skysight-inc/HackerNews huggingface dataset:
I think a recurrent concern is OpenVPN's reliance on TLS, and its codebase complexity as a result of being built on OpenSSL--but with far less attention and resources and vuln hunting compared to say, actual browsers. Complexity + lack of auditing person-hours is never a good combo. (See https://twitter.com/tqbf/status/806646188158152705)

Matt Green's audit of OpenVPN, when completed, may lead to more light on the matter. Otherwise, we're just relying on informed intuitions.
also works on mac btw
Ask HN: What techniques do you use to keep your current users engaged?
While working on my side-project (https://booknshelf.com) I've been thinking a lot about the ways of keeping my current users engaged. One way of doing this is via notification channels. Any other ideas you would like to share? Thank you!
Very interesting. I work in AI. Curious about trends in your industry. Please ping me at the email address in my profile.
If it's that easy to move highly skilled positions to the Far East, how do you explain Germany's prowess in high-end manufacturing? Surely all those jobs should have moved to China by now? It's been two generations since Deng opened the country up to foreign manufacturers.
Some of us are highly educated, and are still forced to take the bottom line work-or-starve jobs.
I take a different look. I think it's it's nearly impossible to get a feel of a company from an interview or offer. Often they're trying to put the best spin on the company and you're never really guaranteed to work under the same manager you were hired under.

Case in point: I was hired under one manager, then another manager (who was worse than the first) replaced him three months later, and I was fired two years later.

It may take a year to discover the true bullshit the company is hiding. So in that case ignorance is bliss. Enjoy that time, and if you smell something rotten, best steer clear of it, even if that means getting a new job.

The most important thing is your happiness. To me that's salary. Some people like clean code. Some people want to grow in a position. Some people want a good commute. I don't care that much about the code base, because I'm technically a hired whore. And currently my commute is 4 plane segments a week, and I don't mind it because in the end, the people are nice.

Sure it helps if the people treat you nice, but as long as you are the employee, you can be treated like shit at anytime during your employment, and you may have very little recourse.

The other thing to steer clear of is how much the company brands it's employees. If your own personal identity is wrapped up in the company brand, then if you or one of your co-workers are later separated, it can be especially painful.

In short, figure out what it is you want from a company, and see if it matches your needs, roll the dice and hope for the best.
And now both of your vpn owners have your data connected to your ips. You do have more choice but if both of them sell the data, it doesn't make any difference.
The problem is you skipped 200 years.

I was well clothed in 1987. Most of the textiles I was wearing were manufactured in the Carolinas. My parents also were buying clothes in 1967. Their stuff was made in the Carolinas and Central/Western New York. No homespun.

Today, I'm fortunate to have a lot more money relatively speaking than my family and buy nice stuff. With the exception of a couple of suits, a few of my wife's dresses and some Irish linen, every piece of fabric in my home is milled and sewn in China, India, Bangledesh, or Columbia.

The descendants of the people who made clothes for my parents 50 years ago or my childhood self 30 years ago are mostly on social security disability, in the military, or working some garbage service job.
Having a good REPL is important, though.
How do you sneak something like lisp in to work?
This is just rubbish. Ross Douthat is just dogmatic. He's peeved that a majority of people in urban areas don't hold The Right Ideas (i.e. his ideas) so he wants some help imposing The Right Ideas on everyone, even those who live in an area where the majority hold the Wrong Idea.
I think somebody's doing a kickstarter exactly for what you're talking about.
Cracked Huawei Google Nexus 6p phone screen?
No, mknod() is also gated by a capable(CAP_MKNOD) check if the node is a character or block device (see vfs_mknod). Which you can't have if you've created an unprivileged namespace. Devices cgroup is an additional restriction but you hit capable(CAP_MKNOD) long before that check.

Namespaces (of which there are many, so 'unpriveleged' must be qualified) != cgroup controllers (of which there are similarly many) != capabilities (of which there are also many).

