skysight-inc/HackerNews huggingface dataset:
Surely this is sarcasm. Just in case it isn't, it's only fitting to link back to what Moxie Marlinspike wrote about PGP/GPG: https://moxie.org/blog/gpg-and-me/ (HN commentary: https://news.ycombinator.com/item?id=9104188 ).

TL;DR: When will people start using gpg: they won't.
Honestly, and none of you are going to like hearing this, and the Signal people aren't going to appreciate me saying it: if you're serious about messaging securely, don't use Signal Desktop; don't use desktop secure messengers at all. Desktop applications are incredibly risky, far more so than iOS mobile apps are.
It also relies on clients misusing an API call. And then passing the result to a full HTML viewer that can access the internet. So, again, not an exploit if you use plain PGP.
Careful, though. I've seen many "more junior, recent joiners" want to do some pretty risky things with little upside.

Ideally, this is no different than being a parent. You want to help your kids not make mistakes. Thing is, they are the ones taking on the risks, you are not. Offer advice and work with them, but ultimately, you will have to let some of them make mistakes. If you are lucky (and many folks will be), some of the mistakes will turn out as hugely successful gambits. :)
Because there's at least an actual idea, and an intent to execute on it. A lot of the fraudulent ICOs, on the other hand, don't even have that -- their real business plan is "take the money and run".
> If I want to put an open source app in the App Store, that’s not a business model for me. It’s more just personal expression.

Try convincing a regulator of that.

But it doesn't matter, you're still logging PII. GDPR doesn't make any distinction of profit vs. non-profit vs. personal ownership. You're as liable as an individual as an organization.
We're building a hosted SaaS and open source enterprise version of Apache Airflow [1] at Astronomer [2].

The goal of our startup is to solve all of the pain points where the framework stops and make the best version of operationalizing Airflow on Kubernetes; and authoring, deploying, and running DAGs in a distributed execution environment in production at scale.

It's pretty interesting to learn and see how features like orchestration and dynamic provisioning on a platform actually work all the way down.

[1]: https://github.com/apache/incubator-airflow/

[2]: https://www.astronomer.io/
Why not compare it with heart surgery while you are at it.
Come on now. I'm asking for something that was purported to exist. If it doesn't, fine, but don't change the discussion to something else.
>Try to imagine. There is no google search to find out how to make children. The closest library is far away and it's not that common to go to school and learn to read. That leaves you with the opinions of the family, the neighbors and the priest, who may not know much either and offer different tales.

I have to assume you're trolling, but to be charitable, here[0] is the Wikipedia article on the history of birth control. It starts in 1800 BC with ancient Egyptian writings describing the use of acacia and honey as a spermicide.

People knew where babies came from way before the internet.

[0]https://en.wikipedia.org/wiki/History_of_birth_control
Presumably that fraud involved assets that belonged to the corporation (or were represented to creditors as such) being transferred outside the corporation to other entities controlled by the owner? That will pierce. Imagine instead someone who builds a store in a location with insufficient commercial traffic and whose corporation fails for that reason alone: her creditors can't take away her house, her retirement account, or some unrelated business.
No, I'm saying use just PGP - manually - and don't use any client interface to it. Control the encryption yourself. Your sarcasm is misplaced.
They don't own the data either.

Think about. A person doesn't own the random bits (data) about them that goes through and is stored on various systems they interact with. Under the GDPR in the EU, they might have a right to know what is stored about them on various systems, but they don't "own" that data.

That's impossible and doesn't make sense.
Signal Desktop actually used to be a Chrome app. Then Google announced the deprecation of that feature and they ported it over to Electron.
I'm saying there are eight papers on that list which have "side channel" in their titles. I assume, based on those titles, that the papers have something to do with side channels...
No one is saying it was entirely fake, just that it was likely a staged event, perhaps even scripted. Maybe they had talked to that restaurant before hand and told them this was happening, then they edited it afterward to get rid of delays.

