skysight-inc/HackerNews huggingface dataset:
Iraqi invasion of Kuwait.
Serbian encroachment in Bosnia.
Argentinian invasion of the Falklands.
Chinese annexation of islands in the South China Sea.
Soviet invasion of Afghanistan (though I don’t know how old you are, likewise for Falklands).
Russian occupation of territory from Georgia.
...I’m sure I’ve missed a few.
You shouldn't turn your eyes towards Isreal, Russia (as mentioned above), many of the central African nations, China's treatment of some of it's bordering states and the Korean Peninsula.
This can't be the explanation, since Chrome manages to sync passwords between devices.
Since the headline here is Debian 9, it is worth nothing that changes in Debian 9 address a small part of this overall problem. One can nowadays at least not give one repository owner the power to sign impostors of every repository that one has configured, by associating a public key directly with an individual repository rather than placing it into a global keyring.

* http://jdebp.eu./Softwares/package-repositories.html#Debian

The rest of the problem still exists, though. Only one package manager that I know of even tries to address it, by having pre/post-install/upgrade/remove actions use a specialist declarative language for things like making directories and dedicated user accounts. But even that has a loophole that allows arbitrary scripts to be executed from within that language.

* https://freebsd.org/cgi/man.cgi?query=pkg-create#PLIST_FORMA...

* http://man.openbsd.org/pkg_create#PACKING-LIST_DETAILS

The loophole exists because the provided language simply isn't sufficient for everyday needs. It's quite hard to come up with one that is, whilst not being as worrysome as general-purpose shell script, too.
Being open to having to justify anything that's called into question, and being capable of doing so, and being happy to... are different from forced to.
Stateful Experiments on AWS Lambda
Yay for anything != iTunes. I've been contemplating the iTunes dilemma for quite a while and decided that I needed to start moving off iTunes and not be locked onto a specific platform. My approach so far is to store my audio files in cloud-based object storage system, including a SQLite file as my catalog. When I start one of my players, it pulls the latest copy of my catalog and then starts random play. My latest player is Raspberry Pi with HiFiBerry DAC+ that outputs to my home stereo.

I just pulled all of my content out of iTunes on my laptop about a week ago, but still have it on my iPhone and iPad. Every little move away from iTunes makes me happy.

afplay on Mac and mpg123/mplayer/aplay on Linux can provide a decent start with your own controller driving it.
Best Deep Web Search Engines – Based on Usage
Geez, why didn't I know about this earlier? It's a life saving tool.

I have been using Cog or Gog or whatever but recently gave up. This thing is exactly what I needed. Not that iTunes shit that tries to move my files around or that electron shit that gobbles 1GB of my memory for just the nice transitions.
I'll take a shot at this since I'm bored...

Have occupancy be based on physical occupancy with a time limit based on a reasonable value corresponding to expected airspeed for the location. Of course airports would still control the landing/takeoff order because that's what they do.

I suspect the FAA has rules against blimps and helicopters hanging out in the paths the jumbojets take so I don't really see any way it would be possible to squat in a particular piece of sky.

For smaller drones, I really doubt there will ever be more drones flying around than birds and they seem quite able to share the airspace with a minimum of problems aside from becoming lunch for malicious actors or colliding with ground based vehicles.
Their Open Positions page advertises the following. Sounds like sales 2.0 positions.

BUSINESS DEVELOPMENT

Communications Strategist

Deployment Strategist

Forward Deployed Security Engineer

Proposal and Capture

Legal Strategist

Proposal and Capture Strategist
Please don't just copy and paste from the website... it's obnoxious. We see the link, we can read.
Obviously he is gearing up to demonstrate the significant difference between hollow and solid cylinders. It's the only race out of all that anyone could place a confident bet on the outcome, and this is what matters. Kids learn that weight and size make no difference. Kids would probably call out the differences on the day and then that could be explained and repeated if needed.
I think you've overreacted here. I don't think that brief 'jnordwick comment qualifies as a "harangue" and I think it raises a reasonable point: lots of things are "high quality" but not really germane to Hacker News.

You might hope that a story like this is one we can all find intellectually interesting and discuss without falling into a political vortex. But it's a political topic that reacts with almost every other political issue on HN, from US politics to Greece and the EU.

I think he's right and you're wrong, for whatever that's worth.
Something like it has been tried...

https://en.m.wikipedia.org/wiki/Project_Pigeon
Or, conversely, an AI based startup idea...
250 at project fi, 150 with Nexus trade in
When the budget gets tight and they need to reduce headcount, see how well you're treated by your "family".

If my household budget got tight I wouldn't throw one of my kids out on the street.

I also haven't had 6 different families over 20 years because I didn't like the environment or by getting a new spouse I could make more money...

