skysight-inc/HackerNews huggingface dataset:
> If iPads were meant for kids, then I, as a parent, would be able to set a parent passcode on a device in order to unlock it, even when the kids have forgotten their passcodes for the 17th time, so I don’t have to spend another hour or two getting the device in to DFU mode, re-installing the OS, and then re-downloading all of the apps they had that have now lost all of their local-stored data.

Then a third party who steals or finds the device would be able to get all the kids user data (but perhaps not the adult's credit card data and passwords). That would potentially be an issue but I guess would be ok as an option.
Does Cloudflare cache everything no matter how much you feed it? You said <5GB goes through to S3 so that is from the total 1TB of data?
Hey man, have you heard of JsTranformer's [1] they're a standard way of parsing strings in and out of different formats. Markdown-it [2] seems to do this too.

[1] https://www.npmjs.com/package/jstransformer

[2] https://github.com/jstransformers/jstransformer-markdown-it
Cool! I think you need a way to get back to the home screen so that someone can try another conversion. After I did the default png->pdf, there is nothing to click on to go back and try another conversion, besides editing the URL. (maybe a link 'try another' or just home) - but cool thanks for sharing! Edit: on Safari mac 10.13 if that helps
I tried a few episodes and thought it was stupid. I'd love to be wrong, so please tell me it gets better. I'm willing to give it a second chance.
The grandparent doesn't say this specifically, but I've long suspected that a middleman adversary can identify, with high accuracy, which top-1000 website you are accessing (even through a VPN) based on the timing and bandwidth signature of the encrypted traffic. Probably to a lot more detail if they gather and analyze longer-term traffic pattern data.

They can certainly tell whether you're using streaming video with this type of analysis.

If people start using VPNs en masse, ISPs and/or other interested actors will develop this technology, if they have not already. (I would guess it already has been, albeit perhaps not widely deployed.)

If the ISP is the same as the ad network, or a data broker with one (and some are, see: Verizon Wireless), they can then link your IP address to a cookie-based profile. (Yes, there are counter-measures there, like disabling third-party cookies. And there are countermeasures to that, like browser fingerprinting.)
Ah, I didn't catch that.
Please show me where in every day those five colours show up together.
The Best Online Music Streaming Services of 2018
NEED A HACKED ATM CARD WITH PIN?
We Sell Physical Loaded ATM Cards . It Is A Crooned Card That Can Be Used To Withdraw Cash At Any ATM Machine. This Cards Comes In Visa/MasterCard. Therefore It Works At Any ATM Machine That Accept Visa/MasterCard Worldwide.

CAN I USE THIS READY MADE ATM CARD TO BUY STUFF IN STORES? OR ONLINE SHOPPING? PAY BILLS?
Yes, With This Physical ATM Card, You Can Use It To Pay Stuff At Stores Through POS. With This ATM Card Information, You Can Use It Online To Pay Bills Or Do Online Shopping. When You Order For This Card, Full Information About The Card Will Be Given To You. We Also Reload Your Card When Funds Exhausted.

DO I NEED TO ORDER NEW CARD EVERY TIME THE FUNDS IS FINISH?
No, If You Have Already Ordered Our Card, There Is No Need To Keep Ordering New Cards, Just Contact Us For A Reload. We Shall Easily Reload The ATM Card Already In Your Possession

HOW LONG DOES IT TAKE TO RECEIVE ATM CARD IN MY COUNTRY?
If You Are In ASIA, You Will Receive Your Card In 2-3 DAYS With Guaranteed. If You Are Outside Asia Your Card Will Arrive To You Between 3 – 5 Business Days Guaranteed.

HOW SAFE IS THIS CARD?
It Is 100% Safe To Use This Card. Because It Will Be Shipped To You As A Gift Card.

