skysight-inc/HackerNews huggingface dataset:
If the EoL is far enough after the release of V2 then I think it is preferable that people start getting security warnings for sites that stop working: it is an indication that they are no longer maintained so potentially not receiving security updates for other matters.

Obviously a decent length of grace period would be the correct way of deprecating the older version, to give people time to update their infrastructure accordingly. I would suggest at least a full year (giving at least four renewal cycles to test changes in a QA environment before being forced to update production), probably more. Perhaps, if possible, a year for new certificates and two years for renewals?
Can’t watch the video on an iPhone, “The requested video is not allowed to be played in embedded players.”

Also, going directly to lonelypage.io doesn’t work.
If you hire 50 random people (uniform distribution) the probability to get twice (or more than twice) as many employees of one sex as the other sex is about 3.5%. If you add ethnicity, age, sexual orientation etc. to the mix you will rarely get a random sample with all attributes proportional to their occurrence in population. Without quotas it will be really hard to be accessible to all regardless of [a long and ever expanding list of attributes].
I'm using "prized" here as a synonym of "favored"; perhaps it's a bit archaic. I don't intend to alter or misconstrue the meaning of the survey result.

Certainly, a front-end developer has a choice of compile-to-JS languages from which they can choose.
Meets Altered Carbon. But if you wake up in virtual reality, when you enter your key, how can you keep them from taking it from you? You'll never know if you are being man-in-the-middled.
How does someone find so much extra time to do this all? Must take a lot of energy and razor-sharp focus.
From contracting with the Air Force, I can tell you that they have a love affair with spending money. Most of the projects I seen revolved around making sure everyone spent as much as possible, so that they could get more.
The encryption part is easy -- you don't need CAs for that -- but they're a necessary evil when it comes to verifying ownership. You need to delegate trust to someone, otherwise using the internet becomes too cumbersome.
Firefox has a screenshot feature that I'd like to trigger from Selenium, which is by going through the "..." icon in the URL bar which opens up a menu with its last item being "Take a screenshot" (and then you can select a full page screenshot).

Is there a way to programmatically trigger this feature or sequence?
> The moxious will call their credit card company right at the returns desk and ask if they need a photograph of the posted return policy.

Thank you! That's an excellent suggestion!
I don't have an issue with flagging dumb stories.

I have an issue with flagging active and important stories, hiding upvoted comments, silently de-ranking stories without any notification, etc.

Straw-man all you like, there's no justification for this.
I've done it once or twice when I reported a vulnerability directly to a company and I knew they'd have to report it to downstream customers pretty quickly. I've also been in discussions for larger vulnerabilities with security-focused hedge funds such as Muddy Waters. Generally I'm weakly skeptical about profiting from it consistently. In particular, funds like Muddy Waters have a pretty high bar for the sort of vulnerability they're willing to work with. You need not only a severe vulnerability, but the right kind of vulnerability, so you know that it can't be swept under the rug.

That said, it's pretty striking to me how aggressive this disclosure is. It may be an attempt to narrow the window and increase the profitability of a short sell.
If you ask them to describe the world with their own vocabularies, then yes, those things are "the internet". But if you take away the rest of the internet, these users will absolutely notice, even if they might struggle to correctly articulate what happened.
Absolutely. Although current science can not cover it yet, enough empirical proof exists now.
In what case should this be preferred over plain old Service Workers running on the user's browser? Latter is even lower latency and for free.
Underneath it all, this is a manifestation of an important split in the cryonics community.

One group is (I think overly) critical of present vitrification approaches and the planned future of those approaches. They believe that these approaches are broken, and nothing of value is preserved. I think this is just as ridiculous as saying there is no room for improvement - it is clearly the case that, e.g. nematodes vitrified using the present technologies can be restored and show preserved memory.

That group has a strong overlap with pattern identity theorists, who are quite comfortable with a copy of them living in the future, and throwing away the original brain.