There's nothing entirely wrong with that, but not being open that such a thing occurred makes you look very dishonest...and if you can't answer basic questions about the event, you're probably hiding something. The tech isn't that different from what some telemarketing companies do, so it's not like people are saying this is impossible (some are very convincing.)
Is it typical to write $ thresholds into LICENSEs?
> Unlike startups, it's not like Google's business depends on investors supporting lofty goals. There would seem to be no benefit to faking a demo like this.

You could say the exact same thing about Microsoft and the Milo demo.
It's about time. I was shocked when giving a "code along" presentation and found that none of my audience members with Windows 10 laptops could follow my presentation because the command prompt didn't have SSH. No SSH for crying out loud!
Look, yes, obviously there are more jobs in the biggest cities. Why people insist on translating this into “there are no jobs anywhere else” is anybody’s guess. But it extends beyond preference or opinion and into objectively, verifiably, factually wrong territory with remarkable consistency.

It makes the people who claim it look ridiculous, but they seem to think it makes them look — I don’t know what — something not ridiculous. They don’t merely say it; they say it with aplomb and even contempt. (Maybe because they get universal agreement every time they bring this up with people in their real life?)

The person we’re responding to in this thread is an almost archetypical example. Is this some sort of “winner take all” bias? It’s very weird.

Programmers in the most expensive cities are doing fine. But this cultural wisdom is doing very real harm to people who would be much better off in cheaper cities. They think, “well, sheesh, it’s hard here, but I probably couldn’t even find a job in Pittsburgh.”

And that’s factually, dangerously wrong.
The indicators are a tiny subset of the actual requirements involved in a production vehicle. In fact, there are examples of European production cars that can't be street legal in the US, and the companies involved chose to simply not sell them here. Smart cars were impacted by this for awhile (no crumple zones), they eventually dealt with the problem though, and as I recall there was a production ferrari that couldn't be driven here because ferrari chose to simply not sell in the US rather than conduct two crash tests or something like that. Can't recall the details.
> then you will be warned to become compliant long before you will be fined

citation needed

> if you do not collect data that you have no use for you are 95% there.

I have always been respectful and even never required emails on signups. I am not 95% there because there is a ton more to do. In fact i am at 5% because i have a lot of small scale past projects. Not everyone is a VC-funded startup.

That's the kind of emotional reaction that everyone has to GDPR. Yes we like respecting privacy, it's a good thing, but there is a lot that is problematic with this legislation.
Physicists make first 3D measurements of proton’s internal structure

https://www.nature.com/articles/d41586-018-05186-x

In short, this is a new type of "electron microscopy" for 3D imaging of sub-atomic particles. Very exciting!
And we're back at "really good security is to inconvenient to use" :/
My comment is not intended to be snarky. I am aware that it sounds otherwise and I thought about adding a few more sentences to counter that, but there is just not much I have to add, it would just make the comment longer. So I decided to keep it short even if it might sound a bit snarky hoping that everybody is able to infer that I wanted to say that this is not some unique burden thrown at software developers but that we were some kind of exception not having to deal with that much regulation as other industries.
I know I took a digital logic course and did some fpga implementations in it, man that was hard. I am petrified of having to deal with HDL in the near future for my research, maybe I'll take a class or something.
There doesn't need to be a GDPR opt-out. They just need to ask for permission to use the data.
Without S Mutans, there wouldn’t really be a need for implants, prosthodontics, etc. Sure, you’ll have orthodontics left, but pretty much anything else (including even routine cleanings) would be wiped out.

It’s no surprise the FDA has suppressed this industry-changing research that would save so much pain and suffering in the world.
For some reason, I can't reply to Max_aaa's question directly.

> How do you guaranty that nothing in the messages being handled by the server is "sensitive personal data".

