skysight-inc/HackerNews huggingface dataset:
>Damn if you do. Damn if you don't.

This isn't true. FB is pretending like it was entirely their decision and as if they actually care about privacy.

Now if they had said, "With the Clear History feature, we will be aligning out platform with the interests of the European GDPR" or something of that nature. This would come off more honest
It's still on after 9 hours from the OP. I suppose someone in ACM management is obsessed with their intellectual property being stolen, including their public articles. Good luck to them.
This is what getrandom(2) does, and using getrandom is the recommended path. However, if you use getrandom(2), and you are in early boot, such as by systemd's journald, and you are using it for some pointless HMAC mechanism with a randomly generated key for no specified security goal and no clearly articulated threat model, then you can end up hanging the boot, leading to the entropy deadlock situation I described.

So getrandom(2) will block until the pool is seeded, and all newly written application should use it, and existing applications should switch to it. But you still need to try to lazily generated random keys, and think very hard about whether you really need to generate cryptographic grade random numbers before the user logs in.
> considering that many emails have embed HTML and would ideally use a modern web view to render correctly

It might be me, but i prefer them to be rendered incorrectly in a text-only view :-P. I use email since the 90s and so far i do not think i can come up with any case where the HTML in an email was actually useful and not used for fluff (which i do not mind but can do without), branding (which i do not care at all about) or -way way more often- advertisement.

Also almost all HTML mails i've seen come in text-only version too and any useful bits are attachments anyway.
Sounds very promising!

To make sure(er) the PDF sticks around, here it is stored on IPFS: https://ipfs.io/ipfs/QmRKHcRYBpYJBWbiRkPeGA9kWfsjUtZPq45oMi6...
There is almost universal hatred of the Slack app in our client relations department, due to performace. All use Mac laptops or Windows desktops, none of them know the term "Electron".
Lambda calculus is an attempt to build the foundations of computation using a couple of primitives and some re-write rules. It’s the equivalent of ZFC for math.
Suspiciously good looking profile pic for the developer too;
https://www.google.com/search?tbs=sbi:AMhZZite6RvKwDFjIobMX-...
Not as many times as you'd think and again that us utterly irrelevant.

It's not how many time you put it in it's into what and then what that thing can do with it.

Not all passwords are equal and for most people their primary email is the domain admin/root credentials for of their life.

And it isn't relevant if I personally audit every application or not I can build a trust model based on my risk appetite and the threat models that are relevant to me and the situation and everyone does it even if they are not aware of it.

I can put my trust in a specific vendor based on their business model, their reputation, the resources they have available and my experience with them and the legal frameworks surrounding the service/product. I can put my trust in the community at large in the case of open source products because while individually neither myself nor most other user validate every line of code and every commit it is possible and the community at large does do that.

Let me ask you this I this wasn't and email client but say a thick client for your online banking would you still ask me the same question? bare in mind that having your email compromised today is considerably more damaging than someone logging into your online banking as it's much easier to sort the latter and there are also considerable mitigating security controls around it.
I recently soldered a wire to my garage door opener on the wall and ran it to a relay and then to the pins on a raspberry pi. Knowing the state of the door is key because the opener is just a toggle. I also have my alarm system hooked up to the pi, so it checks the state before and after any request. Repeatedly asking it to open will open it, or return success of it already is. Same with close.

It took a bit of testing before I trusted it would all work the way I thought it would, but now I user it and don't even think about it, it just works and is handy to have.
Hey Merantix team,

I'm the co-founder of Lunar Careers (https://lunarcareers.com/employers), an intelligent talent-matching platform for entrepreneurial companies, which aims to help bring your jobs in front of the right talent and vice-versa, by automatically matching interested and relevant candidates with your jobs based on skills, language, experience, education and more, as well as enabling and reminding your employees to refer their friends who would be well-suited for the position.

We're working with a number of companies in Berlin as part of our beta and would like to invite you and your team on board, for free until Q4, together with companies like Wayfair, Taxify and ResearchGate, which are already recruiting using our platform - just create an account and you'll be able to post your jobs.