DO YOU ALSO RELOAD ANY OTHER CARD NOT FROM THIS CLONED CARDS?
Yes, We Can Reload Any Active And Valid Cards, Any Type Of Card Just Contact Us For A Reload (Prepaid Cards, Credit/Debit Cards).
HOW DO I ORDER FOR THE ATM CARD?
EMAIL: legithackers@outlook.com

HOW DO WE MAKE THIS CARD?
We Use A Machine MSR To Crone This Cards . You Can Also Buy This Machine From Us Also. You Can Order For The ATM Card Either The Designed Card Or The Blank Card But Still Same Information On Them.
EMAIL: (legithackers@outlook.com)
Doesn't to me. Deploying limited resources effectively is critical to all care-giving. There is no "costs don't matter" in Europe.

The US aspect that is weird is when the discussion is not really about maximising value, its actually about maximising profits.
I recommend Hetzner too, but I want to point out that traffic is not free. When you exceed the included traffic (something like 20-50TB IIRC) your connection gets throttled unless you pay 1,2-1,4€/TB.

That's a good thing though. Traffic does cost money and all those providers offering unlimited traffic will start emailing you once you generate significant amounts of traffic anyway.

Edit: Just to put that into perspective (since most people here are talking about the price of the server). If you buy a affordable server for 30-40€/month and you saturate the 1gbit/s NIC 24/7 you end up paying over 450€/month. If you buy a more expensive server (75€/month, 50TB traffic included, 1,19€/TB extra traffic) you save at least 100€/month. I guess what I'm saying is worry about the price of the traffic not the price of the server.

Edit2: My math is all wrong. Anyway if you need lots of traffic buy their regular servers instead of the auctioned ones, you will save money (more like 50+€/month, but still).
Now I'm imagining a viking longship but with the spiderbot legs from Wild Wild West.
We in Europe have the same choices to face. For example,

" In June, Nice said the £48,000 per year price tag of the drug, which could benefit 450 women a year, could not be justified."

https://www.telegraph.co.uk/news/health/11785840/NICE-refuse...
I work on an offshore oil rig and have to undergo Helicopter Underwater Egress Training (HUET) every 3 to 4 years. They tell us to wait until the "violent motion has stopped." I think it's so you don't get thrown around the cabin. And yeah, it happens really quick and even when you're expecting it and have been training for it, if you panic you won't get out.
No it does not. There are treatments that are deemed to expensive and will not be provided. Typically it will be a trade off between how effective the treatment is and how expensive it is. European healtcare systems does not have infinite money.
Assuming they were limited, but what if they weren't ? Some drugs/treatments cost more just because a greedy murderer was allowed to rack the price.
Maybe some middle road:

+ Netflix can send an email about optionally(!) confirming a user's address.

+ Now, rather than disabling all features and slowing down on-boarding it is possible to update the communication towards unregistered users.

+ If an email has to be sent to an unconfirmed address, preceed it with a warning. If pietjepuk@gmail.com has been confirmed, but pietje.puk@gmail.com not, emails for the latter will have this warning automatically.

+ Remaining option: do you want to send regular safety requests to unconfirmed addresses as provider? Policy might differ. However, it is possible to use this email to tell the user about safety/security w.r.t. your system. I'd say yes.
I credit much of my current aptitude with (and interest in) computers to getting to use one throughout my childhood with no restrictions. I understand it can be nerve-wracking for parents ceding that much control to children, but I think children are both smarter and more self-disciplined than we give them credit for and I think digital free range can build independence in the long run. Maybe my opinion will change when I have kids of my own someday. Who knows.
Have you looked at the actual XML? Parts of it are just containers for binary data. How do you parse a tag that basically means base64-encoded Word6-style Compound Data? Good luck with that.
Can't understand people who are trying to place blame on a single service. IMO Gmail has to make those addresses disabled by default. I doubt that most mistypes come from dots, so it is useless to handle mistypes. So it is only useful to have those multiple email address to use them in different places. Then why enable them by default? You can still own them but they can be disabled until you need them. As for Netflix it is obvious that emails have to be verified before any usage begins.
This is a very US-centric answer. In other countries there are absolutely job security benefits to being an employee.
Did anyone else use the LM3909 chip to build an LED flasher, back in the day? It would blink once a second for 2+ years on a single D-cell battery.

https://hackaday.com/2018/01/04/there-once-was-an-ic-dedicat...
You know that in Europe you don't automatically get any lifesaving treatment that exists, right?

