skysight-inc/HackerNews huggingface dataset:
I am very excited about sshuttle (and in fact, rsync.net has sponsored work on it).

The most compelling aspect of sshuttle, in my opinion, is that any host running sshd can be an endpoint - no software is required. As long as the sshd in question has python available, you can use it as an endpoint.
What's hyperbole? I heard all this predicted when smart phones came out, and people said it was paranoid hyperbole then. It wasn't.

If anything the parent's predictions are probably conservative.
A degree in Communications or a host of other soft majors is basically worthless. Arguable that 4 years would be better spent elsewhere, not to mention the money that goes into faculty salaries.

A liberal arts degree can be worth it, but only if it is actually a program with effort in it.
I think Liberal Arts programs absolutely should be a prereq for STEM careers. One of the reasons tech is in the state it is, is due to the lack of ethics courses taught.
This is very cool! Thanks for doing that :)!

I'm actually moving out to NYC this July to work for Major League Baseball. The Advanced Media division (MLBAM). I'll be doing some software engineering there, mainly API work for various apps, I'm very excited about it!

I'll have to work on compilers in my free time haha, I really enjoyed the work I did on this thesis.
Open up any nursing drug handbook, there are tons of prescription drugs in there where the method of action is unknown
Maybe I’m misreading it but I think it only deletes the DNS data while the wireguard connection is active?
GTA V has sold over 95M copies worldwide
Technically, technically, if that random citizen executes ALL people, it is no longer illegal.
This year I took a logic design course that had a few labs in VHDL with FPGAs which was a lot of fun. Thanks for the info, its good to know that I am on the right track.

I have heard a little bit about the process from a friend of mine who works in aerospace software engineering, and according to him like 90% of his job is design documents and other paperwork.

I am kinda surprised to hear that the pay isn't very good, but its good to hear that its changing. Is this mostly due to the older workforce retiring or are there other factors that are causing it?
Some of these scammers are using other wallets they own to send money to themselves to make it appear more "legit" to unsuspecting people. It's pretty terrible that as soon as a scam wallet is identified, another one just pops right up.

This is why Vitalik changed his name to "Vitaliak "Not Giving Away ETH" Buterin".
I dunno, something the size of a 747 is probably already flirting with the limits of diminishing returns. It's not unlike the rocket equation. Fuel is very heavy, so adding more fuel means you burn more fuel, meaning you need to carry more fuel...
No. It has to be things that someone can clearly possess, something movable. The seller also has to be someone authorized to possess the thing and deals with such things regularly.

The standard scenario: You take your guitar to a music store to be fixed. Some evil sale guy at the store instead deliberately sells your guitar. Your issue is now with the store. You cannot go after the guy who bought and is how holding "your" guitar. It isn't yours anymore. You have to sue the store for money and the store is free to try and buy the guitar back.
PIA also donates to FOSS projects/organizations[1] and has open-sourced some of their own projects[2]

1: https://sfconservancy.org/news/2016/mar/02/PIA-LCA-matched/

2: https://pia-foss.github.io/
It could free up time for other more enjoyable activities, though. For instance, I could spend my time playing my drums instead of mowing the lawn, if a robot did it for me.
I think the best compromise is to at least show HTTPS in green. Not showing anything at all seems wrong somehow.

I understand why they don't want to show "Secure" for websites that may have already been breached and lost your plaintext password. But I don't understand why they need to remove https and http from the URL. Is that really a big UX step forward? Or one backwards? Sometimes removing too many interface elements causes a regression in intuitiveness and good UX.

Unless they're preparing for the replacement of the HTTP protocol, and they don't want people to freak out when they see the new labels? That could explain it. But other than that, I don't see a good reason for eliminating HTTPS/HTTP from the URL.
Not true: Currently the "info" indicator appears on first interaction (which _could_ be after they've auto-completed everything, but may not be). This is changing though: In Chrome 68 the info indicator will be there on all HTTP pages, without form interaction required. So this change just changes it from "info" to red warning.
It's a fair point. I can't think of any perfect solution, only solutions that are less worse than others at conveying the 'Right Thing'.
This isn't a really important question, but why the name Cannoli? I feel like you missed an opportunity here to call it "PycRust". (c standing for "compiled to" of course)
I completely agree with this, college for college sake is not responsible, college to get better at an area of knowledge that the economy is funding, is a win-win. (graduate gets a job, economy gets another productive worker).