If you want to know more before trying it out, feel free to email me at alvin.stanescu@lunarcareers.com or PM me here on HN.

Thanks,
Alvin
Online Video Advertising: The Ultimate Guide (2018 Research)
I would and have asked: Given two employees, employee A who works eight hours/day and produces X units of work and employee B who only works four hours/day but produces 2X units of work, which one would you prefer assuming both A and B are paid the same salary?

If they don't answer the question, or answers that they prefer employee A, or claims that the scenario is unrealistic because one developer can't be four times as productive as another, then I will probably not be a good company fit.
However, since there’s no way to “slice” a value, subtraction isn’t possible.

That's incorrect. It's trivial to implement subtraction in GNU Make. I did it as part of my GMSL project: http://gmsl.sf.net/ In fact, you can implement a whole load of functions natively using GNU Make's macro language.
> similar to Google's observation that success in programming competitions is negatively correlated with job performance

I find it very interesting that Google then interviews with programming challenges...
Show HN: Skor – Drop-in microservice to get Postgres changes as JSON webhooks
Hey AMBOSS team,

I'm the co-founder of Lunar Careers (https://lunarcareers.com/employers), an intelligent talent-matching platform for entrepreneurial companies, which aims to help bring your jobs in front of the right talent and vice-versa, by automatically matching interested and relevant candidates with your jobs based on skills, language, experience, education and more, as well as enabling and reminding your employees to refer their friends who would be well-suited for the position.

We're working with a number of companies in Berlin as part of our beta and would like to invite you and your team on board, for free until Q4, together with companies like Wayfair, Taxify and ResearchGate, which are already recruiting using our platform - just create an account and you'll be able to post your jobs.

If you want to know more before trying it out, feel free to email me at alvin.stanescu@lunarcareers.com or PM me here on HN.

Thanks,
Alvin
Can't possibly work. Everyone is going to have their own notebook for passwords, protected by rubber band. Yay.

Also, I use a password manager on my machines (for websites I use privately: amazon, taxes, etc.), a different one at work (for corporate tools). I also use my own passwords + 2FA(if available) for things I use at both places (like my own gmail, HackerNews, etc.).

Forcing users to remember/write down something is just a bad idea. Chances are your "reset password" feature will be DDoS-ed into oblivion by your legitimate users.

Much better alternatives:

* the Google push notification: [0];

* a YubiKey or similar U2F token [1];

* a way to turn my smartphone into an automated keyboard that holds my secrets.

[0] https://www.howtogeek.com/260369/how-to-set-up-google%E2%80%...

[1] https://www.yubico.com/start/
When we do destructive testing in engineering, it's because we know for a fact that stuff fails for any or no reason, and while it might be rare, it happens all the time at scale. When the framers of the constitution designed strong separation of powers, they absolutely explicitly expected presidents to try to become kings, and so designed very strong safeguards against that happening.

The problem with your Facebook hypothetical is the absence of a mechanism by which the bad situation happens. How do we get to a point where Facebook to any practical degree has the power to prevent someone from dating at all? There has always been smaller and larger groups of misfits and outcasts, and they have generally been capable of connecting with each other beyond the majority hegemony (caveats here of course for repressive government power, but that's out of scope for this hypothetical, and belongs in constitution-related hypotheticals).

But let's then consider the hypothesis: Even if they do get to a significant position in dating, there are plenty of reason to believe they wouldn't use that power to prevent "anti-Facebookers" to date: privately owned publishers and printers happily print and sell the communist manifesto. You can sell your anti-Amazon book on Amazon, and publish it to Kindle. You can search for all the reasons Google is the worst company ever on Google. You can put "I hate Tinder" in your Tinder profile. And you can form a group about why Facebook is awful on Facebook, organise a "down with Facebook" rally using Facebook events and sell "Facebook sucks" stickers on Facebook marketplace. The logic of private markets very simply shows that it's plainly in a company's interest not to discriminate against people for the transgression of merely not liking the company.
I can't read the actual paper, but from this summary it sounds like people who have just started doing one job aren't as immediately effective as people who've shown they're experienced and effective over time at a completely different job. That doesn't sound like a very controversial finding, nor does it tell you very much about their long-term prospects.
> You can't message someone you're not friends with can you?