Or in the words of Netflix "we are a team not a family".

https://www.slideshare.net/reed2001/culture-1798664
Sure. Know a good betting platform? Maybe his sentence will be reduced somewhat, but I doubt by half. Also, we'll need to remove time-off for good behavior (which everyone gets by default unless they get in trouble) as part of the bet. 7+ years for defrauding investors is not uncommon, regardless of the other circumstances around the case and the defendant.
I've happily used uthash [1] in embedded-system software written in C and C++.

[1] https://troydhanson.github.io/uthash/
A New Era of Batteries Spells Trouble for Gas in America
Being a professional means having the self confidence and emotional maturity to justify one's work whenever it is called into question. In fact, one should do the due diligence (including cost benefit analysis) to be able to answer the question with ease.

If you can't answer "why are you working on this?" easily then you're not doing your job. And if you resent being asked the question, then you either are self employed or you forgot who pays your salary.
Much like Accenture or McKinsey, we were assigned a "partner", who was always looking to upsell more services and get more entrenched in the organisation. E.g. "we've built system X (which I assure you is better than what you have), how can we use it to do Y and switch off your existing system Z."

A lot of the times, they were just using stuff like Hadoop, and massively over-engineering simple data integration tasks.
This Utility Wants Excess Texas Wind to Power Electric Cars
Understanding Immutability and Pure Functions (for OOP)
From 3 failed projects to 1200 users in one week
Which means he has at least 500x ROI on the $1M campaign doation. Quite good return in 1-2 years.
Why this fad with naming apps as persons?
Found this: http://fortune.com/2014/12/22/startup-names-human/
Yep, “business development” basically means business-to-business sales, with a dash of “consulting” mixed in for taste.
This is not a resume
Not with the amount of new attack surfaces that Mozilla is cramming into Firefox lately.
A lot of people have problems modeling threats. For example, in the article:

> Anybody who ever designed a login function on a website will likely see the red flag here

A login function on a website and a master password for your local system have very different threat models. Applying one to the other is a helpful heuristic but ultimately leads you in the wrong direction.

If we ask 'who is the attacker in the situation' the answer for both is very different.

The attacker we worry about in web logins is generally remote. The attacks we are primarily concerned with are:

a) They can dump hashes, often through SQL injection

b) They can attempt to bruteforce passwords remotely

With a local attacker for a local password db we have to assume that the attacker is executing locally on the system. Our threat model generally does not include the ability to exfiltrate the db in an encrypted state - at least, that isn't where you start.

Threat modeling is critical to security - there are a billion things like this that Could Be Better but we use threat modeling to prioritize. At some point someone asked "who are we protecting against?" and the answer was "a very, very specific type of attacker that we do not see often". And so yes, they focused elsewhere.

edit: To be clear, I don't work for Mozilla and actually have no idea if my "at some point" comment is accurate! I'm just saying that's generally how it goes. It could easily be the case that this just slipped through the cracks or some such thing. I do not know Mozilla's internal threat model, I can only guess.
Should check on password-store. Uses gpg encryption and git for syncing. Can't recommend it enough!
Thanks! Many of the articles on pangaro.com were quite interesting.
You're saying the small groups or direct messages are a small fraction of the users ?
Indeed that fork does. But due to them respecting the intellectual property of the extension devs they can't just willy nilly copy everything over. They have been contacting authors and trying to do it on a case by case basis for a lot of them.
What company considered themselves the anti-palantir?
There Are No Guardrails on Our Privacy Dystopia
A Microsoft RDP Client (MSTSC) Plugin to Report Device Battery Life
How Victor Stinner fixed a very old GIL race condition in Python 3.7
Same thing i post everytime Palantir comes up...

>I cannot say enough bad things about Palantir.

>I cannot comment about the technology but I sure as hell can at a people level. I was a speaker at a conference where one of the Palantir cofounders gave a keynote. This was a conference organized by college students for their peers. As with all such situations these kids worked incredibly hard and his talk was incredibly disrespectful to that.

>If I hadn't been so disgusted I would have thought to record it. Rather than talk about anything relevant to his audience, or frankly anything informative, he told 'stories'. We have all seen that type of talk, but I have never seem one which so blatantly braggadocious about his interactions with this and other country's intelligence branches. I found it somewhat ironic, for someone who works for Peter Theil, that the level to which the talk, and his representation of the 'good' the company does was so absolutely and unapologetically statist and authoritarian. He talked about who's jet he rode on, who he knew, and other things that seemed simply organized to ensure we knew just how important he was. Several of the stories were overtly misogynistic, and none of them had any useful knowledge about Palintir or working for them. I was sitting with another speaker and we were literally shaking our heads. I felt bad for the organizers and felt the shame he[the speaker] seemed incapable of.
No. I should. I care about browsing, not about running web apps. Modern browsers are just attempts to re-create the entire OS within a JS engine.
Scott Kelly: NASA Twins Study Confirms Astronaut's DNA Actually Changed in Space
It's true, we see faces where there aren't any. But we usually know very quickly that it's not a real person- even if we might be confused if we catch it out of the corner of our eye, as soon as we get a chance to look at it for more than a split second we will change our mind and not believe it's a real face.