At the local high school where kids are going to college as the first in their family, there is a discussion about degrees and employability. The local community college runs a 2 year machining and manufacturing program that, when I used it to develop a better understanding of CNC machining, generally saw all of their graduates who were looking for work get hired.
Open source real time public transit routing in Portland with GraphHopper
I've seen .local and .lan DNS suffixes and assumed that they were specified in a standard somewhere. Perhaps not.
I don't believe that for a second. I don't believe we're anywhere near the wrong side of the Laffer curve.
I think it has more to do with this:

> There is an existing process for allocating names under '.arpa.' [RFC3172]. No such process is available for requesting a similar delegation in the root at the request of the IETF, which does not administer that zone.
I believe you're mistaken, conflating two different steps. There's still going to be a lock for HTTPS while the "Not Secure" message doesn't turn red for HTTP until you type in a text box.

The post indicates that by the time the lock disappears ("eventually"), then all HTTP sites will be marked as not secure in red. In the meantime it's removing the "Secure" text with the lock and HTTP sites will get their "Not Secure" turned red when you type in a text field. Those seem like fine steps.

> That's a major regression in user security.

Turning red is more functionality than today, not less.
Maybe someone could also turn them onto voting.
When thoughts control machines [video]
Apple and Its Rivals Bet Their Futures on These Men’s Dreams
While it is easy to say that it is hard to spot “genius,” it is also important to note that people grow and change over time. Maybe being called flaky influenced his growth down the road.

Feedback like this is based on limited interaction with someone at one point in their life, and I hope that many 21-year-olds mature and find their element later.
Paris Gets Serious About Free Transit
Good question. Got me thinking. I do not consciously allocate time for thinking about a hard problem, it just stays with me. Usually my AHA! moment comes during early mornings after the problem has stayed long enough and the moment is ripe.
If it has to be dumbed down and leading that much, the result of the survey is meaningless.
More importantly make sure you are measuring what really matters and not a proxy. I shut down our code coverage builds some years ago when I realized management was using that as a measure - the potential negatives from measuring that is far worse than any possible gain from an engineering improving anything. The measure is still useful, but until I can be convinced it won't be abused I won't measure it.
I think the challenge here is whether Gates should be offering advice on management, as opposed to business. The rise of Microsoft (prior to Ballmer) was famously due less to Gates' skills as a people / organizational manager than to 1) the company's timely dominance of the desktop and 2) expansion of that dominance into monopoly.

As such, why should Gates' endorsement on topics of management or leadership deserve undue attention now?
Or low praise of Quincy Jones, because this sounds like racist douchebaggery.
Why is this response being downvoted? I don't actually know very much about the situation so I really don't have the tools to evaluate what is wrong (or right) with this comment.
If I issue a warrant against someone, and then kick down their door and point a gun at them and handcuff them, that too would not be allowed, even though the government can do it.
Just in time a CA voter guide with personality, wit, videos and tons of info
Imagine you elected Hilary Clinton to carry out Donald Trumps policies.

That's what Theresa May is.

Oh and Bernie Sanders is even more left wing and will probably win the next election.
Inside the Barbaric U.S. Industry of Dog Experimentation
My point is: don’t require it. Just encourage people (perhaps in guides you submit to job-search programs or the like, or even in a newspaper PSA) to get the IQ tests done themselves, and then bring the proof of their IQ with them as an unrequested document. Basically, make it a social more that people should bring IQ test results to the employer, whether or not the employer wants them.

Also, don’t actually call it an IQ test. Get a third party that tests IQ and then issues a branded certification named after the IQ tier you fall into. Like CompTIA certifications: you could be a holder of a “FooTesting Genius Certification”, and employers could ask for that.

You know, like a college degree. Except shorter.
I am thinking of starting a forum myself. How did you go about selecting phpBB of all options? I have mostly looked at nodeBB but have not taken any practical steps yet.
> Considering the authors did so and find it to be an improvement in terms of maintainability and usability... I'm going to say "yes". Do you think you know more about the project than they do?

Every single self-described make replacement project makes the exact same claim, verbatim. Yet, when these projects start to see some use in the real world... Queue all the design shortcomings and maintainability and usability problems.

We're about 4 decades into this game. Perhaps this time everything is different. Who knows. Odds aren't good, though.
I've worked in a companies where everybody knows what matters, but everybody decided do measure what was easy to measure. So everybody optimized for make points in what is easy to measure. A lot of times it was counterproductive.
I'm certainly comfortable with WireGuard for machine to machine connections, but I don't see how it would replace traditional VPN w/ 2FA (e.g OVPN w/ Duo) for non-technical staff to access internal apps (at least without something similar to PAM)
Chrome will remove secure label on HTTPS sites in September
>So do we now look forward to teenagers hanging around newsagents asking people to get them a porn pass along with the beer and fags?