Yes you can. I don't have any 'friends' on Facebook but have a long list of Messenger contacts and groups.

That's probably more useful information to Facebook than some nebulous graph of people I vaguely know. Messenger contacts are those with whom I actively engage.
Alibaba, Tencent and Baidu turn sights on short video
You discounted an "all my friends voted for..." argument with a different "all my friends voted for..." statement.
Isn't the first problem that mr Marlinspike has been holding off federation of the Signal protocol? If anyone could run a server and join the Signal network (like Riot/Matrix, who got it right), the problem of circumventing censorship would be a lot easier.

Any one of these federated servers could use whatever tricks they like to circumvent censorship, and yes they'd risk getting banned themselves if their circumvention measures are violating TOS of where they're hosted, but they wouldn't have to demand special treatment in the light of that, like Moxie Marlinspike did, because it doesn't happen to block the entire Signal network at once.

Their lack of federation is their censorship weak spot. I haven't heard a single reason for holding off federation from Moxie (and the "best" reason I currently can come up with is that he has issues letting go of "his baby", other reasons being more nefarious). There's a lot of strongly principled wording about why Signal should or should not do certain things, because Signal doesn't want to rely on anything but the protocol itself to guarantee its security, privacy and censorship resistance.

But really, what are these principles worth if Signal is in fact reliant on a third party (Amazon) closing their eyes to violation of their own TOS? They shouldn't be, and federation allows for that property.

And to add one more reason, it's not entirely fair to Amazon. By using the load balancing trick, the only thing that Signal risks is getting banned from Amazon, they can rent another server from someone else and set up shop there. However, by allowing Signal to continue to use their load balancing service in this manner, Amazon is risking having their entire service banned by an oppressive regime. It's not really cool of Signal/Moxie to ask Amazon to take this risk for them.
What features of Postbox do you use that are not available in Claws (or derivatives) or Thunderbird? Serious question, I've love a better email experience.

In any case Postbox is not available on Linux, but I'd still like to know.
I think the bigger take away for me is that what constitutes low level has evolved over time. I still think C is low level because you have to manage your own memory and can play tricks with pointers and memory that other languages protect you from. Meaning that low level takes off a lot of the training wheels. The compiler still does what it can and optimizes things but you have a far greater ability to shoot yourself in the foot than in some other language. The arguments about what a "real" low level in these comments seem mostly pedantic.
There's more to life than money (like getting to work on cool stuff), plus you know the government isn't going to shut down in 9 months like every startup, or get acquired, or "restructure" your job to puff up the numbers this quarter.
Root | Columbus, OH | Full-time | Onsite | $80k-$150k | https://eng.joinroot.com

Root is an auto insurance carrier, like GEICO and Progressive. We use data science to identify and insure good drivers, reducing insurance premiums for good drivers significantly as a result.

We're a startup — we're 80 people who have been working on this since March 2015. We've built an iOS and Android app that gathers data on how well people drive. We use that to set insurance prices. To build the best possible product and user experience, we went through the arduous process of starting an insurance carrier from scratch.

We're focused on becoming a national insurance carrier and are now live in 16 states.

We've recently raised a $51M Series and we're looking to bring on more talented engineers.

Tech stack involves Ruby / Rails and Javascript / React Native.

Email me at chris.evans@joinroot.com to apply and we'll respond to you promptly.
This is consulting blog spam.

You see this stuff all the time:

* Person starts $consultingCo

* Person creates website for $consultingCo

* Person adds "blog" section to website

* Writes a few vague, high-level pieces like this

* Spams them everywhere

* Almost all new business still comes from Chamber of Commerce mixer

* Person loses interest and stops updating "blog"

It reads like it's trying to get the attention of a CIO at some Midwestern Widget factory.