IIRC these are separate and no use of one implies the other. Therefore I do not understand your comment and believe it may be in error, as it seemed both in your talk and in this reply that you are implying a link is now implied at the kernel level. I strongly suspect that your impression comes from container userland runtime system specific code (in which my "for some of these comments it depends which container runtime you are using" comment stands), and I strongly doubt it is kernel code, but am always more than willing to be re-educated.
I have had the same bug for about a year.
This is definitely something worth pushing for, if you're an American. Figuring out how to shift our system into one where viable third parties can play ball would be frigging grand.

I'd like to see the GOP split into the 2-3 parties it shelters, and the Democrats go their 3 or so ways as well. I'd bet it'd significantly stabilize US policy and reduce the zero sum power plays that are becoming quite common.
Oh, absolutely. I wasn't trying to comment on the difference between the monolithic and modular approaches of Ember and React respectively. I think the monolithic approach actually solves the problem I'm describing to some extent, because developers in those ecosystems are forced into using these tools and patterns, which gives people a vested interest in making sure they're actually good before going into the next release and seeing widespread adoption.

redux-thunk is a great example of what I'm talking about. The design pattern prescribed by it is confusing in subtle ways. They're basically overloading the terminology of "action creators" to mean two wildly different things. The main benefit is solid (it provides a way for controllers/business logic functions to access the data store through dependency injection rather than closures, making them easier to test) but the implementation isn't well thought out, the terminology surrounding it is confusing, and it provides rookie developers more ways to shoot themselves in the foot (see getState abuse).

If any of this craziness was proposed as a core part of Angular or Ember there would be enough sane devs speaking out against it and it would be changed. But since in a modular system in React you are free to choose parts as you please, everyone that knows what they're doing just elects not to use stuff like this, until it builds up enough of a cargo cult following that it becomes standard and starts infiltrating your work place, and suddenly you're outnumbered 20 to 1 by people that have just "always done it that way".
I like "infini-gon" :D
What Rural Alaska Can Teach the World about Renewable Energy
Cost of NPM Packages
Data poisoning is a fantastic approach: flood the captures with so much, and with so much trash that it becomes an increasingly large amount of work to just sort out the 'real' traffic (even before any advertiser analysis of what that real traffic contains).

There's a couple of things that do this actually: the AdNauseum plugin will hide ads for you, but will also click through on them often as well which helps pollute advertiser data capture. It won't of course be able to replicate you browsing on the page, but it'll go a long way to frustrating the efforts of 3rd parties who won't have access to the landing page metrics anyways.

There was also a post on /r/InternetIsBeautiful that was supposed to do something similar: essentially destroy your browsing habits by performing additional searches and following links in the background, but I think that relied upon a hardcoded list of searches, so it's ongoing functionality was somewhat limited.

A big challenge to making something that continually obfuscates your browsing habits is making sure it doesn't accidentally end up going throw actually sketchy or illegal stuff (i.e. sites/etc that could get you on lists/attention) and making it work in a way that isn't easily detectable/filterable as 'machine traffic'.
I guess that means you'd have to build in functionality to replicate following pages several links deep, not making successive requests immediately (sleeping execution/simulating scrolling), simulating some kind of 'natural' interaction: mouse movement + hovering over things + other things that users might do?

I'm sure most of that stuff is totally possible, probably even easy, might make for a fun personal project...
France runs a warrantless mass surveillance program [1]. It is one of the countries our OpSec consultant specifically recommends taking clean computers to. It is labelled, by "That One Privacy Site" as NOT being an "enemy of the Internet" (whatever that means). Difficult to take the rest of its recommendations seriously.

[1] http://www.cnn.com/2013/07/05/world/europe/france-surveillan...
Sorry, when the product is north of 30K, you'll find a significant number of people will put what they can afford ahead of brand loyalty.
Plus you will be banned participating from so many places because the vpn and vps ip blocks are over abused and blocked.
SmartOS run containers in zones get the best of both worlds
In my experience dynamic checkers like https://clang.llvm.org/docs/ThreadSanitizer.html tend to work better that static checks.
I had been working in the Windows / .NET ecosystem for almost a decade prior to my current role. I always thought C# was a nice language to work in, CLR is a really capable runtime, and Visual Studio is one of the best IDE out there. But my observations is that C# in .NET core seemed to appeal only to existing C# / .NET devs.

