skysight-inc/HackerNews huggingface dataset:
> According to that Wikipedia page, The Equation Group refers to "a collection of tools used for hacking"

Are we reading the same Wikipedia page? Here's what mine says:

> The Equation Group, classified as an advanced persistent threat, is a highly sophisticated threat actor suspected of being tied to the United States National Security Agency (NSA). Kaspersky Labs describes them as one of the most sophisticated cyber attack groups in the world and "the most advanced ... we have seen", operating alongside but always from a position of superiority with the creators of Stuxnet and Flame. Most of their targets have been in Iran, Russia, Pakistan, Afghanistan, India, Syria, and Mali.

Kaspersky is preoccupied with this group, that by their own description, targets state actors that are hostile to the US. They've obsessively documented 500 of their alleged attacks worldwide, which would be negligible blip on the radar for any normal, purely commercial cyber-security company.

Doesn't it strike you as odd?

> Even if we assume these tools can only target governments and not businesses or individuals, perhaps Kaspersky wishes to obtain contracts with the governments targeted.

I'm going to take a wild guess that none of the targets of the Equation Group like Afghanistan or Syria will trust Kaspersky enough to hire them for a sensitive project. These countries are very busy with ground wars and have no attention or money to spend on cyber security.

The only government that may and probably does employ Kaspersky is the Russian one. Which of itself hints at heavy collusion between these two.
I have a business account for all side projects that involve money. When the prototype generates money, we move it out of the prototype bank account to a proper one.
First you base64 encode the file so you can print it. Then to enable multiple recipients you can fax it. But I prefer to put the paper file into a glass bottle and throw it in the ocean.
https://reep.io/ seems similar
> In a world where we measure horribly built webpage size in megabytes

Fixed that for you.
Facebook has CIA related people on its board.
I recently implemented one for Node.js (as a Bookshelf.js plugin): https://github.com/binded/bookshelf-cursor-pagination. It supports multiple ordering as well.
Discover Weekly works well enough for me - I do wish I could exclude devices from influencing that playlist as what I listen while gaming on PS4 is completely different from the rest of the day. It also seems to have a bias towards “big” commercial releases.

Spotify’s “intelligence” in general is a huge let down though. Radio stations are extremely limited - more like 15-song static playlists indefinitely on repeat! It annoys me to no end, same for daily mixes. I end up listening to the same songs over and over and over and over again. Maybe that’s what makes them the most money?

Last.fm was amazing at finding me new music I liked. Rdio was amazing at.. radio :D I used to go for months on the same station. I miss both a lot, and occasionally I still use last.fm or everynoise.com to generate better playlists for Spotify.
If you don't want to host your own map tile server?
Compare the Cloud Will Be at Cloud Expo Asia – Day 1
That defeats the purpose of https - the code/response that dictates the redirect can be intercepted and redirect the user to a malicious site.
With all that AI excitement Spotify, Google Play Music and Apple Music misserably fail at generating good musical recomendations. At least for me. Spotify Discover Weekly was no different for me when I still used Spotify (six months ago).
Not only it is not personalized at all it is also quite lame. I am doing enough to seed - following enough artists, genres, liking album, subscribing to playlists but the quality of recomendations is mediocre at least.

For example at the moment Apple Music is suggesting to me four Wednesday playlist - all heave metal the genre I never liked and listened to. Also two artist spotlights - Jeff Chang and Danny Chan. Yes I have Japanesese account but this is Cantopop and Taiwanese crooner - so a little off the map especially that I do not enjoy pop music at all especially Asian. Some other examples are what I call comin denominators. Yes I follow lots of jazz but Frank Sinatra is not jazz music, nor Tony Benett. etc...
Serve it with nginx, as a bonus you get logs to see who accessed it.
IBM Introduces Open Liberty, an Open Source Runtime for Java Microservices
Would be nice if there was a tiny web service that could set up peer to peer file transfer through webrtc by making an obscure path available at the push of a button. Not sure how secure that would be though.
But Mapbox couldn't exist without OSM... They are a mapping company (it's in the name), and where do they get their maps?
Discover Weekly is weird. For the longest time it kept recommending Finish music (roughly 30% of all recommendations), I'm from Sweden and barely ever listen from anything from Finland (or Sweden for that matter).

They have a ridiculous bias towards covers. I bet I've been recommended 50 (I wish that was an exaggeration) version of the Gladiator theme ('now we are free'). And they are all terribly bad (as in blood coming out of my ears bad). I am genuinely ashamed that someone thought that it would be a good idea to submit it to spotify - and if so how spotify could recommend it to anyone, there is no way spotify could have gotten any indication that anyone has ever liked any of those versions of that song. Similarly I get lots of game of throne covers, and now Despacito covers (never listened to that song in any variant on spotify, on purpose at least).
> Censorship

I, personally, think it's still debatable as to whether the DailyStormer issues qualify as censorship.