So the intersection of these two groups is motivated to work on technologies such as aldehyde-stablized cryopreservation (vitrifixation) that are incompatible with the future goal of thawing, restoration, and repair, as they are not reversible short of far distant molecular nanotechnology. Their aim is to produce the best possible record of data of the mind with the intent of reading into a machine environment in the future, then discarding it.

To my eyes this is a terrible, terrible, mistaken view on identity, and one that will cause a great deal of existential harm when it is extended from theory to action.

The rest of the cryonics community is interested in a technology path that leads to reversible vitrification in the near future, and some kind of union with the tissue engineering / organ engineering community. They want the flesh restored and repaired, and the end goal of cryopreservation is some form of advanced cell/bio/nanotechnology that can achieve that end.

This is why Alcor, etc, is not adopting vitrifixation.

So on the one hand, great to see progress, and vitrifixation is an excellent advance in tissue preservation in the general sense. It will be of use in many areas of research. On the other hand, pattern identity theory seems to have many of the aspects of religion. A copy of you is clearly not you, and no amount of handwaving is going to make that the case.
I do that mostly because the stores I go to for whatever reason either don't have their changing rooms open or don't have them at all. Besides, it's much easier to try something on at home the way I'd normally wear it than quickly putting it on in a store.

It's also not like returned clothes are of no value. I've seen plenty of stores put returns right back on the racks as if they're new.
Video shows Navy pilot’s close encounter with an unidentified fast-flying object
To add to the other comments here, a recent high profile case of something similar was Bill Ackman shorting Herbalife. Basically, he shorted the stock and then went to the media with his research showing that he believed Herbalife to be a pyramid scheme. Ultimately, I believe he lost money on the whole fiasco, but it's not an uncommon strategy. The whole thing made the news after a particularly amusing exchange between Bill Ackman and Carl Icahn (who had the opposing view) on CNBC: https://www.youtube.com/watch?v=hCZRk1lL90Q. I worked on Wall Street at the time and I remember the entire trading floor at my bank was almost frozen as they were watching this live.
Ask HN: Compare open source serverless solutions
I would like to use an open source serverless solution for building my private serverless infrastructure which is to be built on top of k8s. I have been studying openfaas, kubeless, open whisk and fission. Could you please let me know your opinion on which one to select and why.
Well, maybe. This is Ship of Theseus situation. The good news is that, from the perspective of the new you, everything went great, and the old you doesn't have a perspective, so that's a 100% endorsement rate.
I think the economics/ethics of the researchers are overshadowing something big:

"RYZENFALL allows malicious code to take complete control over the AMD Secure Processor."

"Multiple vulnerabilities in AMD Secure Processor firmware allow attackers to infiltrate the Secure Processor."

If this is legitimate, this is huge! The PSP could potentially be disabled! Very little work has gone into handicapping the PSP compared to the IME.
And why can't I have my home page as my new tab page?

I don't want any of that "top sites" BS on a new tab, I want the local HTML file that I created as my home page. Why not allow it for new tabs?
Test drive of AppSwitch, the “network stack from the future”
The times I had problems with GA was because of some uBlock rule or weird A/B tests (I assume) or caching, clearing cookies and site data fixed the problem.
Instrumenting CI Pipelines
Seems like a big bet on the concept that the physical structure of the brain preserves enough information to resurrect a consciousness. If electrical transmissions are at all required, then this would render a brain nothing more than an amusing curio.

Although, given that their target market is already those planning to be euthanized, I suppose the tradeoff of one's brain being an amusing curio vs. one's brain being worm food is not a reason to avoid this service.

If they are correct, it brings up an interesting question: given that the technology requires a slow, planned process to preserve the brain, at what point should a uniquely brilliant person be euthanized, in order to preserve them, rather than allowing them to die by sudden misadventure, e.g. not paying attention and getting hit by a car crossing the street.