Of course there are more persistent failure modes where we can be tricked for a lot longer, and artificial illusions that persist despite knowing what they are.
Lobste.rs discussion: https://lobste.rs/s/lifhf7/paseto_is_secure_alternative_jose
I think the reason the example in the video is so interesting is that its non-destructive. It only involves bending and the paper and coaster remain intact.
Ah yes, they should re-assign all their generic swiss-army engineers from VR to Security.
> This is "Arch is unstable" thing is very much a myth pushed forward by people who only dabbled with Arch once or twice then had it break, then completely dismissed it as unstable.

This accurately describes my experience. I stopped using Arch around the time git broke when I updated. I'm not clear what mistake I made. What level of Arch intermediate or expert level Arch knowledge is required to keep git working?
I'm kind of curious how the KickSat project achieved regulatory approval back in (2014?) for their Sprites. IIRC there were 100 sprite PCB's released from a Cubesat with a UHF radio and chip solar panels on each sprite.
https://www.kickstarter.com/projects/zacinaction/kicksat-you...
Seconding KeepassXC recommendation. Here's an intro to it, and to password managers in general: https://leclan.ch/password-managers/

PS: KeepassXC has an open issue to work on integrating itself as the system keyring (eg. providing the system keyring). If anyone is interested in working on it, check out https://github.com/keepassxreboot/keepassxc/issues/1403 !
Good effort, but I think it's misplaced and those effects shouldn't be used on a resume. Find another little project where you can show off your css3 skills.

Quick comments:

- get a better photo, not a passport photo, where we mostly look like criminals. Have a photo of you outdoors or another setting with more natural light.

- Coffeescript?!? Isn't it outdated, didn't the creator even say not to use it anymore? Use ES6. Just tells me you're not good at choosing tech.

- Last slide, can't click on your email.
I am feeling better, but not "a lot better", unfortunately, due to the cost of the ketamine infusions and the inconvenience of the TMS treatments. I received Brainsway deep TMS at one of the better / more well-known psychiatric hospitals in the US. FYI, this hospital is just now starting their own ketamine program, using the standard protocols that I described (i.e., 0.5mg - 0.75mg / kg / 40-60 min).
Sure you are. Why does every phone or car not cost $100,000?

Surely if all the manufacturers acted in their obvious local-maxima best interests and jacked their prices, you'd have no choice but to take out a mortgage to get a phone.

The answer is obvious: the first company to defect and charge $1000 for a phone instead would take over the entire market.

What's the difference between price and features? If repairability is important to consumers, why is nobody "defecting" from the cartel of non-repairable vendors to take over the market?

It's not a complicated argument.
It's both estimates and costs. Mostly estimates at this point from what I understand, unless they already finished the line through the central valley (scheduled for 2025) and haven't told anyone yet.

https://www.mercurynews.com/2018/01/17/worst-case-scenario-h...
Curious: Why is palantir more associated with thiel than Alex karp?

I suspect Thiels right wing position squares with the palantir narrative better than Karp's left wing stances.
Given that the man has spent less than two weeks in New Zealand since becoming a citizen, I assume that GP's tongue is firmly in their cheek.
This rosy fantasy army recruitment in many ways erases the actual lives of people that join. Army recruitment often targets the poor and marginalized. People that have few opportunities in their communities for stable, above-board middle class employment.

People get recruited for the front lines because the system we’ve built around them pushes them in that direction. Our public schools are increasingly defunded, and people from communities that suffered under redlining still find it difficult to secure credit for to this day. (1)

Soldiers suffer for our national wealth and more often then not have been excluded from spaces where that wealth is generated.

1. https://www.revealnews.org/article/for-people-of-color-banks...
This was submitted 4 times in 11 days, just changing the query string (this time is ?ref). Why? What's new?
Peter Thiel openly believes that allowing women and disenfranchised the ability to vote undermines his political cohorts ability to reshape the country/world based on their ideology.

Now, don't get him wrong, he isn't making an argument to take away their vote but he seems to believe that it's on net a 'bad' thing.

The man strikes me as a race towards the bottom in terms of selfishness.
> are never going to be worthy of trust in the same way that a human is.

I have this worry that the glue that holds society together is empathy. Which is we feel other peoples emotional state as if it were our own. Most of us at least. You can bet for the governments and corporations that deploy AI technologies in order to control and manipulate people that is exactly the opposite of what they're interested in.
Ask HN: One tab on Chrome takes about 100MB memory, why?
with say 30 tabs open, 3+ GB is gone, chrome is such a dominant memory consumer! in fact it takes about 10X more memory than everything else combined on my ubuntu all the time, why?