I'm always on board with idea of spreading knowledge and ideas around. High-level, introductory pieces are also good.

BUT... You've got to know your audience. The typical HN reader is not going to find an article like this novel or useful, and might even find it off-putting. The type of people you want to read this article are probably not avid HN readers.

All that aside, you've also got some pretty dangerous generalizations like:

> "Is my data just key/value pairs? If yes, use DynamoDB. If no, keep going."

Yikes. I really hope deeper considerations are being paid to choosing a database technology beyond "Welp, it's just k:v, let's use NoSQL!"

If you have some novel, technical insight into utilizing AWS, please share it here. This article does not qualify.
Really Springer? That's how you “solved” your fake papers problem?
I recently switched from Thunderbird to Evolution and I have to say the search in the latter is bordering on completely useless...
1: An example? Android's aggressive wifi roaming is... just not working.

2: Updates are an issue, even with popular phones.

3. The Facebook app on IOS can NOT read my sms on IOS. Yes it can and does on Android.

4: Age, I know since I have to thow them away myself. Apple may make the devices slow down (personaly not observed it, but I use no "benchmarks" just since the only thing I care about is my personal impression.

5: It is annecdotal, but it is how my family experiences it. On a daily basis.
SEEKING WORK - Remote

Location: Europe

Remote: Yes, preferred

Willing to relocate: No

Technologies:

- C, C++, Perl, Shell, PHP, Lua, Java...

- HTML, CSS, Javascript, JQuery

- SQL, Postgresql, Oracle, Mysql, DWH...

- XML, XSLT

- Web Scrapping, Extract-Transform-Load (ETL), Fulltext search (SOLR)...

- Nginx, IP Networking, Distributed systems...and more

Github: https://github.com/samsk/

OSS Projects: https://devel.dob.sk/

Language: English, German

Email: ja.hn3[at]mailnull.com or https://dob.sk/hire-me/

I'm a Linux/Unix C/C++/Perl/... Full-Stack developer (contractor/freelancer) with over 15 years of experience in various technologies...
Hi! I work on this project.

Nothing wrong with a full VM, but I don't think it's a panacea (and you probably shouldn't guarantee security). You may have taken the UML comparison to heart: did you look at the KVM platform? I'm not clear on the distinctions you're making in that case -- a kernel escape would look a lot like a user-space VMM code execution vulnerability (which also sits on top an exploitable kernel).
This an abhorrent chain of logic. By this rationale everything should be permissible if it’s profitable and legal in the country it’s done in. Ethics be damned.

Slavery?[1] Fine. Assisting with genocide?[2] Ok. Human trafficking. Sure, as long as we’re making money. Now consider the likes of Facebook or Google. If Iran wanted to purge an ethnic minority from their country and offered a government contract to Facebook to help identify said minority, how is it in the interests of Facebook stockholders to prevent genocide in countries ruled by dictatorial regimes?

Finally, if what you say is correct - that in the current system the wealth of the shareholders is what matters most - I think the broader question becomes: “Why should western democracies continue to permit Laisser-faire capitalism if it refuses to impose any ethical or moral boundaries on itself?”

[1] https://www.quora.com/To-what-degree-has-Dubai-been-built-by...

[2] https://en.m.wikipedia.org/wiki/IBM_and_the_Holocaust
Hey fortrabbit team,

I'm the co-founder of Lunar Careers (https://lunarcareers.com/employers), an intelligent talent-matching platform for entrepreneurial companies, which aims to help bring your jobs in front of the right talent and vice-versa, by automatically matching interested and relevant candidates with your jobs based on skills, language, experience, education and more, as well as enabling and reminding your employees to refer their friends who would be well-suited for the position.

We're working with a number of companies in Berlin as part of our beta and would like to invite you and your team on board, for free until Q4, together with companies like Wayfair, Taxify and ResearchGate, which are already recruiting using our platform - just create an account and you'll be able to post your jobs.