You guarantee it by reading the rest of GDPR. It defines sensitive personal data separately than personal data. Sensitive personal data is defined by GDPR to be things that can be used to discriminate against the individual, such as race, ethnicity, religion, health information, credit information, age, etc.

EDIT: And what I mean to say is that if the messages aren't passing through the server or being stored on the servers, then the only info being handled by the server is the meta-data including IP address, which is not included in GDPR's definition of _sensitive_ personal data.
We changed the title to that of the article. Submitted title was 'EMDrive “thrust” caused by magnetic interaction from electric cables'.

Submitters: the site guidelines say "Please use the original title, unless it is misleading or linkbait. Don't editorialize." Please follow the rules when posting here.

https://news.ycombinator.com/newsguidelines.html
Posting under an alternative account for obvious reasons.

Bad API's used in IoT are a huge vector for attack and too few companies in the mobile first world have a bug bounty program. I found a similar problem with an API for an app that comes default installed on most android phones I've purchased (think smart phone as a TV remote). I reported it and got no response. Their homepage claims the app is being used for 10's of millions of smart devices like A/C, TV's, Fridges, Microwaves, etc. The vulnerability allowed full account access.
I am working on a platform to keep your health proactive, tied to your current ins coverage. you will get notices re: needed checkups, shots, etc. - as if you had a private physician's assistant. It will est what is covered vs out of pocket, recommended vs strongly recommended, etc., and stats. The dashboard is very user friendly - you can keep it simple or load it up with widgets. Notifications etc.

Can't wait to share here in a 2-4 months.
It's just A speculation about what it's directed at. We just can't take any chances given the steep fines.
Looks pretty cool. Is the idea similar to Algolia or different?
It really should be defined by company size or revenue. If I my site goes viral and a small web app suddenly has 2M lines of logs, but my revenue is small/non-existent, then there's no reason to comply. If that pushes my revenue over 1M euros a year, you now get pushed into a zone where you should be compliant, and you have enough revenue to afford it as well.
Does Plex's solution support IPv6? I tried querying some IPv6 addresses in a similar way and it didn't respond with anything, but perhaps I wasn't doing it correctly.
You can use ConEmu instead of the stock console.
Yes, of course, but there is no finite propellant being consumed.
This:

> it seems like long term strategic thought is more important than ever

is true for the minority only.

Of course any description of what's happening and what can be done to prevent it is to the right of the Overton Window and is thus illegal to discuss on this forum.
You could build and drive a car you built yourself with no regards for your personal safety - it's your car after all, and it's your business if you get injured. But could you sell such a car?

You could build and use a service with no regards for your personal privacy - it's your service after all, and it's your business if your data gets leaked. But could you offer such a service?
Jeez man, why are you always so full of vitriol? If I'm incorrect, just nudge me in the right direction. No need to get all bent out of shape!

I thought that you were saying that a change in the balance of arrests, with a decrease in those made by peace officers amidst an increase in those made by other citizens, was likely to be empowering to people seeking to victimize people of color. Did I have that wrong?

If that's what you were saying, then yeah I think that's nuts. If people have a goal of subjugating people of color, then the existence of professional police (to the exclusion of normalcy of arrests by other citizens) is working wonderfully to achieve that end.

The idea that a larger share of arrests being effected by people who aren't professionally employed to do so being a conduit for increased racism is, as far as I can tell, quite unfounded.

In fact, the origins of professional policing in the US are in part from slave patrols, which were formed precisely because overwhelming majorities of people refused to arrest slaves who had run away.
I think its a great idea.

Topics shouldn't be the same as those found on hackernews, those would be redundant though.

I would suggest using discourse.org instead of rolling your own phpBB instance
Perhaps it costs money to do so, and the company does not have enough working capital + lines of credit to make the payments necessary?

