skysight-inc/HackerNews huggingface dataset:
You know that before SO and Google all dev community was doing well? Using manuals and stuff that are typically on your machine from day one or from moment you install something you want to code in.

Now it is: No Internet = No Coding.
Then: No Internet = Who needs this shit?!
Keys aren't immutable. You can remove UIDs you don't like. Even if they were immutable, at least in theory, a keyserver could censor whole keys.

But apparently this is a practical problem. Phil Pennock wrote on oss-security (http://seclists.org/oss-sec/2017/q4/375):

[...] we've had keyservers in Europe shut down because of privacy
demands because an append-only mesh-fill datastore can't remove keys and
people send out their email address and name paired into a key and then
get upset because it's out there; we're one
illicit-material-in-photo-uid incident away from global shutdown.
Just noticed the docs have a tutorial on creating a command line interface app[0]. Thanks for this. Would love to read the next steps involved in making the app accessible with with just `fibonacci`, as opposed to `npm start fibonacci`.

[0]https://noderize.js.org/docs/tutorials-cli.html
Simply encrypt the data and upon “deleting it” instead delete the encryption key. This is similar to concerns about backups.
Hm, I guess it is hard to do much in a state where bribery is the norm, without doing it by yourself.

And aiding a dictator sounds bad, but when "aiding" simply means doing business with him, then you can blame allmost the whole world. As we all are buying things that were at least partly made in dictatorships. And what is the alternative?

Not doing business with states who have not our perfectly nice democratic governments?

And don't get me wrong, I don't like Microsoft for making exclusive deals with any governments to strenghten their monopoly, but "evil" is something different.

Like what I came across yesterday again,

https://en.wikipedia.org/wiki/My_Lai_Massacre

and the fact, that there was a public outrage in the US, for convincting one of the murderers. And not so much about the massacre or the cover up itself.

And that this does not seem to have changed fundamentaly regarding the ongoing drone war, imprisoning innocent people for years in Guantanamo, torturing, massacring etc. etc.

So blaming only the rich seems hypocrite to me, when the very normal base of the people don't think or act that nice by themself.
As far as I know over 70% consider Snowden to be a traitor ... so what can you expect?
A disturbing thought - it would be difficult to put my usual sticker over the front camera if it's under the screen.
Exactly. I can get positive references from all of my past managers since 2008. Except for the Fortune 10 Company. I was just a number there.
So at the time, to compile software for Windows NT Alpha, was there an Alpha IDE and compiler available (something like VC++) such that developers were writing and debugging locally, or would developers usually cross-compile from an x86 machine?
The Comedy and Tragedy of Being a Theater Parent
The hospital does account for ~33% of revenues[0], but the Med School and the Hospital also account for ~55% of total expenses[1] so it doesn't seem entirely unfair to include them in the revenue stream.

0: https://ucla.app.box.com/v/acct-pdf-AFR-15-16 page 37

1: https://ucla.app.box.com/v/acct-pdf-AFR-15-16 page 28
I'm not sure it's that shocking a result that data impacted by GDPR may not be stored in an immutable format, given that the law requires you to mutate it under certain circumstances.

There's probably an interesting computer science problem here in how to create a data structure that retains as many advantages as possible from the immutable data structures, but still allows compliance with the GDPR.
The root problem is that people use these tools as a brief diversion, not something to engage their critical faculties.

If there was a "long-read social media" platform, it would be ignored, because you wouldn't check it in the bus queue or on the toilet.
Duolingo:  a New Way to Learn a New Language
I have a side project that lets me work for myself two days a week. Growing the project has been hard. I’m glad now I didn’t pack in the day job.
I'd love to see a benchmark against Sequelize as well.

Not sure how I feel about it not being async...
We're got some pretty complex pipelines, so much so that we've reached quite a few limitations.

You can do all the things you've listed. But you can't build an arbitrarily complex DAG of tasks. Instead, you must order everything into a sequential list of 'stages'. Within a stage you have a list of jobs, which are run in parallel. This might be enough for your needs, but I'd like flexibility to express dependencies for each and every task, Say `t1 -> ((t2,t3),t4 -> t5) -> t6`, etc.

