?

400 tons of contaminated water a day - lets say matric. = a 7.3 meter cube

962,000 ~ 1,000,000 tonnes of water accumulated so far - a 100 meter cube

64,700 cubic meters, 17 million gallons of radio active clothing - 40 meter cube.

200,400 cu m3 of contaminated rubble - a 60 meter cube.

Why doesn't the writer use stats or pictures people can visualize? Like compare it to the size of the Empire State Building, former World Trade Centres etc? Is he hiding the extent of the damage or expressing it in meaningful terms?

At least we can extrapolate the extend of the problem into the future.

3.5 billion gallons of contaminated soil ~ 13 million cubic meters of soil, a 235 meter cube.

So after analyzing these figures - is using millions and billions truly expressing the extent of the problem or just obfuscating it, with incomprehensible figures, no matter or large they may be?

I guess it is time now to work out how meters compare with the heights of buildings and street blocks.

E & OE
in order to do that they would first have to profile their customers for race. thats not exactly legal either.
Perhaps I am missing something but I really don't see the point of storing it in localStorage or sessionStorage over cookies what so ever.

1. You have to write code to provide the authentication values in all requests.

2. The GET request for the initial page render can't possibly be authenticated.

Why not cookies? Other than that I agree. I really don't see the point of following the JWT spec or using an implementation of it when it has been shown that these implementations are poor (problems with none algorithm & asymmetric keys).

Fundamentally, what we are talking about is simply a claimed identity, verified and signed by your backend. This is a sound principle. Just implement that and your attack surface is considerably smaller.
> To be fair a majority of the big technology companies all write their own tooling for many things that already exist because they didn't quite fit the way they needed them

Too many engineers syndrome comes to mind too.
I would upvote your comment multiple times if I could - compassion is something that I see expressed all too rarely online.

I remember reading an interview with a psychologist who worked at a clinic dealing with videogames addiction in the FT Weekend magazine many years ago. He said almost all addiction is rooted in trying to escape pain or suffering. For a lot of the patients addicted to videogames it was an escape from loneliness and other problems.
Yeah well I didn't like his Foundation series, it was boring.
Easier to deal with a "them vs us" than an "us vs some of us"
Ironically, that question can be finally answered only by a judge.
I used a similar hack to persuade an Epson MX80 printer to produce slashed zeros by sending '0', <backspace> '/'.
It seems that Matthew Green warned them about some of their choices though back in 2012!! https://www.ietf.org/mail-archive/web/jose/current/msg00366....
Expo has a new Navigator too.
Microfinance, Core Banking, Co-Operative, Loan Soft, Mortgage
Nice little project and writeup! I thought about using my SLR but I don't want to bump it's shutter count too much, and since I have young kids in the house, there's no good place I can set it up on a tripod for long periods of time without it taking a tumble :(
This doesn't seem to affect Ubers current bombshell, and the overarching tale of Levandowski's poaching is pretty well documented already.
They're just fighting over licensing.
OP is, IMHO, exaggerating for hyperbolic effect. This won't hurt Uber in the ways he thinks it will.
Using Bitcoin’s technology to wrangle widespread medical records
I can only imagine how filthy your car would be when it gets back to you at 5pm.

I don't want to imagine what it'd be like at 8am after giving lifts to people coming home after a night out
I found this video incredibly informative about how to effectively implement JWTs, along with security advice and a nice refresh-reissue process:

https://youtu.be/mecILj3p4VA?t=2m8s
It's funny when you think about it. Many of these guidelines are there to prevent the program from being detected; in other words, it's to give the impression that it's not there.

You would think that good software which performs background tasks should be just as discreet, and follow similar guidelines: do your task, don't bother the user too much, definitely try not to block UI when the user is doing another thing. But a lot of software definitely does not. The classical example is AV software, but a lot of mobile applications are very guilty too. There is so much software that fails so hard at being efficient at background tasks...

It used to be even more prevalent about 10-15 years ago, but I suspect that it has a lot more to do with increased computational capabilities than to higher quality software.
Not everyone who voted for Trump is anti-intellectual, but if you are, it's very likely that you voted for him.
In order to communicate confidential information using email, PGP remains the gold standard, and it's here to stay.