Matthew Prince, CEO of CloudFlare, brought this topic up when they dropped DailyStormer. There's no easy answer on how to deal with it. Is there strong demand for a vertical monopoly in content hosting which will host any kind of offensive content? Are legislators close to passing laws denying the right to host a website for distasteful speech?

I would argue that censorship is an active action and that what happened to the Daily Stormer is mostly a passive action.

Analogy: This is not like burning a book. It's more like every book publisher passing on publishing the book before it's printed. Would you risk your reputation as a book publisher just because "I don't want to censor the author" despite not liking the content, not knowing if there was any paying market for the book, and despite the negative press + potential boycotts of your company? If you won't, how can you expect anyone else to do different in similar circumstances?

The slippery slope argument is a valid concern, but is there a moral panic spreading concerning things that are equally distasteful? Last I checked, the Westboro Baptist Church is still on the internet with both a website and a Twitter account. And they were used by the FBI to train agents to withstand hateful speech while maintaining their composure.

Note: Granted, Google Domains not allowing them to transfer their domain seems very icky, but I can see how there is no good policy for that situation.
Why is a summary of what actual scientists are doing important enough to get published? I'm not quite sure what this paper is doing but maybe I don't get it as the scientists all seem very smart.
I started my main community pre-facebook and pre-myspace.

If I had to start over I would try to form a small offline community first, hear them out and develop it from there.

When you have a great content and your website solves a real problem for people - try to get exposure in magazines and other media related to that niche. People will come.
Improving Magento’s category-product relations indexation
rsync is by far not the most efficient solution out there nowadays, but it cannot be denied that it does work.

It can run over ssh ('rsync ... user@host:/path/to/file' will pass the 'user@host' bit to ssh and then use the resulting link) or rsync (which is unencrypted but a fair bit faster).

What I do to move (not copy) data around my LAN and know that the file has transferred okay is to

rsync -P -a -z file rsync://server/module/path

and then after this has completed

rsync -P -a -z file rsync://server/module/path -c --remove-source-files

The first just dumbly copies the data; the second uses checksum diffing to copy the failed bits.

If you have a pathologically bad network, you could use 'rsync ..... -c' and only when rsync says there were no differences use --remove-source-files. (You can get transfer statistics with the following extra commandline parameters.)

I also add

-v --info=all --debug=all

onto the end of my commands, because I like the extra info this spits out. Protip, DO NOT use -vv (ie verbosity level 2) with info/debug=all, it will tell you about every single hash block match :D

For large files the comparison will take some time because rsync uses a fairly dumb design and a very slow checksum algorithm (there are faster alternatives with better (lower) collision rates out there). But rsync is like perl, it will almost always exist where you need it.

I don't consider rsync a particularly modern tool, and it's given me a lot of ideas on how to write a better implementation at some point. But it's a ton easier than sha1summing hundred-gigabyte tar files, which is what I used to do... >.<
My vote goes for Syncthing too, simple single binary install and works with no configuration. I've installed it on my desktop, vps, laptop, and phone use it instead of Dropbox now.

I've even got two non techy friends to install it (albeit talking them through it) and it still works to this day.
They are not funded by the FSB. Not even Washington thinks that. They're a very successful multinational antivirus company, and they make one of the least bad products in that space.
> Apple had to fight really hard to get the iPhone carried, and to do that they had to lock it down to comply with what I am sure were a long laundry list of carrier demands.

Wat? It was easy to install third-party jars on my Nokia S60 devices, both before and after the iPhone, no carrier approval required.
DL (http://www.thregr.org/~wavexx/software/dl/) allows users to upload files and send links out, or users to generate links ("tickets") that others can use to upload files.
Ok, four questions:

1. Is hacking into a foreign AV company by a state an OK thing to do?

2. How do we know the anonymous source is being truthful?

3. If yes to the first two, are we certain that it wasn't exploited but was coerced?

4. If all of these things are true and they were coerced, what is the practical difference for the party being monitored?
A curious side effect of Discover Weekly is that it sometimes influences what I listen to, i.e. I'm afraid to listen to a song in a particular genre because I don't want Disover Weekly to get the wrong idea. But then again, maybe Discover Weekly knows me better than I do.
Dashboards Grafana and Kibana enable a lot of clients to self host and create the exact dashboards they need, per customer, per employee etc. Storing stats and data in elasticsearch, influxdb etc etc.
Does anyone know a personnal relationship manager app?
More Affordable Whois Privacy Prices
If you don't mind a fairly slow connection, there's PLIP or SLIP. The latter is point-to-point only, though at 9600 baud it is indeed slow. If you're relying only on text-based transfers, these may be acceptable.

(I've run systems, at least for a time, relying on both.)