And it's a pain to propagate variables from one task to another, like say setting an environment variable in one task, and getting its value in a downstream task. You end up writing scripts to write them to a file, telling gitlab to make that file an 'artifact', and then reading it downstream.

And then there's the transient errors, all of which are listed on open issues. We're using the hosted gitlab.com, and on some of our CI pipelines, we have a dozen or some stages. The chances of a transient error, .e.g. a runner getting a 503 from gitlab.com, are pretty high.
The formulation is a bit weird. I can't find it right now, but I recall reading in the past that features that are typically only useful when an instance has 100 or more users are the ones that are not made open source. That said, they've open sourced often requested features [0].

[0] https://gitlab.com/gitlab-org/gitlab-ce/issues/34591#note_56...
Are you attacking freedom of writing now? I am confused.

This is one thing that most of the free world has gotten mostly right: you can say anything you want in writing without having to fear the government.

It needs some corner cases ironed out, obviously, but for the most part you can write whatever you want and not be arrested for it.
The data embedded in the blockchain can only be extracted using custom tools.

Custom tools can be used to extract any data from almost any other kind of other data, using steganography. You can extract illegal data from innocuous looking tweets, using the right tools.
A little tangential, but my wife decided to start a business a few years ago. We had no idea where to begin with the legal, banking, etc. side of things.

This book was a great primer for us: https://www.amazon.com/Small-Time-Operator-Business-Yourbook...
The way most systems are configured, your fake-meme-creator could access ptrace and the filesystem.
Drivers lose their shit everywhere.

https://www.theguardian.com/environment/bike-blog/2011/aug/0...

Unless they're going to murder you I suspect you're still safer.
If you want those big money enterprise clients, add Maven and Nuget support.
A dive into the making of Immersion
Ask HN: Stuck in Switzerland
I recently moved to Switzerland to be with my partner, who has a great job in a multinational company. I have a Ivy-league PhD in Statistics/ML and extensive experience in development, also as a startup founder (unfortunately not very successfully... but, hey, at least I gave it a shot). After 1 year, I'm still looking for a job. I strongly suspect he main issue is my age: I'm approaching 50 and - although it's illegal - in Switzerland age discrimination is tolerated. Very often job applications must contain the applicant's photo, which may bring discrimination to a different level. Anyway, I'm not going to try and change the system, I'll just hold tight for a couple of years and eventually leave this country. In the meanwhile, I'm trying to get a job at Starbucks or something similar, but I'm obviously over-qualified. What should I do? Should I lie and fake my CV, delete my LinkedIn profile?
I'm a long-time Civ player, and I've recently tried the Civ IV Colonization. One match later I installed the 'Religion and Revolution' mod and I'm amazed at how deep a community-made mod takes an already deep game
That you are developing software for web browsers and are still able to maintain the notion that your innovations exist in a vacuum is flabbergasting. Who built the browser and made its API discoverable? Who made it so that you can write nearly the same code and target different browsers? Who built the operating systems browsers run on? The network protocols and infrastructure without which your webapps would at best be interesting diversions for the developer? Neither of these involved social processes? Your innovation, in the greater scope of things, is inconsequential. You reinvented the wheel because you had none, but you still reinvented the wheel.
This reads like something out of /r/insanepeoplefacebook
> Sometimes you have to work out the underlying Q is and answer that even if the OP doesn't want to hear it.

And often times you have people trying to "work out the underlying Q" leaving your question still open but with useless answers.
> Think about every script you've ever written for "some thing at home" and how you only cared that it worked for the very narrow, specific, circumstances you were looking for. Maybe you left out error handling and just let it crash when you failed to put in the right parameter. Who cares? It's just a script for your one, lonely, workstation/server.

I find seeing this mentioned oddly comforting. I write my worst software for myself. Zero validation, very little error handling, unchecked assumptions all over the code.