https://www.independent.co.uk/life-style/health-and-families...

https://www.theguardian.com/science/2017/dec/20/drug-giants-...

http://jme.bmj.com/content/27/3/179
I get how you could miss that "based" was not being used in the context you expected, although the period after it instead of "in" or "on" should be a clue, now you want me to explain GenZ? It's a demographic group. Like GenX.

https://en.wikipedia.org/wiki/Generation_Z

"Gen Z is pretty based." translates to: "I, in general, like the way Gen Z is turning out."
Based as slang just means your cool, essentially. The quintessential example being BasedGod
Marketing says pretty much anything is for anyone.

Can't really blame marketing for a kid having something you think they shouldn't.

And, kids don't need iPads. Kids need attentive parents and guidance, then they can use anything.
Wasabi (s3 API) + Cheap VPS caches + Cloudflare.
I would switch to cloudflare paid tiers, if they still don't like you then simply remove Cloudflare from this setup. It should infact be possible to offer this as SaaS where you just need to upload api keys of wasabi, cloudflare, cloud vps providers and your media servers are ready for webscale.
Australia is mentioned in this article, big parts of the economy is dependant on the Chinese, it is the main export destination by far, with the stroke of a pen they could ruin entire industries.

Australian governments of any persuasion will happily kowtow over a few people going missing, there's far too much at stake for either to push back against it.
Thanks, this is not the first such story I've read. Should be noted though that we have had similar issues with country registrar's. Especially Germany that deny certain name servers for no reason
Does it means that if I know a person's email is firstnamelastname@gmail.com, I can register firstname.lastname@gmail.com to sniff all the email of firstnamelastname@gmail.com?

If that is the case, that is pretty scary and I cannot trust gmail to proceed my payment related email anymore.
Occasionally that is true, but often if you look more deeply into the pricing of these things, that's really not the case. Pharmaceutical companies are businesses, and they invested hundreds of millions, sometimes billions of dollars of their own money to discover these treatments. They have to be able to recoup that cost in the market place. If you do not allow them to do that, they simply won't invest in finding the treatments anymore.

There are alternative funding models, of course. We could have the government fund all pharmaceutical research. But that has a whole host of other problems. It's really actually a difficult problem without a simple solution. You might say "well, maybe we should do a mixed public/private model of some kind", and if you said that, you'd probably arrive at about what we have now in the US.
Which block storage solution do you use on those Herzners servers? Or are you directly using file system?
Facebook will give everyone the option to unsend messages, just like Zuckerberg
The parent doesn't sound too bad. They want to allow the child some freedom to use the device, but without eg Youtube recommending videos where gamers are yelling "I'M GOING TO RAPE YOU TO DEATH".

S/he doesn't seem to be asking for youtube to ban any youtubers or demonetise them. THey just want better filters.
I know a guy who once used one flickr pro account as a high res photo storage. He wrote a middleware to upload the photos there and used nginx as a proxy to keep links under his domain.

It was clever until it lasted.
Show HN: MOOCs recommended by HN, a Notion document
The Productivity Paradox: How Working Less Will Make You More Productive
He wants these features precisely because he is trying to be a good parent!

Or do you expect him to monitor his children's iPad usage literally every minute they are using it?
This is great.

One thing I could suggest for the XML list is xmllint. It can be really useful for converting xml to canonical format so you can then use diff to compare it.

E.g. something like
diff <(xmllint —c14 first.xml) <(xmllint —c14 second.xml)

I’d love to heat about more command line SOAP tools if anyone can recommend some.
The problem is that when you have a hammer (a software startup), everything looks like a nail:

1. There may be a shortage of Doctors to provide a 2nd opinion. The cost of a medical education is quite high, and the pay has been going down these past few years. This can't be solved by a software startup.

2. Hospitals have less funding than ever, and are trying to do more with less. So there may already be software out there, but they can't afford it (or the staff to to maintain it, never mind the staff to distribute it). This can't be solved by a software startup.