I am excited for the new functional features coming in C# 7, but to be honest, these days it would not be my first choice of language when starting a new project. That choice falls to Scala due to its versatility:

- Blending of OO and FP.

- Works in backend, frontend (ScalaJS), or compile to native.

- Multi-discipline applications, e.g. web apps, data science, scientific computing, etc.

One of the biggest benefit as well, is that it leverages the JVM ecosystem. Big, mature community and choice is abundant. This is actually one of the things that really struck me when first working in it (JVM). It seems like you always have at least three choice for anything, that to most extent works well with each other:

- Alternative languages: Scala, Kotlin, Clojure, etc.

- Build system: Maven, Gradle, SBT, etc.

- GC: HotSpot, Zulu / Zing, Shenandoah, etc.
At the end of the day, it is obvious that policy is the right direction to stop this bleed of infringement. However; be it noted: those who have the capability to circumvent, or ethically "get around" such enchroachment; have a responsibilty to free those who may be entagled by that which is "freedom limiting". The argugment could be had, however; is it really freedom limiting for others to know your web history? Obviously, there are second, and third abilities to be held when a dominant party knows of the lesser's behavior. Still a great bit to parse. As for me and my house, we will tunnel safely through VPN.
I'm sure you all remember this read from 6/1/2016:

The impossible task of creating a “Best VPNs” list today
https://arstechnica.com/security/2016/06/aiming-for-anonymit...
Lucene 3.0.3 vs. Resin 1.0 RC1
It is challenging to draw a bright line between journalism that contains some bias and outright propaganda.

I'm willing to put forward a simple test: does the source publish retractions and corrections?

I would guess that the NYT does and Breitbart does not.
Classifying White Blood Cells with Convolutional Neural Networks
Recently switched to Linux as my daily driver due to Apple's lack of decent hardware release. RedShift was a lifesaver. For some reason 'vidmode' works better for me than 'xrandr'.
Why aren't VPNs, and more broadly encryption, a solution to this problem? "Waving the wand of a technical solution," as the post pejoratively calls it, isn't such an unreasonable thing to do with an inherently technical problem. This problem only exists because of other technical wands we waved. Why solve this problem with policy? Policy is hard to get passed, hard to keep passed and even when it is passed often times it means nothing. Remember this is the same government that contains multiple organizations surveilling your every move, not because they legally can, because they illegally can. The point is, it's foolish to count on USG to give you a right to privacy, just look at the history on this, it's not going to happen. But it's especially foolish when this is a right that you can enforce for yourself. If you actually care about your privacy use a VPN, or Tor, don't sit around waiting for the government to do it for you.
Holy crap. That's amazing. Thanks for sharing. Been digging into Elixir off and on for months, and hadn't come across this. Mind-blowing, indeed.
What do you call the US economy today?

It's not a free market. 16% of the GDP is healthcare, which is a mix of government price controls and insurance cartels at the state level. 5% of the GDP is military spending. 8% of the GDP is the financial services sector.

Basically a third of the economy of the richest nation in the planet with 300M+ people is controlled by a group of leaders who could fit in a midsize during arena.
> To do the regulations, the FCC reclassified the internet as basically ye olde telephone system, which then made it subject to their purview based on laws created in the 1930s. This is classic overreach. Congress never gave this authority to the FCC and is acting to put them back in line with the law.

It was the FCC that decided in the first place to classify ISPs as information services rather than common carriers. They have the authority from Congress to do that, and I'm aware of nothing in the laws that granted that authority that say that once the FCC makes such a classification they cannot later revisit that and change the classification.

> The lesson here really is that if the issue is really important, then get an actual law passed instead of trying to contort regulatory authority based on laws from the 1930s.