At least I'm not the only one out there with a barely-stable home lab setup because of shoddy programming.
A job was no option in the first place. Started and failed with businesses since I finished school with 19. With 29 now I have a business with 7 figure yearly profits.
Shit happens. Sometimes it's an oversight, sometimes it's accidental, sometimes it's from ignorance to the dangers. Sometimes it's even a honeypot, like this time :)
Slander and cyberbullying are civil law, not criminal law.
The best thing that I was able to do is to reduce my fulltime job hours to part time, initially 3 days/week, and used the other time to grow my own business. This may or may not be applicable in every situation, but if you are a positive contributer in your working environment, it's unlikely that your boss would rather just replace you (and retrain a new person) instead of just having you work less. This eases the stress tremendously on the new business if you don't have to worry about eating and rent/mortgage payments.
By the end of the article the author mentions that there are thousands (700k+) exposed installations.
I noticed that at least in Polish if you translated the question word by word it would look like the latter.

Google polish translation is even worse, it's about renting (like an apartment).
How fast can it sort those rows?
Sorry, by "no standard tooling" I meant "no standard tooling" in the sense of no tooling in the standard Python distribution.
> Probably the worst possible structure for representing a map.

Not really.

But native hashtables had been added to Lisp in the 70s...
Build side projects with the latest technologies to show companies you're "cool" and "hip"
Good product first, refactor JavaScript after
It is time for /r/insanepeopleofhn
Why Europe Is Giving Teens a Free Month of Train Travel
VLAN and MPLS are common, as well as .1P/.1Q and DSCP. Then you can find hybrids like MPLS-VPN and S-VLAN, and then the tunneling protocols like GRE, L2TP, VXLAN, DOVE, QinQ, OTV, NVGRE, PBB-TE, SPB, VLL, etc. And most of this is just Ethernet, there are often similar standards for different L2s like wireless networks.
Can I have 1 cent for every spelling mistake I find in your book? ;)
Here are 2 screenshots from Chrome on Android displaying the article. The one in the left is how your article looks by default. The readable version on the right is how it appears when you accept Chrome's offer to show a "simplified version".

https://photos.app.goo.gl/ntvIcKSDTOfdkwAi1
I've consulted ip6(4) but I'm still unclear on exactly why they break with the rfc here. Do you know where they detail the security implications?
How exactly can this be exploited?

Who has to run the Postgres database?

In what kind of way does it has to be accessed to get this happening?

Are we talking about web apps that use Postgres on the back end and run arbitrary queries?

Are we talking about people who somehow extract the Postgres database username and password and it has admin permissions?

I wasn't sure what's happening.
I thought this was one of those files that are an image and an executable AT THE SAME TIME. Slightly disappointed that it's just catted together
Ironically unavailable due to an "error establishing a database connection".
The tag points to the current version of your docker image, which contains the current configuration, except secrets which you don't want in a repo. Older deployments point to the older docker images which contain the older versions.

Still don't see any advantage to justify the additional complexity in your system.
It’s not clear why one would use this instead of yeoman. Perhaps the docs could mention that?
Could I receive a content of articleId=1;/etc/passwd please?
LG OLED is not true color OLED, but a hack, having a white OLED emitting panel and a color filter on top. It has many downsides like lower efficiency, maximum brightness and color accuracy.
An Interview with Flightright Co-Founder Dr. Philipp Kadelbach
> The one in the left is how your article looks by default.

I'm not the author of the article.
A keylogger on your system could keylog your master password.

A password manager itself has a similar threatmodel but it holds (usually) more valuable information than just passwords (in my case TOTP, Bank Data, Credit Card, etc.)

PM's are also usually better equipped to deal with this (Keepass uses a Secure Desktop on Windows)

Firefox's master password is "good enough", so to speak. It's unlikely someone will attack you either way but if someone does then FF's system should hold out a day or two if you picked a reasonable password (a modern PM can put up much better brute force defence)
Some quality tinfoil-hat journalism.
...until one thinks it through and realizes that this would require that special value as an extra condition for every attribute in every relation mentioned in the query, which in turn would eliminate both the theoretical elegance of the relational model and the many very practical benefits that arise from it. A secondary problem is what to do if '*' is a valid value... Ad-hoc solutions are often more difficult than they first seem.
Using logic similar to chapter six of https://www.scottaaronson.com/papers/philos.pdf , though, you can still draw a meaningful distinction between a normal JPG decoder, and your proposed JPG decoder that interprets the Declaration of Independence as illegal child porn. Your decoder must inevitably have a much higher information content in it, and is a "reduction doing all the work" in that case. So while you've got a mathematical point (no sarcasm, I understand what you are getting at), even on purely mathematical grounds I can argue a meaningful distinction; legally it'll be even easier.