Yes I use onetab extensions etc to save memory, just wondering why one tab takes so much memory, is this a design fault?
Comments below the article are priceless (not the HN ones)
Taking advantage of tech-celebrity status to further promote the company, I guess.
The argument that "security is pointless unless it can prevent <nation-state> from obtaining the data" is a really tiresome strawman. If you force an adversary to have to keylog for data of interest you already have substantially increased the complexity of bulk attacks, which is the real threat for most users - mass password farming sweeps that can provide easy access to people's entire digital presence in one go.
I mostly use afplay to play mp3 from the command line. It is quick and fast. Only playlist management is missing.
How do you know that what they want is a consequence of our culture? Did they say so?

Liana K makes the case for this side of the issue very well. The 30k foot version: Note that programmer used to be a preferred occupation for women.

https://www.youtube.com/watch?v=BIRvtA2JIIA

As someone who thinks that James Damore was unjustly fired and that many people and news media imputed things on him which he did not mean or in fact say -- Let me say that there is something toxic and immoral in the Bay Area tech community. There is something like that in any large enough group of people. If someone is a small enough minority, they can become a target for the very small number of sociopaths. Power does corrupt. There is an element of truth behind both sides of this issue. If it weren't so, it would not be as difficult as it is.

It is okay if a person is not interested in a type of work. It doesn't necessarily imply anything wrong with either.

I agree that is okay. However, I think it's highly likely that not all of the ire I've seen around this issue is an ideological fiction.
I am both wary of some of the projects being done in regards to surveillance, but also not delusional about the focus other nations militaries have in regards to these technologies. It's highly relevant for operations abroad, and whether those operations should happen or not is a separate problem than the military's technological capacity. There's a fine line here, but most of the outrage should go to Congress more than anyone.

At the end of the day, while as an American aware that I disagree with many things the military and government does, it does not infuriate me that they are working with the best technology companies here to stay ahead (preferably) or at least par with what other nations are doing, especially when it comes to protecting US citizens abroad. No, that isn't a blank check of "anything soldiers do is infinitely defensible" but the seemingly 'noble' hobbling of US competitiveness seems out of line to me. I don't think it is an immediate crime for Google (a leader if there ever was one in these spaces) to do projects with them.

If employees have issues with it, then they can request to not be on those projects/teams or seek employment elsewhere, but the notion that it is inherently evil to do work with the government or military is absurd to me.
On the other hand, oracle got sued for hiring too many Asians, so you can't win, really.
We have a minimum of two separate bandwidth providers into each datacenter. Depending on which datacenter your data is in, it is some combination of: Cogent, AboveNet (now called "Zayo"), Wave, Century Link, and maybe one or two others??

The reason we always have two separate bandwidth providers is that any one provider is basically guaranteed to be offline at least 5 minutes a year, and there is a 30% chance any one provider will be offline for two hours once a year. But it is highly unlikely TWO providers will be offline at the same time at any point.

We have three separate datacenters, but any one file you store will be in one datacenter. We have two datacenters in the Sacramento region (about 30 miles away from each other) and one datacenter in Phoenix. So depending on which datacenter your file is in, your network path might change to use a different provider. We are also adding brand new datacenters in 2018 in new regions (like Europe) so that will probably mean new and different network providers.
`less /var/log/<service>.log` or `ag <service> /var/log` or something similar usually works pretty well. I’m not sure why I need a command line utility to do something that the filesystem+standard Unix utilities does just fine. The whole point of Unix is to compose general purpose utilities to get the job done rather than to create a special tool for each task.
Probably misread that (or they miswrote): reflux != redux.

I would agree with both statements: redux certainly isn't dying, though reflux may be.
That’s the point - we don’t know what “environmentally sensitive way” is. We have a bunch of assumptions and predictions, but cannot guarantee the outcomes precisely because we haven’t done it yet.

The question is should we even try or is it better for the environment and our own longevity as a species to take this activity somewhere it has a lot fewer direct ways of harming us.
Both of their attitudes were approx: "Who would want to do this as a job!?"
I fear to know the answer already, but let me ask anyway: does exist any strong password manager that is integrated with Firefox sync?
Why did you give up? I'm a Cog[1] user and I fail to see why this would be any better than Cog. It looks worse.

[1] https://github.com/kode54/Cog
The developers of Foobar2000 released a Mac app recently [1], not under active development and with very limited functionality but I hope for more.

[1] https://www.foobar2000.org/mac
I don't understand how the PLA can be 21 bits wide. The diagram seems to show 8 ON bits, 8 OFF bits, and 6 timing bits, which adds up to 22 bits. Any clarification?
Is that kind of comment necessary?