Using a different tool will just be annoying, and at many workplaces, people just can't install whatever software they want.

Sure, PGP isn't perfect. Or rather "tools leveraging the PGP format".
MacGPG is constantly broken after a new macOS update. Overall, all GUIs suck. Nobody's using the chain of trust mechanism (Keybase isn't great either but from a usability perspective, it's way better). And I have to go through my shell history every single time I need to do something with GPG using the command line.

But when it works and you can remember how to use it, it does the job.

From a crypto perspective, it is also totally fine, and GPG has had support for ECC for quite some time.

Besides email, if I have to quickly share things with my coworkers or transfer things between computers, I always use Piknik instead, because it's way more convenient to use: https://github.com/jedisct1/piknik

And Minisign for signing software, because it assumes that people can install software on their computer anyway: https://jedisct1.github.io/minisign/

But for email... I don't see PGP going away anytime soon.
But, can't this be said of any DNS provider?
Another Paypal Scare Tactic: Their Legal Team Handles Their Twitter
This is for anyone who's been following my Paypal Horror Story as posted here: https://news.ycombinator.com/item?id=13851120#13859152

I reached out to @Paypal on Twitter over the weekend because I never heard back from a supervisor who said I would hear back within a few hours on Thursday evening, either from him or a colleague if I don't receive a restored access email.

He finally calls me Monday late afternoon and says that @Paypal on Twitter is handled by the legal team and now my case is with legal and he can't help me further, I need to take it up with legal!

I explained I reached out to @paypal and @paypalsecurity on Twitter simply as a custkmer service channel since companies usually respond faster on social media and nowhere does it say that their twitter is the legal department or automatically escalates a case to legal. He said he's not here to discuss how it works he's just here to tell me that reaching out to them on twitter instantly escalates to their legal department and now he can't talk to me.

What kind of bs is that? Nowhere on their twitter does it say it's the legal team! Also when you call Paypal and ask to speak to legal they give you a physical mailing address, why not just say "well you can just tweet at us and legal takes over"!

Another bs way to get rid of me and my situation and to hold on to $40k for 180 days and make interest on it since my sales have slowed down.

Is this even legal? Claiming I reached out to their legal team because I tweeted at Paypal's customer service on twitter where nowhere does it state that escalates to their legal team?
The first company that comes to mind in terms of publicly discussing its programming and computer science type engineering is JaneStreet. There are episodes of Software Engineering Daily and YouTube talks and blog posts. Many of them related to the OCaml language and system design.

Good luck.
Try short variant :) - https://www.viva64.com/en/b/0260/ (The Last Line Effect)
TBH, I never heard of Waf before. It looks interesting.

Buck, Waf, Meson, Bazel....apparently Python is the language for next-gen hash-based build tools :)
>People have an absolute right to be religious if they want to ... But they shouldn't expect to be respected for it ... Indeed, they should expect the opposite: to be mocked and laughed at.

Many people find religion for many different reasons. To categorize them all as people to be mocked is equally doltish but the opposite to religious people telling everyone they are going to hell (for whatever thing they don't like). Your statement is an equal but opposite reaction to that which you loath. No one likes a rabid conservative, no one likes a rabid liberal. Rabid is rabid regardless of what comes out of their mouth.

>idea of "free speech" has been intrumentalized by a lot of people to shield themselves and the absurd views they hold

I think you are practicing what you are preaching.
I always get frustrated with the tools for writing.

I like using details in my writing, little things like specific symbols around print numbers, or being able to ensure a particular event takes place on a certain page number...

But producing the end files is hell. Some printers take the edge of the page in their own files, the EPUB spec is excruciating at times, without full support in any reader, mobi is a worse thing because it's so proprietary.

I've extended Markdown, reStructured Text and Scribble in pursuit of WYSIWYM, and written four or five build tools.

But I still feel like writing in the modern world for modern devices is like slowly drowning.

Being both a programmer and a writer is a curse.
Yes, that's why I was confused.
In the EU, it is definitely not.
> I'd rather see a scheme in which the practice of rule is the province of those trained and skilled in that very specialized profession.

Great idea! We can get everybody to vote on who those people are!
It's not really the cult of ignorance but the cult of money.