Interestingly, it's a distinction that happens to more-or-less match our own intuitions about the situation, which is something interesting to ruminate about a bit.
There seems to be no shortage of remote-first data-driven startups, at least if SO Jobs is any guide...perhaps that could be viable?
Back in the 90s, before package managers for Linux/BSD and when disk drives were fairly pricey, it was common to have say, a network of commercial *nix workstations with nfs mounted binaries for stuff like gcc, latex, emacs, X utilities, etc.

This was typically done by a network of symlinks. As best I can remember, you'd have /opt/local exported from the server, with all the open source goodies. It was arranged something like

/opt/local/emacs-19.1.7/bin/emacs

/opt/local/emacs-19.1.8/bin/emacs

/opt/local/emacs -> /opt/local/emacs-19.1.7

<....>

All the clients would have a local /usr/local with another symlink, /usr/local/bin/emacs pointing at /opt/local/emacs/bin/emacs

When you upgraded from 19.1.7 to 19.1.8, you'd just move the symlink on the server. You'd then wait a week or two, and garbage collect the old version (after rsh'ing around to the clients to make sure none had the old version open, if your users were lucky).

The local network of symlinks into /opt/local was maintained by something like cfengine, which ran at install and nightly to update configs (eg, for newly supported stuff, or new binaries in new versions of existing software).

If you screwed this up, and replaced a binary out from under a user, they were rather unhappy..
How many users does pinterest have? Is it popular and still growing? Why are they not going public yet?

I have never knowingly gone to Pinterest and so don’t know much about it.
I wonder if a lot of this problem would go away if SO questions could be officially split into a "I'm a novice / learning developer" site and a "I mostly know what I'm doing" site. This is impossible, of course, not least because of the Dunning-Kruger effect... but those two categories of people have very different needs, and most of the friction I see on the site seem to be a result of them being lumped together. (As many people have pointed out, the problem's a lot worse in tags that tend to have a lot of beginners -- HTML, CSS, jQuery, regex...)

I get where the rudeness, pedantry, and rules-lawyering is coming from. It's frustrating to wade through a dozen daily iterations of "how do I vertically center this div," "why doesn't my async code work when I try to treat it like synchronous code", or "why didn't this jQuery event handler bind to the DOM element that didn't exist when I tried to bind it," or "here's a screenshot and a vague complaint that something doesn't work right, fix plz". And when you've been through a bunch of those you end up primed to assume the worst of every question.

Those are all perfectly reasonable questions to the person asking them. (well except for the last one maybe.) But to the people treating the site as an Encyclopedic Repository of Coding Knowledge, they're just repetitive noise.

Possibly I'm outing myself as part of the problem, here. (I do try to keep a level head, or at least keep my mouth shut while I mark as duplicate.) But I think the rules-lawyering is a necessary defense against the site turning into Yahoo Answers or Quora or Experts-exchange. (Remember them? They've added the hyphen since last time I looked. Good call.) It could be done more politely than it often is, but it does need to be done somehow.

Which is why I wonder if it were possible to reframe those "beginner" questions as mentoring, rather than walling off or shutting out the noobs; and to make marking a question as a duplicate feel less adversarial and more "your answers are over here!" then it all might be a little less angry-making on both sides.

(Not that I know how. The Documentation beta seemed a good attempt; I was disappointed that it didn't work out.)
That's why my passwords in text file and I consider it fine. If someone breaks into my machine and I won't notice it, password will be keylogged anyway. The only true defense would be hardware-protected external password storage, but I'm not aware of any.
How does the image get executed? I went through the article and in the example the author extracts the executable manually using dd.