I feel like your statement here is basically "you are a business, therefore it is impossible for you to run out of money", which -- superficially -- seems very naive.
SPOILER :(
SMART isn't quite an alternative to OKRs, it's a complement -- SMART is a good guideline for defining KRs (or any goals)
Store Employee with Learning Disability Encourages Good Customer Etiquette
This is a rare case where things are inconvenient for nerds to use, but more convenient for ordinary people, who tend to be more comfortable doing stuff on mobile platforms than nerds are.
"The decline in the rate from 2016 to 2017 was the largest single-year decline since 2010," the CDC said ... Historically, the number of babies born in the U.S. has gradually risen since a sharp decline in the early 1970s.

Particularly given the parallels, I'm surprised there's so little talk of the political climate in connection with these episodes.

I expected this to happen.
Gore Based Entertainment, and why I avoid it
Has tech company management read Doerr's book?
OpenSSL? Remember Heartbleed?
Trespasser
yeah there was a bit with a keypad for getting into the Ingen employee village, I spent ages trying to use the pointy finger and a mouse to press the keys on the keypad... I couldn't do it, but there was a break a bit further along the fence/wall. They wrote the code on the wall (upside down) next to the keypad, but I guess they realised it was too cumbersome so they made a break in the wall further along.
I was always uncomfortable about signal on non-iOS devices. I feel the same about password managers too, it’s a giant PITA but I specifically do not want all my passwords in one place if that places is a wild desktop.
Well yeah, obviously. But that doesn't per se vary by state, it varies by jurisdiction / judge / jury, etc.

My point is simply that there are no state-by-state standards for this, which was GP's claim. States don't allow anybody, peace offer or not, to use any amount of force beyond what is required to effect an arrest.
And hardware can't be mismanaged?
While I do think it's silly to assume that #DeleteFacebook is responsible for any serious movement in numbers, I also don't necessarily agree with the interpretation that this is just a downturn from how active Facebook was during the election; it seems it probably would've already dropped off and stabilized if that were the only cause, since the election hasn't been hot news for quite a bit now.

Speaking from personal experience, the scandals Facebook has been involved in are only a small part of why I deleted Facebook; more than anything, I just felt like it was not providing any value to me, just a pure time sink that I became less and less interested in. Maybe I'm not alone.
How do you know that a small company will only get warnings. I don't understand the source of your bravado. Perhaps it really is different from US.
You can guarantee that because the messages aren't handled by the server: "Even though no message traffic passes through Monal’s sever".
I was careful when I wrote this to talk about who this is important to: startups that use VPN technology as part of their remote access strategy. Community wireless mesh networks might need to keep using OpenVPN, or whatever. But none of the problems you're discussing impact the core use case startups have for VPNs, which is getting support people to admin apps and developers to deployment environments.
This guy is not a small business. He's just a guy, doing this for fun, it seems.
Having spent this week doing compliance for my small business customers, the cost is not zero but it's really not much at all - I've done full compliance for six companies and it cost less than £250 each (one of those clients is a large NGO).

This guy doesn't like regulation and is playing to the crowd for sympathy.
Does freedom of the press turn on intent?
It basically boils down to the world is full of suckers.

I'd like to find alternatives to Bitcoin and Ethereum that are actually innovating. For most coins, forking is the extent of their technology.
We are running exit nodes which are no more risky than running a regular ISP. Other companies are welcome to run exit nodes as well once there is more demand.

EDIT: just to clarify, the exit nodes are in data centers near to networks, they are distinct from "gateways" which are the nodes selling internet bandwidth into the mesh network.
The FPGAs are programmable using OpenCL. That counts?

https://www.altera.com/products/design-software/embedded-sof...
Dreaming of teeth falling out is a common dream. I've been told that it means you are afraid of growing old.

I had that dream a lot in the past.
I’m from St. Louis and even there six-figure programming jobs are pretty easy to get. There’s no nice way to say this: you don’t know what you’re talking about.
It's a pop business book. You can get the info you need in 1 page (that's how most people learn how to do OKRs on the job), to you can read 200 pages of fluff that mostly serves as PR for the named parties.
> And business-to-business arbitrations tend to have many of the procedures (and expense) of litigation--lawyers, briefing, hearings, etc.