And money making skills do not require being a genius or personally making key contributions to society. It is rather about hiring the right people, negotiation and selling ideas, etc...
No, because once you give the government the ability to tax something you give the government the ability to control whatever that something is. The Supreme Court has ruled on this in the "Walz vs. Tax Commission of the City of New York" ruling.
Alan is an amazing speaker, but he tends to ramble a bit. I would suggest reading "On the taboo against knowing who you are" as a fairly tight (~150 page) condensation of his ideas.
That post is great work. Thanks again. But I think you're wrong about JWT.

The problem with JWT/JOSE is that it's too complicated for what it does. It's a meta-standard capturing basically all of cryptography which, as you've ably observed (along with Matthew Green), was not written by or with cryptographers. Crypto vulnerabilities usually occur in the joinery of a protocol. JWT was written to maximize the amount of joinery.

Good modern crypto constructions don't do complicated negotiation or algorithm selection. Look at Trevor Perrin's Noise protocol, which is the transport for Signal. Noise is instantiated statically with specific algorithms. If you're talking to a Chapoly Noise implementation, you cannot with a header convince it to switch to AES-GCM, let alone "alg:none". The ability to negotiate different ciphers dynamically is an own-goal. The ability to negotiate to no crypto, or (almost worse) to inferior crypto, is disqualifying.

A good security protocol has good defaults. But JWT doesn't even get non-replayability right; it's implicit, and there's more than one way to do it. Application data is mixed with metadata (any attribute not in the JOSE header is in the same namespace as the application's data). Anything that can possibly go wrong, JWT wants to make sure will go wrong.

It's 2017 and they still managed to drag all of X.509 into the thing, and they indirect through URLs. Some day some serverside library will implement JWK URL indirection, and we'll have managed to reconstitute an old inexplicably bad XML attack.

For that matter, something crypto people understand that I don't think the JWT people do: public key crypto isn't better than symmetric key crypto. It's certainly not a good default: if you don't absolutely need public key constructions, you shouldn't use them. They're multiplicatively more complex and dangerous than symmetric key constructions. But just in this thread someone pointed out a library --- auth0's --- that apparently defaults to public key JWT. That's because JWT practically begs you to find an excuse to use public key crypto.

These words occur in a JWT tutorial (I think, but am not sure, it's auth0's):

"For this reason encrypted JWTs are sometimes nested: an encrypted JWT serves as the container for a signed JWT. This way you get the benefits of both."

There are implementations that default to compressed.

There's a reason crypto people table flip instead of writing detailed critiques of this protocol. It's a bad protocol. You look at this and think, for what? To avoid the effort of encrypting a JSON blob with libsodium and base64ing the output? Burn it with fire.
so if JWTs are supposed to be avoided, what's a better alternative? cookies? (does that not open another can of worms?)
(Clear Containers dev here)

I believe a "correct" way to do it would be to create a network plugin (or extend an existing one that does 80% of what you want) for docker doing what you want. Those are the ones responsible for setting up the network namespace at startup. A new CNM plugin, only if the current one isn't enough of course, a number of things can be done before container startup, eg. https://docs.docker.com/engine/userguide/networking/default_....

The Clear containers OCI runtime doesn't add a feature to push network configuration in addition to what Docker already does today. It relies on a CNM plugin to setup the network namespace, as usual, then reads back the netns configuration to decide how to best interface between the container netns and the network stack within the VM. It's not exactly easy to get right and we have to juggle with all thid because we're trying to shoehorn a VM where netns are the de-facto interface. Work is going on to make all this simpler and integrated, but it will take some time.

A current limitation is that only the netns configuration at startup time is taken into account and `docker network connect` on a running container doesn't work (we'd have to listen to changes in the netns and propagate the configuration to the VM).

A bit more info there: https://github.com/01org/cc-oci-runtime/blob/master/document...
That's beyond what I know of Twitter cards, mostly because I've never made anything as eminently interactive :)
I think you hit the nail on the head.
My motto for developing code is "make it simple as possible, but no simpler". Whoever, created a design that used 18,000 classes did not follow that rule.
Use any npm module with NativeScript
I never even thought to consider it. But now that you mention it, it's a great idea. In the United States at least, we have been indoctrinated into this idea that cars are in individual possession, when really if you look at what our car is and does that makes very little sense.
The biggest flaw for me is that any 3rd party script can access your localstorage without your knowledge, while it can't access HTTPonly cookies.
I think you're conflating discussion of what individuals should do with what the city should do.