Given that the output of so many brilliant people is skewed to when they are young, do we just start proactively euthanizing the top 0.05% of the population when they reach 50, to preserve our best for the future?
As a tab-hoarding Firefox user on machines running X11 with 2-4GiB of RAM who has spent time investigating Firefox and Chrome memory usage issues, I am having a really hard time believing your claim. Right now on the machine I am typing on there are 38 tabs open in Firefox 58.0, uptime 15 days, Xorg is taking up only 66088 KiB (66 MB) resident memory total.

The "reasonable way" to account for memory is to read the top(1) manual page to find out about the different memory usage statistics, then run top to find out which processes are using how much memory.
Given that an early death is only possibly prescribed in cases where a patient is terminally ill (as determined by two physicians), where a patient is of sound mind, and is often in pain, it can be a reasonable alternative to a lot of the (often expensive) interventions that don't do much more than prolong agony in the last weeks of life.
This looks more like a competitor to AWS GameLift, infrastructure designed for hosting game servers which are different than your typical web server (almost always stateful versus stateless). Improbable is more a developer level SDK to drop in your game and wire up functionality to their 'cloud processing'.
> They made a rookie mistake though - AMD is plagued by day-traders and algorithms who couldn't give a damn about the fundamentals.

Seriously. AMD stock is trading up 3+% at the time of my comment, and it's climbed since the disclosures this morning.

Something tells me this backfired.

Discl: I've been long AMD for a long frickin' time.
THIS ISNT A FLYING CAR, ITS A VTOL AIRCRAFT. a damn plane with rotors on the wings. its easily 3x or 4x the dimensional footprint of a car for gods sake.
2. Shouldn’t be news given that a couple of dozen Saudis outmaneuvered a superpower, taking out two skyscrapers and thousands of people. That’s also no excuse for the behavior in question.

I’ll add 3. It’s not all about the researchers and AMD, but the people who use AMD chips and deserve a modicum of protection and consideration. Unless there were exploits in the wild, the security of users seems not to have entered into this.
Well, one good thing that could come out of this is that it might tamp down on the use of scaremongering names for security vulnerabilities.
> But I reckon if Rust gets in the way it is not because of the language but lack of resources and available libraries for the domain.

I guess you'll get to play with the FFI capabilities by incorporating some C libs then. :)
Show HN: Dozen – A number tile puzzle game (browser and mobile)
Automated SSL providers effectively mitigate the idea of "verifying ownership" or "delegating trust", because for example, someone can buy a domain like... googIe.com, get an SSL cert for it, and it's "valid". We're right back to the same level of security of you just checking that the browser bar points at the domain you actually intended to go to. (In this example, bear in mind, Google doesn't use an EV cert, so they'd be equally valid to a web browser. And a lot of EV certs I believe are getting distrusted soon as it is.)

CAs seem like a system that really doesn't work today, we've seen multiple times that many of these CAs aren't worth delegating trust to to begin with, and it causes an unnecessary cost and burden upon just... encrypting traffic.
There is a difference between questioning from a point of view of contributing new information and questioning for the simple pleasure of disagreement. The first position is necessary for the development of science, the second is a hindrance.
Solar electricity will be nearly free shortly, so efficiency isn't an important issue. Cost still is of course.

Solar is becoming so cheap that an excessive amount of generation will be installed, so adequate generation will be available in morning or evening, or with clouds. During peak sun, excess power will be basically free, so any battery can be charged during these periods at little cost. Wait and see if skeptical.
That presumes the only response people have to vulnerabilities is to patch. But that's never the only response people have: people can trade availability for exposure. But because nobody in the industry wants to face a costly tradeoff like that, we pretend that we're stuck with the lowest common denominator response.
> Facebook and Google are large enough to crowd out other players with or without net neutrality.