Otherwise, airgapping and read-only media might be an option, for transfers you need / want to perform.
PHP-FPM: faster with 'pm static'
Thanks, that is one of my main gripes with most recommendation engines, and since you like metal, the examples really resonated with me. For me, it was Wardruna - an ambienty, folky acoustic group. Listeners often also like the "typical" viking metal bands, but damn, if I want something like Wardruna, I do not want death metal singing about the same topics, I want, say, Forndom. The same often happened in electronic music as well: if I listened to 5 relatively unknown psytrance songs I liked because they have a nice balance of melodies layered with very distinct synth sounds, then no, I don't want to liten to David Guetta next, because that is also trance-like.

In other words: yes, last.fm's recommendation was much too much based on "customers also liked", which helps in a lot of cases, but so often it horribly fails ("Customers who bought The Martian on Blu-Ray also bought this asthma medication because chance happens. Wanna try it out?").
I’m from Sweden too and I always get at least 2 german/danish songs in my discover weekly and I hate it.
Dash for Mac has offline stackoverflow collections for some topics.
Can't you ask to expand the permission once that becomes relevant? I imagine that people who just want to try bubble don't want to give you all their private code.
Ours is a commercial service, but we built https://www.bigfilebox.com to solve this problem 10 years ago and we're still going strong. Our main market is architects and engineers who needs to send files like this every day, to specific groups of people, and be sure only those people can see the files sent.
Where I live is not a conflict zone, yet there are people who are starving. The monetary system is not coping with rationing the resources to all in a just manner. People don't have jobs. They don't have the capital to put their ideas to action. Those who have done so, still discover that they need money to market their products and services.
Bikes you can put in the pool.
Turo is a short term car rental marketplace. Fair is a flexible "long-term" car leasing service. They have two different business models and are serving two different problems.
> On this subject, I'd also seriously recommend that people take advantage of the holes on the bottom, or rear, of your safe. Those are so you can secure the safe to the building.

In UK you are required to attach the safe to your building. Using those holes is not optional!
In order to really say something about sustainability not only the amount of renewable energy should be taken into account, but also how effective the energy is used (how much of the energy goes to IT processes, instead of cooling or other processes) and the way in which the energy is reused (in the form of heat).

Like described in article: https://eehpcwg.llnl.gov/documents/infra/06_energyreuseeffic...

And applied by cloud providers like Nerdalize who use their servers to heat homes: https://www.nerdalize.com/
I think they're both right. You don't learn cryptography by coding, but at the same time you don't attack cryptographic implementations with mathematics. The design of the algorithms is a science, the construction of the programs which use them is engineering. And the even more modern crypto algorithms have started to take into account the engineering side through side-channel resistance and the like.
Airbnb Clone – Airbnb Clone Script – Vacation Rental Script – Airbnb Script
StaysBnB is an Airbnb Clone Script that helps you to build a powerful vacation rental platform like Airbnb. - https://goo.gl/7Kmzjc
And finally the blog post! I also built a python app https://github.com/psmiraglia/python-dpg
> What do you call it when the blogosphere pressures you to reject all these time-honored, perfectly good techniques, because of some edge case in a niche field that you will never have to deal with?

At first the term "over-engineering" came to my mind, but that term doesn't quite catch it.

Possibly related discussion (about applying blockchains where it makes no sense): https://news.ycombinator.com/item?id=15401447
Actual title : "Wal-Mart Plans Further Cost Cuts as Competition With Amazon Intensifies"

Far more ominous to me than the recept trick was this: "Over the past two years, Wal-Mart has already cut costs by eliminating thousands of corporate and store jobs, increasing the fees charged to its suppliers to deliver goods to stores and demanding lower prices on goods."
https://ge.tt is an underrated service IMO. Very simple and to the point. A core feature is that your recipient can start downloading as you upload it. I never understood their business model though, it appears they don't have one.
If they're here in London I generally try to meet them in person with a USB device, which is usually the most pleasant option.

Otherwise I usually ssh or rsync the files to my webserver. Sometimes this seems horrifically slow though, for reasons I've never worked out. Maybe some kind of throttling somewhere.
I guess Kaspersky is rumoured to be to the Russian government what Apple / Google / Microsoft / Facebook are proven to be to the US government.

Secret FISA courts rule away all of your basic privacy rights? Fear not. Russia is the enemy.
Google Search Appliances, too.
Sometimes I wish Spotify added a bit more 'noise' to their recommendations, so to speak. If I don't listen to much music except Discover Weekly for a few weeks, I (subjectively) find that what's recommended to me more or less sounds the same after a while. Either they are afraid to insert new things that stray too far from an optimal recommendation or they forget too much of my listening history.
https://mega.nz

End-to-end encrypted and does private and public sharing.

50 GiB free per account
> if ripgrep were a 100% drop-in replacement for something like GNU grep, then there would be basically no point for it to exist in the first place.