3. This is really a political problem, and again that can't be solved by a software startup.

4. A medical opinion may not be a binary option, and it could be a moving target where data changes by the day, and it could be a suggestion to collect more data, or even to talk to someone else. Opinions by definition are arbitrary, as where something like IBM Watson may just give you options based on probability (but that probability is only as good as the data you collect, which may not be all inclusive, and may be a moving target). So a startup might even make things worse as people base their options on incomplete data or dated options.

The depressing reality is that there is a great deal of economic inequality in our society, and that's reflected in the quality of healthcare that many people receive. It should also be noted that poverty can prevent access to preventative healthcare strategies which include everything from diet to access to basic medication.
Internal Documents Shed New Light on Shell’s Role in the Climate Crisis
This is one reason why the simple mindset of just using OpenGL or Vulkan would solve all Linux gamming problems doesn't work.
This makes no sense. Only 1 person can receive the email with or without dots. How can this be taken advantage of when you have to login on netflix to update your card details?
That depends on many "several years" ago that was. She's only been that for about a decade.
I wonder if there will be a quality filter too. When my kids (now 6 and 4) were allowed YT Kids, even the "appropriate" videos were mostly terrible toy reviews and things like that. I've no idea why kids like them so much. I uninstalled it. Now the only video app they're allowed is BBC iPlayer Kids, which is great (but I'm assuming UK-only).
Os-test: compare differences between Posix operating systems and find bugs
BBC Academy has a lot of journalism resources, all free.

I'm not sure if they are all accessible if you are outside the UK though (I assume they are since they have resources in multiple languages)

http://www.bbc.co.uk/academy/journalism
The site that doesn't verify that the user who signed up owns their email is obviously at fault here. I had someone register on Twitter with my actual email, and it was never verified. Later when I wanted to register on Twitter I found that my email was banned because the user who registered with it was a random spamming bot from Malaysia. I was never even notified when someone signed up with my email, nor when my email was banned. Looks like Netflix uses the same braindead system.
Sky, sun, flowers, fruits, trees, vegetables, animals, grass, dirt, etc.
If you did that with an iPad today, your kid would basically only watch the most horrendous youtube videos or play brainless games. That stuff just didn't exist when we were kids, using our just-for-nerds computing devices. The games weren't as addictive or plentiful, video apps tuning to their "likes" didn't exist. It's not even remotely similar.
We’ve struggled with this. We’re taking the bet that our kids will learn how to handle this if they have the ability to make wrong choices, and we convince them to make better choices later If they only know when to stop when they hit a fence, what are they actually learning about real life?

Not sure how it’ll work out. I’ll report back after High School.
> Pharmaceutical companies ... invested hundreds of millions, ... to discover these treatments.

Some purchased the rights only to rack up the prices. Just because they are a business doesn't mean they should be allowed.
But that is misleading too!

In the UK there are millions (probably) of people who bought their houses before the recent property boom, who theoretically have an asset worth at least that much on paper. But since all other property in the country is similarly inflated, the wealth is not real in any meaningful sense. It’s just a number.
That's a great anecdote. Where do you have it from? I'd love to find more of this kind of stuff.

And wow, by the way. That's harsh.
xmllint also supports XPath queries.
It happened something similar to me a few weeks ago: the scammer registered an account indicating my Gmail address, with dots. I wasn't signed to the service with that address.

When I asked Netflix's support to remove the association of that account with my e-mail address, they replied I had to change the card details with mine, because it was like I was "stealing" the scammer account credit card. I replied I would not add my credit card details. The operator then wrote me he was going to invalidate my e-mail address so that the user that would log in, had to change it. And that it should solve my issue.

The problem, for me, is not the Gmail feature. Nor the dots, neither the plus addressing. It's a lack of the validation systems. Just verify the e-mail ownership before allowing any interaction.
It is confusing. That's how they describe it then they show one number.
I Hacked an Election [video]
This is the outcome of lack of competition.

Also, Apple is not enthused about anything that might limit the ways in which a device is used. The whole point is that everything they do is focused on finding more and infinite ways to make a device used. Constraining use is deeply against the DNA of everything they are actually aiming at. There seems to be a real, deeply ingrained unwillingness to implement things that might reduce unfettered usage.