There have been several additions and amendments to the 1930s laws, such as the Telecommunication Act of 1996. It is disingenuous to suggest that the FCC is relying on 1930s laws for their authority.
> There's nothing about ML that reinforces status quo more than traditional statistics

Yes but that is not how ML is marketed. It's marketed as way better than traditional statistics, and soon even better than humans.

But reality is that a trained system is only as good as the data used to train it.
If there were a significant economic downturn, I wonder how much that might impact their initial wave of buyers.
You can guess some of it trivially, cloud services such as AWS are popular and mask the ORG using the IP addresses.

Example:
any traffic to 17.0.0.0/8 = user probably has an Apple device
It would be pretty difficult to read a number of older posts if let's say 4 or 5 "flaming comments" were deleted. Then you would have 10 responses that would left on the record (without clarity as to what they were intending to address).

It would basically ruin the majority of older posts where good conversations (read with opposing positions) existed.

I like the content left in its genuine (or original) form.
Trump's business network reached alleged Russian mobsters
Sweden is a member of the EU [1]. It has a 6-month data retention law [2]. Much safer to route through Norway, Switzerland or even the United States. (I use PIA [3].)

[1] https://europa.eu/european-union/about-eu/countries_en

[2] https://www.purevpn.com/blog/data-retention-laws-by-countrie...

[3] https://www.privateinternetaccess.com
9 lies programmers tell themselves
the western world has no limit and some of the smartest people with intestinal fortitude. Rome had air conditioning and large centralized armies, just like to present day
This doesn't make sense to me. When I'm reading, it feels like comprehension of ideas is the limiting factor, not optical recognition.

A cursory internet search backs up this intuition:

https://persquaremile.com/2011/12/21/which-reads-faster-chin...

https://www.reddit.com/r/askscience/comments/2elbtp/do_avera...
Title should be: Nokia releases source for 8th, 9th and 10th editions of Unix.

Nokia bought Alcatel-Lucent over year ago. See for yourself: http://www.alcatel-lucent.com
Government is just one, and it represents 300 million people.

And what's the problem? Everyone wants to be a king. Government's job is to make sure no one is, with a social contract.
It's still insanity, unless you know what has changed or at least that something relevant is different this time.

That's not to say that insanity doesn't work sometimes.
It can get quite confusing on the terminology as the landscape has changed so much :O
If you use and love f.lux, consider donating!

https://justgetflux.com/promo/paypal.html?ab=8-planet5
JAPANESE ROBOTS: Should Japan Ban Robot Romance?
Are you saying that programs that extract hostnames like "sniproxy" cannot scale?

And you are saying that all hosts have set up reverse DNS and the data is complete and accurate?
Except all the shenanigans with IPSEC.

https://en.m.wikipedia.org/wiki/IPsec#Alleged_NSA_interferen...

As a "security people" I think me and tptacek could split a great number of hairs and get not too far on this one, but I am open to new info. I know a lot can hide in the complexity of OpenSSL. Maybe the whole thing with IPSEC was to sway us toward OpenVPN likes. Regardless, I still lean slightly towards OpenVPN

But honestly I am out to defeat ad networks. I only aspire to give nation states indigestion (at a mass scale). Individually if a well funded adversary wants any one of us I think they have us.
Aren't most of those requirements also filled by F#?
This is usually the case when there is potential for ambiguity, but there's also a matching function the non-parens version can be expanded to.
With zero experience in ember, as soon as I saw that I first needed to install the ember cli, I assumed it was something built on top of ember. Which doesn't sound lightweight or even interesting to a non-ember user, so was quickly followed by a snarky smile and a quick close of the page. After reading some HN comments I understood that it was like a collection of actual widgets (like bootstrap, but lighter?) and was interested. Then I read the docs, saw it is a library to build components, and I filed it under "not going to use ember so I may as well stay with React".
> I'll continue to say... as I please.

By that argument, we should all just be able to say and write whatever we want however we want to, even if it's technically or factually incorrect, like Humpty Dumpty or Donald Trump.

