skysight-inc/HackerNews huggingface dataset:
Why are they connected to any network at all? Why aren't they just used to tally votes?
What do you think should be done and by who ? If anyone should do something to resolve the crisis ?

(This is not a trick question I am genuinely interested by your response)
But is there really anything to report really? What's new that isn't doable with low level automation, I've been able to drive a browser with python for a while.

> Human-like denial-of-service. Imitating human-like behavior (e.g. through human-speed click patterns and website navigation)

It's already easy to simulate activity, clicking a random link on a page would be basically as good. Are there even DoS

> Prioritising targets for cyber attacks using machine learning. Large datasets are used to identify victims more efficiently, e.g. by estimating personal wealth and willingness to pay based on online behavior.

So, like, sum and sort all the spending data?

But then again, maybe policy makers already didn't know what was possible?

[edit] - formatting
I think the core problem is that you lose that available space even if you paid out through the month/year. I have a suspicion this is an intentional dark pattern to keep people from downgrading and not some weird engineering constraint. So it’s a bad and maybe unethical user experience.

Why couldn’t it be: “Thank you for using Dropbox, you have access to your 1t (or whatever) until X date, after that your files will stop syncing unless you do Y. Come back any time!”
Important question, does it run edit: gorilla.bas?

QBasic was a good upgrade from BASIC from 8-bit machines. Still, it is limited. VB then brough its power to Windows, it might have had a lot of quirks, but it was a good prototyping and RAD tool
From where do we get the possibility of losing our bee livestock population? Colony collapse at its height was a double digit percentage increase in overwintering losses. Beekeepers react by splitting hives and buying new queens.
That little piece is more or less given away in the manual, and the (excellent) game is about solving puzzles and not the plot anyway.
Password rotation is a major issue.

If we'd use something like certificate auth it'd be less of an issue, but currently password managers are a horrible trend because they encourage using your password for a service for kany years. Ideally you'd rotate them every 60 days. Automating that is hell.

It'd be much nicer if we could just use OIDC with user-configurable endpoint.
I never thought about shifting perspective on the semicolon from imperative to function. I'll have to revisit the idea after I learn functional programming. For now, maybe what you describe could be possible with tools that do C++ metaprogramming in Haskell or Racket like below. I liked what I was reading despite not even using those languages. ;)

http://aszt.inf.elte.hu/~gsd/s/cikkek/abel/haskelltmp.pdf

http://matt.might.net/papers/ballantyne2014metameta.pdf
Viewpoint Diversity in Tech: Reality or Myth?
Even in the crudest measure, lifetime earnings, going to college still looks pretty good. Getting a tech job in the first place is much easier if you have a degree. This is not to deny that some have managed without it and have done very well, but they walked a harder road to get there.
I’m not sure about family friendliness but I’ve basically moved to letting 1password and the iOS password manager coexist. iOS manager is basically fulfilling the role of cache + autofill from keyboard.
I was thinking about the charity and donation sector as well for my use-case. So it's good to see that other people are working on it, are there any links that you can send about the use that you've seen?
In the end the US has no clear space strategy and no goals. Every incoming president declares a new program for PR purposes, doesn't fund it and forgets about it then. I think best would be to fund NASA with a fixed amount and let the scientists battle it out what to do. It makes me sad that Congress forces NASA into silly projects like the SLS.
> ...the chances of someone breaking into her physical house for it are pretty slim

I find this to be quite an under-represented opinion whenever I encounter password security discussions. How many people's threat models need consider physical security of their house? Surely most people's number one - if not only - threat is using a compromised service, so a password manager is just another vector; albeit one whose raison d'etre is security.
I think they said in the post that it was a prototype and would be built into the app later, no?
It's a choice everyone has to make for themselves.

I have absolutely nothing on Facebook that isn't related to either bands or musical venues.
Environment and social setting is known to be important for addiction (along with basically everything else in perception and behavior, e.g. compensatory responses [1]), I think it's just a matter of how long it takes for scientific nuance to go mainstream.

The simplified picture is still often the chemical picture, imo, for 2 reasons: 1) the public forgets that the brain is an organ that obeys physical laws, and that behavior and perception depend entirely on the brain. 2) Ok, yes, environment is important, but how is that represented in the brain? It's still physiological, which inevitably includes chemicals.