"crowd out" is a vague term. Maybe they make the most money, but money isn't the only thing that matters. The forums I frequent and the DuckDuckGo are doing just fine, but I'm not sure they would be if net neutrality falls apart completely.
So then this becomes something like the fast money/slow money system in Charles Stross's Neptune's Brood: people destroy their physical bodies to take slow trips to distant locations, preparing themselves by stockpiling slow money, like bitcoin, that will have significant value in the future but may not have so much now.
Jazz musicians can also do this with chord charts, as long as someone knows the lead.

In one session I used to play in, there was a player who could play any Irish tune after listening to it just one time through, so long as someone else kept playing it.

There's an Irish flute player in the Bay Area who I love playing with and listening to. He's 100% variations all of the time, all the way through, but he does it right and everything fits.

Adding additional challenge is the minor variances in tunes that occur between regions and jam sessions.

TBH, many North American players just fluff those. Often, it falls to more capable players to match up to the others.
There's a game called Soma which has a plot that largely revolves around this question. You play as a man who wakes up mysteriously in an underwater facility as a circumstantial consequence of a "brain scan" you took 100 or so years ago.

The "is it still me?" question pops up over and over throughout the game. It's incredibly thought provoking.
"No politics" was an experiment that lasted less than a week. It was clearly labeled as an experiment at the time. I don't think that it's current HN policy.
I use Firefox Focus on my phone (android). Anyone know if it tracks the full Firefox releases or is it something completely separate?
> It will also serve to increase the premium on 0days...

I strongly doubt that. I've seen incredibly serious vulnerabilities I've reported firsthand have little to no impact on a company's valuation when publicized.
Interesting to say he doesn't care about Qualcomm given it's in the title?

I agree he clearly points towards patents as being an issue, but it's not clear to me he doesn't care about Qualcomm --- he clearly knows a lot about them.
Not that unreasonable, depending on what your use case is. There are some good, very approachable guides out there like this one[0].

[0] https://pron.github.io/posts/tlaplus_part1
Current trends show a future with a higher population and more income inequality. This describes a world where "expensive" is still a thing.

I'm not saying you are incorrect about the future, just pointing out it's against several long term trends.
I believe Kent Beck does a mentorship program like this at Facebook.
Or,

3. The vulnerabilities are real, but their impact is being overstated because behind the security researchers is a financial firm hoping to make a buck on stock trades.

#3 would seem to me to be a bad development for your niche, if it became a popular business model.

(I have no horse in this race.)
Neat. Really needs someone to go ahead and mass produce. I assume Google realized the market is too small for them to worry about, but if someone could build them in bulk I'm sure they would find an audience of people willing to pay a decent price.

My guess is there are not a lot of people who could both a) build this in a short amount of time and b) find practical uses for it.
It's lower latency once you've delivered the javascript.

There's a lot of interesting stuff you can do with edge applications. Image optimization/resizing, content rewrites, pre-rendering, API gateway, etc, etc, etc. These are all things you want to do once for many visitors.

There's a lot you _can't_ do in a browser because browsers are untrusted. Edge applications can run with a different level of trust.
Now here's to hoping that Heroku supports this soon. That will to mean I can a last migrate a number of apps that require wildcard domains to their platform.
https://keyvalues.io has some good ones.
If you're taking advantage of returns in a way that hurts retailers, they want to lose your business. Chances are that's not you, but it's probably still worth it if they can eliminate the free riders.
Very nice work, however the text contrast is so low I can barely read it. Sad that hard-to-read is still a design fad thing.
Clearly, morality and the greater good of humanity requires that we proactively euthanize any genius who hits 60. Even against their will. All assets should go to the euthanasia team to cover costs.
Keel does a really good job of this, good to see people are starting to have options with their k8 deployments!

My two cents:

So far my deployments have been pretty painless, so changing over to something like Gitkube / keel isn't my top priority currently.

Configuration management / Creating my kubernetes resources ( deployments / services / ingress / etc. ) in a repeatable and elegant way is my biggest pain point by far.