If you want to know more before trying it out, feel free to email me at alvin.stanescu@lunarcareers.com or PM me here on HN.

Thanks,
Alvin
I'm pretty sure the UK MacBook charger plug is not grounded. It has the ground pin, of course (UK sockets won't accept a plug without it), but there's only the standard 2 wires going from the detachable plug to the main body of the charger.
Hey SumUp team,

I'm the co-founder of Lunar Careers (https://lunarcareers.com/employers), an intelligent talent-matching platform for entrepreneurial companies, which aims to help bring your jobs in front of the right talent and vice-versa, by automatically matching interested and relevant candidates with your jobs based on skills, language, experience, education and more, as well as enabling and reminding your employees to refer their friends who would be well-suited for the position.

We're working with a number of companies in Berlin as part of our beta and would like to invite you and your team on board, for free until Q4, together with companies like Wayfair, Taxify and ResearchGate, which are already recruiting using our platform - just create an account and you'll be able to post your jobs.

If you want to know more before trying it out, feel free to email me at alvin.stanescu@lunarcareers.com or PM me here on HN.

Thanks,
Alvin
Anyone registering a .app domain knows it will have HSTS, so they feel it's appropriate for their site to use it.
Hey Sauce Labs,

I'm the co-founder of Lunar Careers (https://lunarcareers.com/employers), an intelligent talent-matching platform for entrepreneurial companies, which aims to help bring your jobs in front of the right talent and vice-versa, by automatically matching interested and relevant candidates with your jobs based on skills, language, experience, education and more, as well as enabling and reminding your employees to refer their friends who would be well-suited for the position.

We're working with a number of companies in Berlin as part of our beta and would like to invite you and your team on board, for free until Q4, together with companies like Wayfair, Taxify and ResearchGate, which are already recruiting using our platform - just create an account and you'll be able to post your jobs.

If you want to know more before trying it out, feel free to email me at alvin.stanescu@lunarcareers.com or PM me here on HN.

Thanks,
Alvin
Well I was having a good day until you had to go and remind me about the demise of Eudora... ;)
12 JavaScript Trends That Will Dominate 2018
This conversation seems more analogous:

"I raise elephants, but they are bred to be as small as possible."

"They're _either_ elephants, _or_ bred to be as small as possible."
In a competitive environment you have to compare yourself to others today, not yesterday. Your relative education level and the demand at that level is what counts.

So while your absolute education opportunities may be better than ever, the requirements to get a half-decent job are higher, too. Which means you have to learn for longer to reach a higher absolute level. But even ignoring other resources, the poorest may simply not have as much time to spare as those from a wealthy family.
I agree! I'm frequently paying for software even if I won't use it after a year just to test how well it works. Unpaid is not sustainable. But having source code (Maybe GPL?) is also important.
Ask HN: How much to charge for ads?
I know it's a broad question, but is there a quick formula I can follow to know how much I should charge?

I have around 1000 unique users a day on my site, not sure if other info is needed.

Thanks!
Sounds like it should be straightforward porting it to run on BSD or Windows, as it implements everything rather than just pass through syscalls.

I wonder how the performance of such a port would compare to WSL.
What makes .net OK but .app is "selling off the web"? I mean, besides traditionalist conservatism?
Custom Domain in GitHub Page Support HTTPS
It's noticeable on my 13" 2017 non-touchbar MacBook Pro, but only when you run your fingers along the part of the case above the keyboard.

It was much more noticeable on the MacBook Air, with pretty much the entire aluminium surface of the case having the issue.
There is an easy way to avoid this, don't go to the Emergency Room unless you have an Emergency.
The Russian Comic Writer Who’s an Antidote to Mad Times
Signal was hiding behind Souq.com which is owned by Amazon.
That is a tough question but if presented to me in the context of this thread I would probably respond, that it is a poor analogy.

Why do we have to make this complicated? The creator is using Electron, and within that given framework putting focus on RAM optimization. Moving on.
The joke was that its a framework to do what is now natively supported. I would look into CSS grid.