[1] http://nobaproject.com/modules/conditioning-and-learning
I think the pay is more equal in Europe. I have finished multiple studies and work as a software developer, but I only make about 15% more than a friend who did not finish an academic study and works in logistics. If you're a bartender, Europe is a better place to be ;)
Combined with Ansible Galaxy, I think you get pretty close.
I did. I found the book of linked lists at the bottom of the post. After reading and appreciating the complexity I didn't want to deal with, I just wrote it in Go
Qucik Computer Support LLC
Why you should be time blocking and not just writing to-do lists
What I've done before is use branch-buildID (develop-009) for tags, and then add detailed information like the git commit sha, git version tags, as labels. All of these labels were passed in as build args to Docker from the CI/CD system. One other important thing to consider is if you have docker tags that can be overwritten, which is the default in most repos, in the docker file it is useful to specify FROM sha256 checksum instead of labels for reproducible builds.
You could use it in code that's operating in the list monad, you just wouldn't be able to stitch the computation in using the monad interface. But you could run it and get a Maybe back, and look at the Maybe, and turn it into something you can stitch in. `maybe (fail "got back a Nothing") pure` is probably the most generic way, but it may or may not be what you want.
This stuff isn't anything new or unproven, conceptually. Kernel-level namespacing has existed as a tool for decades (BSD jails, Solaris Zones, etc.) before Linux got it and Docker adopted it for use in Docker containers. It's hard to take seriously criticism when it comes from someone who doesn't even bother to read up on it enough to understand the terminology before commenting on HN.
That's only if your password is weak. If no one's ever seen it before (generated by password manager) it wouldn't really help much.
I would phrase it more as "a human has the right to access any resources necessary to continue existing".

That includes having a place to be, and the means to acquire food, water, and medical treatment. At minimum, this would be in the form of subsistence farming, including medicinal crops. One person has the exclusive right to enough land surface area to meet all their own needs, the exact number depending on the local environmental factors.

When it is more advantageous to society at large to exclude would-be subsistence farmers from access to vital resources, it creates a duty for them to replace the products that the person would otherwise create from them. With economic specialization, this should be trivial. A thousand subsistence farms may be replaced by one industrial farm that can feed tens of thousands. It stands to reason that the industrial farmer should feed those prevented by law from farming for themselves, because if that person does not, the thousand will burn the law and take the land by force to feed themselves, and people elsewhere may starve. In the interest of preserving the benefit of economic specialization, which allows billions more of us to exist than the planet would otherwise support, those who benefit from owning property should share enough of that benefit with those who do not that they are not forced to rebel against property itself in order to survive.

The more specialized society becomes, the more critical it is that transfer of "unearned" benefits take place. Those benefits are the price that the winners must pay to the losers, for continuing to play by the rules of the game instead of cheating at it, or flipping over the game table and stomping on all the pieces.
Shit, 85K as a college grad TODAY still puts you solidly into the upper ranges of your demographic.

If you think that's "just cover rent and expenses" money, how do you think the people you buy coffee, food, or anything else from live??

The author also doesn't seem to discuss what he did the 8 following years, which seems baffling.

> I didn’t know which traits I ultimately wanted in my career, but I appreciated that MIT would offer me more options for the career capital I generated.

So which traits did you build?! Tell me up front why I should listen to you if I wanted to build a career (it's not cause you had two nice offers coming out of college - that's why I'd listen to you if I was a high school senior).
Versioned Go Commands
One French woman in eight has been raped, study says
General Mills to buy pet food maker Blue Buffalo for $8B
That seems like a pretty weak argument. Join a large church and you can probably meet people in every city too, and you won't need to take out huge loans to do it.
It must surely include rinsing under a fast-flowing tap (something I rarely bother with personally), and/or maybe doing the washing under a running tap too. I don't see how you could get to 120L otherwise.

120L = 7 very full sinkfuls of my fairly standard size kitchen sink. 7! For 12 people's-worth of stuff!
When I met the friend who taught me about heroin, I figured she was "high as a kite" because she chattered from topic to topic like a butterfly. She called back a few days later, and started to invite me into her world. I didn't know anything about the street pharmacy, except that cannabis had been helpful for another friend to get her alcohol use under control.

She said she'd relapsed on cocaine because of severe depression, then shortly later on heroin -- supposedly to treat her high blood pressure (from smoking cocaine). I think really she was just lonely. A chapter in Gabor Maté's book is titled Through a Needle, a Soft, Warm Hug [0].

She was going to the methadone clinic daily when we met. If she couldn't get to the clinic by the 11am closing, she'd have to order heroin from her street pharmacist. It was almost as if the clinic had contempt for its clients -- their business was to be their clients' legal dealer.

Four months after she'd begun to teach me about her world, I decided she didn't actually like it that much, and began to express disapproval at her self-medication strategies. She tried sticking with her old drug world, but she liked me more than the drugs. At about six months we had a nice time frying donuts (coconut oil is a treatment for compulsive alcohol use, and makes for tasty donuts). Two days later she called to say that she "wished [she] wasn't a drug addict". The next day, "I SHOULD ONLY USE SUBSTANCES WHICH ARE LEGAL! Alcohol is legal, [tcj_phx]..." (me: doh! progress, I'll take it), the following day, "I hate methadone, I hate everything about it..." Essentially what I did was a months-long pace... then lead (hypnotic technique).