# Helm

I've been very unhappy with Helm.

Helm is insanely verbose. Go ahead and take a look at the kubernetes/charts repo and look at the various stable charts. Note the huge amount of copy-pasta code hanging out.

Too much of my life has been spent wrangling YAML templates that are rendered using the under-featured gotmpl library.

Also, helm's client library support is less than stellar. Also, schlepping my configurations around is a pain.

In Helm, it's a crazy amount of code to implement a `ingress -> service -> deployment` pattern that is standard for 99% of kubernetes resources. You have to write the same things over and over, which means that making changes takes forever and is brittle.

I believe this is due to gotmpl being a poor templating engine for this use case. It doesn't have enough features to allow one to develop decent abstractions over declaring k8 resources

The helm tiller doesn't expose a restful API or proper tooling to allow other resources to interact with it effectively, making automated deployments a chore. My only option is to call out to the shell and try and be devensive.

Finally, Helm doesn't really do that great a job of validating my resources are going to be valid. `helm install --dry-run` will tell you everything is great, and then break in the middle of an actual installation, leaving a half-configured mess in it's wake.

# KSonnet

KSonnet looks like an attractive option, it's certainly less verbose. But the documentation isn't there yet, and if you peek under the hood there is a MOUNTAIN of ksonnet code waiting to be read and understood. I belive it's going through some churn currently, so features and impovements have been slow to appear.

Also KSonnet doesn't have enough example implementations to hit the ground running when trying it out on my clusters.

Targeting individual contexts in Ksonnet provides some nice additional safety, and some very simple implementations using google KMS or something similar could be a really special way to safely store my secret configs at rest, similar to ansible-vault.

# Terraform

Terraform has this NAILED in the VM space. I declare my environment: `terraform plan` tells me what is going to happen, `terraform apply` checks to ensure I've not protected any of my resources with a flag, and applies the changes it listed if not.

I'd love to write my k8 resources in terraform, but it doesn't currently support modern k8 resources, and I don't LOVE how terraform handles storing my tfstate files either way.
I have been coding for 32 years and teaching martial arts for 25. While I would love to get involved in the right kind of intensive training to share that experience, the bigger problem is that no one gives a shit these days unless it's the new shiny or otherwise likely to generate awesome profits yesterday. Show me someone who's serious about learning and making an effort and I'd do it for free.
In what way is Aphex Twin's project better?
I think your point stands, in that there are probably many casual users of Vim who inflated that number. However, I'd like to point out there are many of us, like myself, for whom vim usage is more than "occasional editing of individual files."
I'm curious why it writes the whole file... Can't you do something like:

if rollback log exists
recover
create log
for each write(),
write old contents of region to log (along w/ location)
sync log
for each write(),
write new bits
sync db file
remove(log)
Joel test https://www.joelonsoftware.com/2000/08/09/the-joel-test-12-s...
An ecosystem needs to reach a minimum threshold to thrive. I don’t know if a web without both companies would meet that requirement.
I'd probably choose this over other cryo companies. It's a higher quality preserve.
It's this exact situation why I decided to write a tool that integrates with the CF API [0].

[0]: https://github.com/wyattjoh/cloudflare-ddns
I hadn’t read that, but I added it to my list. Sounds interesting.

There have been compound interest sci-fi for a while. I remember the Lazarus Long stories by Heinlein and Orson Scott Card wrote Worthing Saga.
Interestingly, the rationale put forth by QCOM and the gov't is not that foreign governments would control the technology. It's that Broadcom has a habit of executing cost cutting measures. I think they may have even made public claims about spinning off QCOM's licensing business if acquired.

The claim is that this would effectively reduce investment in wireless tech innovation by US companies. This would make foreign investment more effective/more likely to dominate.
How I choose third-party libraries in iOS
I think it's an important distinction in the context of evaluating the likely performance of a brand new aircraft.
String patterns in Carp