Truly this is politics. In politics, you say what people want to hear but do whatever you want. That's what Apple does - positions the iPad as kid and family friendly but just does what it wants.
My understanding is that 2001 isn't so much an adaptation of the novel as it is a script that was written through extensive collaboration between both Kubrick and Clarke, eventually adapted into both screenplay and novel. I've got quite an interesting book that goes into some detail about it - "2001: filming the future"

I think it may have been in there that I read something to the effect of "Kubrick withheld his approval of the book because he didn't want to hurt the release of the film."
1 number is more than useless
In TLS up to 1.2 straight RSA is an option. TLS 1.3 requires DH so it has this simpler flow. You are correct that with DH we already don't need RSA encryption, but did you make sure to remove straight RSA support from all your servers?

Yes the specification says, and means, transcript. Signing the entire communications transcript means a MitM can't touch anything.

Example, if a client optimistically wants to use VeryVerySecure feature and we are a MitM who wants to prevent that, we might think to fake a message from the server saying "No, I don't understand VeryVerySecure - do WeakAntique instead". In TLS 1.3 this extra message will be in the client's transcript, so a transcript signature from the server without any mention of VeryVerySecure fails and our MitM attack with it.
That is probably true, and might help - but that only gets you so far, can't program your way out of everything. For high reliability, you'll need redundancy (and thus fallback and voting and whatnot), which will a) drive up HW costs, while also b) increasing complexity.

I do agree there are some LHF opportunities to learn from aviation, but doing that is insufficient.
It's nice!
Quick feedback for UX improvement: let the user upload a file first, detect the extension, then ask what file type to convert to.
I don't know. I grew up in the XP era and I played a lot of brainless games (3D pinball was where it was at) and read a lot of mindless Wikipedia articles as a kid. But then I got curious about how it all worked behind the scenes.

Maybe I'm too optimistic, but my hope is some of that inquisitive spirit hasn't been totally quashed. It's too depressing think that kids are not still discovering the internet as a virtually boundless repository of human information and a fascinating set of technical problems.
OK, how does this work exactly?
The ipad is meant for everyone... for everyone to get hooked on using it.
-I've done this in simulator a few dozen times (mandatory training for anyone boarding a helicopter for going offshore, refresher courses every four years.)

It is difficult enough in the simulator - which, as you say, simplify matters immensely over an actual crash:

a) The pool with the simulator is well lit. Many places, it is even heated, so you don't get the added stress of being lowered into icy cold water.

b) Each participant has a dedicated rescue diver sitting opposite him, ready to assist at any sign of trouble.

c) The simulator is lowered into the water in a controlled fashion, without any jolts.

d) There's only one seat by each window, so you don't have to first help your mate out, then exit yourself.

Incidentally, I've found it is much easier to get out after the cabin is inverted - your buoyancy makes you pop from your seat like a cork the moment you open the harness; being inverted, you are being pushed towards your seat, and all you need to do is to pop out the window, grab the opening with one hand, undo the buckle with the other and pull yourself out. Much simpler when your buoyancy works with you than against you.

During my last refresher, we asked whether we could make it a bit more realistic by putting out the lights and leaving a few newspapers and such in the cabin (for floating around once it filled with water, further disorienting you.)

We were told in no uncertain terms that wouldn't happen; it was deemed too risky for the rescue divers - who were fully kitted out with oxygen an'all.

Note to self: I do not want to be in a helicopter emergency landing on water. Ever.
That's incorrect. The validity of accepting the '+' character as part of an email address is part of the standard (-though it is a standard ignored by many prominent websites, aliexpress is just one example I believe)

The acceptibility of the '+' character is specified in RFC 5322 [1].

However, the behaviour where an address comprised of:

local-part "+" some-suffix "@" domain

is automatically routed to the address:
local-part "@" domain

it certainly not part of the standard. I find it very useful myself and would be displeased to see that functionality removed, yet this is certainly not part of the standard.

[1] https://tools.ietf.org/html/rfc5322#section-3.2.3
Perhaps after the outrage they changed. I remember the articles clearly.