The most important interventions to end the present "opioid epidemic" (artificial) is to provide a legal supply of clean heroin, safe injection sites, and protecting addicts from the criminal justice system.

[0] https://news.ycombinator.com/item?id=16023802

(Yesterday's post about adoption-trauma is relevant too: https://news.ycombinator.com/item?id=16443667 )
Many wild bees are also specialists, and they will just raise a single generation each year during the appropriate flowering season. They hatch, go wild on their target species, and then lay a batch of eggs for next year. Many wild bee species are correspondingly more efficient than the generalist honey bees; a handful of orchard bees can pollinate an apple orchard faster than a hive of honeybees.

Some of these species are pressed more by climate change; at the talk I heard on the subject, these bees have a narrow latitude band they survive in, and as temperatures increase they tend to push up against their northern limit than shift north.
The Origin of camelCaseIndentifiers
OpenCat – Arduino Project Hub
I'm the maintainer of the oVirt plugin.

The real advantage of it is that it allows installation of hosted engine easily, and a 'single pane' overview of a host (oVirt Node status without using nodectl, etc)

Since Cockpit wants to deal with dbus, the push is for other utilities (postfix, snmpd, etc) to publish relevant information over dbus, rather than teaching Cockpit the format of each and every configuration file on the system.

I wrote the Tuned plugin for Cockpit, and I maintain the oVirt plugin. I gave a talk at Devconf about plugin development, which is extremely easy, but the Cockpit team is small. It's very easy to write plugins for it, but even easier if they expose dbus.

That said, the cockpit API (http://cockpit-project.org/guide/latest/api-base1) makes handling files/processes from client-side Javascript in plugins simple. It's just that you'd need yet another config file parser...
Superawesome's new design process
Every team I've been on has had it's majority of engineers doing exactly that. Honestly, many are happy in that role.

Usually theres a handful of people that tend wiggle their way into more backend, architectural things (libraries, in-house tools, etc.). If you're bored, try to be that person.
FWIW I agree that your version is more readable, and since I'd like my writing to not suck someday, I appreciate the edit.

Suggesting edits to others' comments on HN is tricky though because it will usually at best be off-topic for the conversation, and at worst lead to several off-topic comments, as in this case. For that reason they tend to get downvoted.
Parse it and publish it
Yeah as someone who works in the security industry, the ubiquity of security awareness targeted at end users is both a blessing and a curse. It's a blessing because now many more people know what key-based authentication is. It's a curse because now people get mad when my report has a finding that their no-passcode single key authentication system is worse than the "use your RSA token to check out the constantly-revolving root password" system they just replaced.

Like when people use the phrase "two-factor authentication" without knowing what the three factors actually are and why they matter.
It was a very troll-like comment. To be less troll-y, there has been a long standing criticism in the science community about the cost:benefit side of this. I love the ISS. seeing it pass has been a highspot for me in an otherwise boring week, more than once. I went to every IMAX show I could about it. Thats some amazing stuff up there.

I discount the 'research aimed to further space exploration by mankind' side, as being self-serving. (but I totally agree NASA should pay for that, so I guess I killed my own argument right there) it is true research and its good science, and we need to know it, but I've always felt its a bit of a stretch to justify the overall budget on this line. So I wind up asking myself what we got from micro and zero gravity we couldn't have got other ways. The russians got high quality crystals for their soviet chip farming back in the day on their one. I think by the time ISS came along, that was less of an issue for them.

A totally unscientific google search shows theres a small amount of rumbling discontent under the covers. Even within NASA. It might reflect the long standing 'sats are cheaper than humans' view about what to put in space, and why.
You could generate a stand-alone exe, which contained a copy of a VM, or an exe which required BRUN45.EXE to be present, which was the VM. The advantage of the latter option is that you save a lot of disk space (iirc like 40 kB) for multiple programs, since you only need to have a single copy of BRUN45.
...and my pet peeve (which Signal explicitly denies on iOS and has some convoluted method on Android) — allowing the user to backup data from the app and restoring it on a new or different device! Don't treat chats as disposable.
This supports my long held belief that one of the best thing we could do for improving vote administration is convincing the public to be patient with results.

There's no particular reason everyone needs to know the results of a competitive state-wide race the same night the polls close, yet we are making all kinds of security and other tradeoffs to support this as a goal.
Ban the sale and manufacturing of ALL guns in America
I have yet to see any changes in my urban village - the upzone feels like it’ll just bring more luxury apartments and do nothing for housing stock. Gosh if I could afford one of these $1,000,000 townhomes though.
'atomic' is a wrapper. Just look at the dockerfile.