One respected scholar, Prof. Tom Stipanowich, suggests that this is because lawyers have incentives to import familiar and expensive procedures from litigation (because they hate to lose and therefore want all the discovery and motion practice that they can get), and arbitrators have incentives not to push back too hard against these lawyers (because lawyers can object to the appointment of an arbitrator, and so arbitrators don't want to develop a reputation among lawyers as "difficult"). [0]

[0] https://papers.ssrn.com/sol3/papers.cfm?abstract_id=1297526
The only part of the agile approach I like is iterative delivery.

First, I believe software blueprints should be put together by people with 15 to 30 years of expertise. Secondly, blueprints for a custom home are completely indispensable and are referred to regularly during construction. I believe one of the reasons why is because they are visual, not textual. I believe software requirements should be the same and then they would be easier to adjust and would retain their value.

Custom homes can be adjusted in mid-build. But it is a big deal and you have to get the architect involved and potentially have your plans revetted by inspectors and the city. It's a process that has a high cost. And it should because good blueprints like good software designs are highly dependent internally. I believe every change risks degrading their quality.

If you are in a project where there are large numbers of unknowns about the functionality of the project, I highly recommend shrinking the scope to what you know and actually understand. Build that, and then learn from it. Then come back around and start a new "dave's custom home waterfall" (for lack of a better name) process to implement the next set of functionality.

Constantly course correcting is a recipe for never finishing and weakening quality. There should be natural impediments to course correction and scope reduction should be used until the unknowns have been reduced to a reasonable risk level.
Your proposed test would not be conclusive because magnetic fields are a thing which can be pushed against.
1) theaters pay a sliding percentage of the ticket to the distributor, as high as 90% in the first week(s) a film is out, dropping the longer the film has been in theaters. This means (unless the chain is cheating the distributor, which admittedly has happened for brief periods) that seat is a very real cost to the theater.

2) with reserved seating, I'm much less likely to buy a ticket if the showing is almost full, so those filled seats can reduce additional ticket sales.
This is only web traffic and doesn't tell us much. Facebook usage overall might be up, as far as we know.
I thought it was restarted. Lots of new .su domains. But maybe they stopped again, not sure.
I believe I can quote the response to my support request:

«We added iptables rules to hijack all DNS requests on port 53 going via the VPN tunnel, this is to protect users having set a DNS server unknowingly (or by malware). We are aware that not all users want this behaviour, and we intend to add an extra port that OpenVPN listens on, where DNS hijacking will not happen.»

Some VPN providers (including Mullvad) have a client-side feature called DNS leak protection that configures the system to use the provider's DNS server. I don't know how Mullvad decided that this was not enough, and they are justified to intercept DNS. (Note that for the server-side intervention to work, the client side must be configured not to use ISP DNS, hence the client-side DNS leak protection is a prerequisite.)
If that was the case, no one outside the US could use VISA/MasterCard either (they enforce US laws on all international customers), or could make any business with any US company (even HN has to enforce the Iran embargo on all its international users).

If you want to criticize local laws applied internationally, abolish the US.
THE MOST MYSTERIOUS ARCHAEOLOGICAL AND HISTORICAL DISCOVERIES
Desktop applications are incredibly risky, yes; as for iOS mobile apps we can't even know, as these devices don't allow auditing what software is running on them.

PGP has many problems and I hope a better replacement will come along, but the first step of secure messaging can't be using devices with closed, unauditable software...
Are GPGMail and Enigmail really more popular than other extensions/clients? genuinely asking since I am not aware of any study on PGP usage.
That's not "simple". It's very, very, very expensive to put things in space. Trying to figure it out on the ground first makes sense for a number of reasons.
Ask HN: What problems are highly impactful, solvable, and under-resourced?
A la https://80000hours.org/articles/problem-framework/