That seems to miss a huge lesson: backward compatibility eases transition, new features retain users.

Therefore, your assertion makes only sense if there would be no point in attracting existing users to use a tool whose added value is entirely irrelevant.
Wetransfer is a cancer. In my organisation I keep being called because the links are expired and people haven't downloaded the files. They also use it for sensitive information (links are sent through clear text mail).

We have NAS for local file transfer but the convenience of Wetransfer trumps that.
The alternative presented is a laptop with 2008 hardware. Sure, I can do that. But that's not sending a message to the industry. That's just living in a bubble, while still giving Lenovo some money. Don't get me wrong, I love minifree and what they're doing, I just don't believe it to be a viable alternative. There are lots of people who can't or won't use outdated hardware. Purism is a sane solution to this problem.

Also, Purism is taking steps to get coreboot to run on their laptops[1][2], so the graph on this website isn't even right anymore.

And I just found out that, interestingly, the T400 and X200 both come with IME. The only difference is that the AMT can be fully disabled on older intel chipsets[0].

[0]: https://libreboot.org/docs/hardware/gm45_remove_me.html

[1]: https://puri.sm/posts/coreboot-on-the-librem-13-v2-part-1/

[2]: https://puri.sm/posts/coreboot-on-the-skylake-librems-part-2...
Pretty much all AV products do this, for "suspicious" files too. Doesn't even need a signature to get collected. This includes non-executables such as docs or pdfs, since those are common 0day vectors.
So the dreaded filter bubble also is an issue for Spotify ;)
> 3. 24 - 48 hours worth of supplies. Water is essential, also consider food bars, batteries, and of course any medication.

The region that's on fire is like an hour's drive away from Berkeley. Unless you anticipate camping on the freeway, I don't see how 48 hours of water is really an essential. The supply chain isn't in much danger except in the very local area you would be evacuating.
Testing HTTP requests in Angular has never been easier
Magic Wormhole. It allows two users to send each other a file, and they find each other via a short, English language passphrase (think “horse battery staple”).

It’s a command line python utility so might not be the best solution for completely non-technical people, but I love it.

https://github.com/warner/magic-wormhole
https://techcrunch.com/2017/06/27/magic-wormhole-is-a-clever...
Ask HN: Developers, how to best start a new job and be seamlessly effective?
What questions do you ask of the engineering team or product team? How do you know what to focus on in learning? Do you play around with the code? What do you try to understand in the architecture? Any tips on what you do when you first start will be helpful. Smooth starters - how do you do it?
Show HN: Supreme – a very productive todo app for Mac
Right, and you honestly don't really need to be a pastry chef to make decent pita bread (I'm a layman and i can make them just fine).

Which makes it all the more puzzling! It's not like it requires any exotic ingredients either...
Except when something unexpected happens, in which case you'd love having had a human. The best is combined teams of man and machines. This also has its own problems, but nothing is ever perfect.
Mail Drop works well up to 5 GB: https://support.apple.com/kb/ph2629?locale=en_US. You need to be on a Mac though.
I would add that if a distro aims for Unix compliance, it's obvious that there is no alternative to include certain utils.
The Brilliant Victory of Alexander the Great in Gaugamela How He Smashed Darius
There's this: https://github.com/stackp/Droopy
None of those things ("social security net, health care system, education, low corruption etc.") are necessary conditions for the USA though, and if Americans were willing to consider rational arguments for prison reform then they might also be willing to consider rational arguments for reforms in those other areas. It's not obvious to me that those things represent vast social differences, per-se, but that is obviously a matter of interpretation - I was really interested in hearing HalfwayToDice's view on what that phrase meant.

To respond (with a question) to your point, do you think that any of those areas can be successfully reformed individually, eventually making it possible for the USA to reform its prison system, or do you think they are all so interdependent that none can be changed without changing the other?
My experience was that Spotify radio is utterly bad, Discover Weekly quite okay, but the weekly Apple Music playlist really nails it. I found a lot so far that I didn't know before and added to my library.
This is what I do.

I have a local VM at home running a web server that can hold such files, but in AU decent uplink speeds are mostly a fantasy, so in the case OP described of needing to send to multiple people I'd upload it first to a VPS I keep that serves a similar purpose. This way I only flood my uplink once.

Obfuscated path for some very basic privacy, though of course you can encrypt and email password if that works better.

If it's going to happen semi-regularly, and the files are large and there are multiple recipients, then I'd look at BitTorrent. Most people have a client installed, or can install one fairly painlessly. Biggest challenge there would be that 6881 (etc) are often blocked, or at least monitored, on corporate firewalls.
pets in general are a problem, there might be close to 1 billion pets maybe worldwide. They are not fundamentally useful, consume energy, food, perturb ecosystem
Digital currencies set to face stricter regulation worldwide