Given how much cockpit wants to, y'know, manage the real system, running it in docker is senseless, and there's no reason to have it in the install guide. If you want it to actually manage your host, use the dockerfile.
The Trump administration has just made the H-1B visa process even harder
It works in the US where the govt doesn’t even understand the meaning of the word “privacy” so, yes it seems to work. It works elsewhere too, but understandably it might require money or effort to get going.
Even with long random passwords, sites get compromised who have poor security regularly. Wouldn’t you want to know even if the site didn’t notify you?
Think of it as an opening bargaining position...the Art of the Deal if you will. Cuz right now we'll be lucky if even the most minuscule reform passes.
What about the societal good of having educated, informed citizens? People attending college are not just "discovering themselves."

The unfairness in the US system comes largely from the fact that, depending on what kind of family you come from, college may be very easy for you to attend or very difficult.
Exponential Backoff in Service Startup
Again, Cockpit does not explicitly deal with systemd.

Cockpit deals with dbus, and systemd is conveniently available there (hostnamectl, etc). storaged, networkmanager, and other functionality is not dependent on systemd, so it's really just the system journal, changing the hostname, and checking service status which would fail without systemd.

Docker is not required at all either, though it's an option.
Yes, but also don't need maths to know that competition can be controlled with 20 ways (and usually is, e.g. US ISPs), or that you can have tariffs AND internal competition.

Or even that you can have a fine quality product at a good price even without competition at all -- e.g. produced by a single vendor, as long as the vendor is so inclined.
There’s no guarantee those accounts hold any value, though. A throwaway account is the perfect chance for such a password — you won’t forget it and won’t care if you lose it.
Loved the way the article was written. I read a lot of long-form articles and have a few favorite writers. Is anyone aware of a service that will track individual writers and give an alert when they post something new? Sort of like an RSS feed for an individual writer, regardless of where their new article is posted.
At what cost? $100k in debt and delayed start at life? Again if all things are equal. Uni is free, sure why not.

This argument is invalid too. We can say most that go to college are better off thus the net positive results.
Not dictating anything, but if the reasons for not releasing it are "it's not feature-complete" and "I don't have time to make it feature-complete" wouldn't releasing it as free software and let others extend it be the solution?

Edit: excuses didn't ring well. Reasons is more neutral
Visual Studio isn't the only option.

https://blog.oz-code.com/debugging-linq-available-tool-compa...

https://www.oz-code.com/
I wish I had a good word to describe my gratitude for this post! I've though reverse dictionary could work but doesn't. Another dictionary I would love to have access to is one where you can find words in other languages that don't exist in yours.
Sure, but I probably would have been a different one with very different ideas.
UX personas vs. marketing personas: what’s the difference?
Worlds Most Amazing Videos_Must See This
> Key-based auth doesn't have this flaw so it's arguably safer in that it has one less entry point.

This is exactly what people think when reading the guides. In fact, it's not that there is one less entry point, but this entry point was moved and now exists on another machine together with the key. And since many people use one workstation to log in to several servers, you now have one single point of failure (an equivalent of using one password for all servers).
This is very poor reporting. The paper has nothing to do with identifying who is in a low-res image. It's about scaling up low-res images by totally making up the missing parts based on a statistical model.

I guarantee the authors of this paper would be horrified by this article and how their work was mis-represented. The first paragraph of the research paper literally says "We demonstrate that this model produces a diversity of plausible
high resolution images"

The part at the end of the story about this being applied to CCTV images is especially misguided.

But the bigger lesson here to all researchers is that they need to be aware that this is likely to happen with their work! They need to make sure they are communicating their work as clearly as possible to reduce the risk of this happening (maybe by posting a lay person-readable blog post to go with the paper that clearly says what it does and doesn't do).
Ask HN: CLA/DCO contribution as an employee?
I have a general question regarding contributing modifications to open source projects. Both CLA and DCO require me to acknowledge that I am allowed to contribute.

The question is, as an individual that works in a big monolith company with a contract that states that I am not allowed to work otherwise without permission.

Should I be asking my employer on each patch if it's OK ? When should I be going for a CCLA instead of CLA ? Is there any clear cut case where I dont have to ask for permission ?

Is there a distinction between cases such as working on contributing after work hours on non work related projects, working after hours on projects that are related to my day job (but that I didn't do this specific work in work hours) ?

If you work in a big company, are there company-wide stipulations regarding contributing to open source projects ?
Because voters "need" to know results as soon as possible.

(they actually don't need to know, but they think they do)
Wow really ? Sounds reasonable.

(Should also take into account people transportation to the location, and the opportunity cost of their time)
Polling stations aren't where the count happens, the ballot boxes are pooled at one site per constituency and counted there.

This is particularly noticeable at the spread-out constituencies like Na h-Eileanan an Iar, where the count has to wait for ballot boxes to arrive by boat or, if the budget is available, helicopter.
"Huge sums of money" isn't well defined so I can't comment on that. But the idea that $85K is only enough to cover rent and other expenses is wrong.