Should workers vote with their feet for remote first companies? Absolutely. But that doesn't mean SF shouldn't also build more housing.

Saying you shouldn't build housing because people will just buy it all up it is like saying you shouldn't grow food in a famine because people will just eat it. The problem is that demand and supply are massively out of step, and that means you need to build a lot before it starts to even out.

And sure, there are political reasons it doesn't happen, but that doesn't mean it's not a good idea.
One can trust science, but not scientists as if they're some special beings above corruption and what else.
The text is very blurry on my browser, I'm not sure if it's intended but it makes it hard to focus on what's written.
This is not one event 600 years ago, this is several events over 600+ years where people marked safe areas. 26,000 died in this one but even with a smaller population in 1896 one killed 22,000 people. These are 1:100 year events not 1:1,000 year events and people are really bad about things that happen less frequently than 1:50 years or so.
Completely agree, as nuclear won't ramp up in the next decade. i.e. if I have 10 billion USD in the bank I can have that all converted in solar panels or wind turbines in 2 years. A nuclear plant would take 10 years just to get build.

Economically speaking if I go nuclear I need to compete with solar prices 10 years in the future not the current prices.

Ecologically its the same. I invest in solar or wind, I am displacing coal and gas within two years. The nuclear plant will only start helping 8 years later.
Another advice: You shouldn't be saving the JWT on localStorage for security reasons, have a look at the info here: https://news.ycombinator.com/item?id=13866965
БН-600 & БН-800, Russia.
> Did you go back to dumb/feature phones?

Yes for a little while: I was happier with my Sagem myx6 + my Sharp Zaurus C3200.

> When did you start using Android, and with which phone?

With the HTC Magic.

> Apple did not even have much of an "ecosystem" at the time of the first iPhone

It seemed to have a more active one than now! I remember when Cydia first came out and hundred of applications got ported each day.

> if you didn't use iPhones since 2007

I have seen iphones since: friends, family and coworkers have them. I've been extremely unimpressed in the software (though I don't mind the hardware).
Humans are creatures that evolved at an interface - the boundary between the earth and the atmosphere, the boundary between the known and the unknown. We have evolved to solve problems in the face of the unknown. American ingenuity embodies this spirit. OTOH, 'intelligence' is simply the recapitulation of stuff people have already talked about and done. This arthritic view is European. The actual application of 'intelligence' to the unknown is a rare activity that very few have embarked on. The authors of 'intelligence' constitute a handful of individuals in the sea of billions that inhabit this planet. How many Asimov's are there? I can feel his loneliness at the top but have no compassion for it. Is it no surprise then that Americans have eschewed blind worship of an elite priesthood? That kind of behavior is a shortcut to abdicating your brain. I respect those people who have honestly forged their place in the world without relying on deceit, subterfuge, delegation, entitlements, etc. These people have a vision for their lives and move in that direction, not the cult-like flocking behavior of the 'literati' peering into their smartphones for the latest liturgy.
They could try and limit what people see about guests before a booking is confirmed. E.g. they could not show any photos of the person before the room is confirmed.

But most of the actions they could take would probably impact their bottom line, so it's hard to see them doing anything.
Thanks for the suggestions! That "doit" looks like it's simple enough for my fairly pedestrian needs. I wonder if my aversion to Make is that I don't spend enough time thinking/making Makefiles, but having something a little friendlier and simpler -- at the cost of ubiquity/portability -- might be the kind of training wheels I need.

Edit: FWIW, I posted doit to r/python and someone suggestion Snakemake, which also looks excellent and well-maintained: http://snakemake.readthedocs.io/en/stable/
IMHO the political parties are full of people representing their own interest and not the electors'. We are living in an illusion of democracy where the kings are spending our money (tax) brainwashing our neighbours into reelecting them.
Lots of authors vie for early word processor fame... https://www.theatlantic.com/technology/archive/2012/01/conte... was one I recall liking at the time.