Why bother hewing to "elitist" rules of grammar and accepted spellings, being that it's just prescriptivism?

How does one decide objectively if something is just plain wrong, or merely prescriptive?

Case in point: "premises". So many people treat this singular noun as a plural and use horrors like "on-premise", which is so utterly wrong that it is painful for me to look at. What's worse is that "premise" is a real word and an entirely different thing and is most definitely not the singular of "premises".

This word came about (as many English words do) as a corruption of the Latin "praemissus", meaning something like "the aforementioned", and was used often in legal agreements for properties, and so became a word in itself that meant "the property".

Now we are corrupting it yet again, this time without the excuse of it being a different language, on the basis that "I'll say it however I please." People I have mentioned this to have told me that it is so difficult to get people to use the right word that they've just gone with "on-prem".

Now readers can take this comment as the rant of a "grammar nazi" or a pedant, but it wasn't meant that way, and I'll respond in advance with this: why is it not ok to identify something that is wrong? Because it's mere nitpicking?

Maybe so - but that's how matters devolve, over the decades, back to widespread ignorance and intolerance: one little oversight at a time.

Sorry, I didn't mean to get on the soapbox - sometimes it's just frustrating for those of us who are perhaps overly detail-oriented. But the world needs "pedantic" people like us more than it likes to admit.
Right, I think you have to change the dynamics. Voting ought to better capture citizens preferences, it like we vote with one hand tied behind our backs. Why can't we at least rank the candidates?
Those people will have VPNs and other security measures. This is about exploiting ordinary people to widen the power differential between the two.
I'm pretty sure I read, write, and type words as glyphs.

When I read the word 'word', I don't read 'w'-'o'-'r'-'d'.... 'word'!

Alternatively, when skiing in Japan, having only learned katakana on the plane-ride, it was less than a week before I reflexively processed 'スキー' as 'ski' instead of sounding out su-ki in my head.
Depending on how it's done it can be perfectly safe.

I've actually built a thing, in Lazarus of all things, to do this very thing. Unfortunately it's very specific to my use-case, but it is "safe" in the sense that it doesn't screw things up too badly. My particular use case is actually very spreadsheet-like, but I also want some things that are a lot easier to do in SQL than in Excel.

My use case is to have a tool to help me evaluate monthly financial statements for a smallish organization, enter my own adjustments, and come up with a final statement.

It's spreadsheet-like in the sense that I enter everything into a grid of rows and columns. The rows are accounts (in the income statement sense, not customer accounts), columns are a "type" (e.g., actuals, my adjustments, adjustments made by the auditor, adjusted actuals, budget, budget vs actuals, etc). Some accounts and some types are calculated, thus read-only in the table. There's also a drop-down at the top to select a period.

Basically, it's everything that a basic Excel Pivot Table does, but database-backed.

My Lazarus program lets me fill in that table however I want, when I hit save it persists it all to the database and runs a stored procedure to recalculate all of the calculated values. The database makes sure that I don't try to put a string in a numeric field, and it (PostgreSQL) is smart enough not to convert strings to zeroes.

The thing that makes this better than a spreadsheet is that I can just add a new account/scenario/whatever and run a stored procedure to insert the missing rows in the data table. When I did a similar thing with Excel, it was easy enough to insert rows. The hard part was inserting all of the rows everywhere they needed to go (I had a tab for budget, a tab for actuals, a tab for adjustments, etc) and updating all of the formulas.
I'm not sure you can ever adequately analyze the code in the amount of time needed to make a decision -- unless the code is less than say 20,000 lines.

Any company of reasonable size will have ugly code bases somewhere, someplace, hidden in the dark reaches that nobody wants to touch because it was written 5 years ago and no one who wrote it is around anymore.
I like this idea - but why do you let people edit the .wav part of the extension? That was super counterintuitive to me could I have done .mp3 for example?

I'll leave any other feedback I have here unless you have an email I can send it to - I've been looking for a good web version of Hum (the mobile app) and this looks like it could be it + more!