But how would an unsuspecting user run the executable? Perhaps I missed this, but is there some image viewer or browser that runs the trailing bytes of images?
Uber said to be negotiating sale of self-driving tech to Toyota
Ask HN: Are conference parties a thing outside GDC?
I would be interested to hear whether in the Software and IT industry it is normal to have conference parties and, if so, whether you have found them useful or not and, more in general, your experience and opinion about them. Would you recommend them? Are they easy to find/advertised well?

Context: I used to work in the Games industry and have attended GDC (Games Developer Conference) in San Francisco various times. During GDC it is normal for companies to organise parties and you have many parties to choose per night. There you can meet other developers, investors and publishers. I have found that, most of the time, these parties are the place where you make the most meaningful networking connections, compared to the actual conference. However, they were super difficult to find due to poor advertisement! I have now moved to work in the Software Industry and will have to attend some software conferences and I am curious as to what the culture is in this industry regarding conference parties.

Thanks!
Show HN: Automatic colorization of graphical images
All the RISC architectures had superior performance over x86-32 in the '90s.

MIPS is much larger than SGI, and POWER [1] is much larger than PPC (or Apple). MIPS and POWER have been used in consoles, for example. That is volume! Especially MIPS, is used in embedded chips (together with predominantly ARM). Those are found on every mainboard, laptop, console even though the latest gen consoles run on AMD64.

Alpha however, died somewhere within DEC/Compaq/HP.

My friend argued the NSA was using Alpha processors internally, and had their own fab. I have no clue about that though.

[1] https://en.wikipedia.org/wiki/Power_Architecture
For a social history of PLATO, see the 50 Years of Public Computing conference that took place at UIUC School of Information (the same year as the Computer History Museum video embedded in the article), http://50years.ischool.illinois.edu/.
Thanks fiiv, you are a life saver! :)

Would you kindly help me with https://www.lightelligence.ai/ ?

This site too has stunningly mesmerizing animation.
Hetzner Datacenter Helsinki is now fully online
https://archive.is/KvFHx
{ "error": "article not found", "errnum": 229 }cat: /etc/passwd: No such file or directory

I should probably have tried on a real linux system.
What is "most systems"? A few years ago this was true.

A decent distribution nowadays sets /proc/sys/kernel/yama/ptrace_scope to disallow any process to spy on other processes.

ptrace_scope was apparently introduced in 2011-2012, see https://github.com/torvalds/linux/commits/a2e5790d841658485d...

For more information:

https://www.kernel.org/doc/Documentation/security/Yama.txt

https://en.wikipedia.org/wiki/Ptrace

https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/lin... (via
https://wiki.ubuntu.com/SecurityTeam/Roadmap/KernelHardening... )
Show HN: I made a chrome ext so you can use many 'New Tab' ext at the same time
I was mostly referring to state and local government as an alternative to the Federal Government.
My colleagues and I discussed this paper when it was published. Like lots of AI research in this area, it picks a human strawman and is sort of misleading in this regard. The human ratings are poorly designed and substandard in many ways.

It's still interesting, but there are lots of issues being swept under the rug in this area.
Especially if you consider the possibility of someone loading state secrets onto the chain. It wouldn't take a state actor to initiate that action, but that state actor could render the chain worthless.
If you are interested in this kind of paper, it was in today's morning paper: https://blog.acolyer.org/2018/03/19/a-quantitive-analysis-of...
It's executed from PostgreSQL - the article shows SQL queries containing shell commands. This is a way for an attacker who's already obtained the ability to run arbitrary queries against a PostgreSQL server to run an exploitation payload there; the real solution is not to let the attacker get into that situation.
Somethings off. It should work like this:

p = 1e-6
n = 10^(1:7)

frac_accepted = (1-p)^n

Results:

num_pixels frac_accepted
1e+01 0.9999900000
1e+02 0.9999000049
1e+03 0.9990004993
1e+04 0.9900498288
1e+05 0.9048373728
1e+06 0.3678792572
1e+07 0.0000453997