Maybe we could look forward to teenagers coding their own keygen or hammering the portals attempting to brute-force them with random numbers ... ;-)
They will just move it all offshore.
I don't think they're standard. The RFC references "Special-Use Domain Names" [1] which contains a list of special use domains.

I'm confused about ".local" though. It's reserved for Multicast DNS? [2]

[1]: https://www.iana.org/assignments/special-use-domain-names/sp...

[2]: https://tools.ietf.org/html/rfc6762#page-67
The court will make the final decision, but wow it really does seem like extortion. The stories in the article are brutal.

The free press argument isn't relevant. If the a local paper called you up and said "hey we are going to publish this negative article about a bar fight you started unless you pay us $500", that would also be extortion. Remove "unless you pay us" and it's totally legal.

If MugPhotos.com launches and just publishes mugshots but doesn't charge to remove them, it would also not be extortion.

FindLaw: "Most states define extortion as the gaining of property or money by almost any kind of force, or threat of 1) violence, 2) property damage, 3) harm to reputation, or 4) unfavorable government action."

IANAL etc.
I just read (in a book about scotch) that alcohol can react with a component in European oak to make a chemical that tastes like chocolate. So I'm guessing your white wine was aged for a good while.
This even happens with verified accounts. Fun fact: we got banned after reporting with no human support to help us. We suspect the spammers targeted our account with multiple false reports https://hackernoon.com/apc-nigerias-verified-twitter-account...
Sure, that's true.

But this person claimed that the amount of permissible force varied by state, as if different state statutes allowed for different amounts of force from police vs other citizens, and I don't think that's so. Or at least, I've never seen it.

Some states give police specific latitude in using deadly force to protect others, but not merely to effect an arrest (again, at least that I know of).

Also, it's important to note that to the degree these are common-law distinctions, common-law is much, much older than professional policing, which is fairly new in the western political experience. As it was emerging, of course, the western tradition came to base the professional police role largely on the Peelian principles, one of which is

> To maintain at all times a relationship with the public that gives reality to the historic tradition that the police are the public and that the public are the police, the police being only members of the public who are paid to give full-time attention to duties which are incumbent on every citizen in the interests of community welfare and existence.

...so if indeed the common-law tradition is that police are "members of the public who are paid to give full-time attention to duties which are incumbent on every citizen" then it's hard to understand how that's compatible with wildly different arrest powers.
This kind of "Stem elitism" that comes up in these threads is really gross.
Curiously, the references backing those statements are both dead :)
What did they want your transcripts for?
https://outline.com/eug5BB for anyone hitting the paywall
In my experience you take a day off of work to get a long lecture and still end up with the same ticket. Guess some of us are luckier than others.
>I'm pretty sure that VPN's and Tor will explode in popularity if they ever manage to enforce this in any way beyond the most silly methods.

VPNs do next to nothing and require a credit card.

Tor will definitely benefit from this however.
We’ve spent years educating people to look for the padlock or green url, now they’re planning to eventually remove it?? How about some cross-browser/platform consistency.
They don’t just need to re-do the testing; they need to waste six years and another $300k of tuition to learn things they already know, before anyone will be willing to test them.
But do the ongoing CGNAT expenses outweigh the potential expenses of transitioning?

I'm with one of, if not the, largest UK ISP and am pretty sure they're not IPv6 ready because their routers have no mention of it (Huawei router firmware updates presumably needed). BT have upgraded the physical infrastructure so I'd expect we'd be there already if there were easy savings.
I think I read this as "Pike Rust" about 5 times before I got the joke. I guess it's time for that 2PM coffee.
You can not find the solution on the internet any more than you could fix an ulcer through google. A therapist will have repeated experience with this problem and it's solutions.

One important point they could identify is the cause of the problem. It may be that distress is clouding your reasoning.
For example identifying the kids as part of the problem is possibly erroneous.

If you want to fix it before making an large but ineffective decision based on possibly miss-interpreted causes, I strongly recommend seeing a therapist rather quickly.
What I'm saying is they don't sell the raw location data they've collected. There is a huge difference between derived analytics and the raw point-by-point device-linked location data. It's a reduction of multiple terabytes of data down to a few kilobytes of identity-obfuscating information. I am not affiliated with Foursquare but I appreciate the direction of their pivot.

Honestly, since my line of work is similar (tangential) to what they do, my opinions are probably quite different from the moral majority who might read about this kind of issue without understanding the range of applications. I'm not sure what the solution is but I think there is a regulatory solution that preserves both consumer privacy and the extraction of economy-benefiting value. And I do think something needs to be done to protect privacy, even if it means negative impacts to the commercial space I am in.
Free speech is not at all under attack at universities. What's happening is that shitty people are no longer able to say shitty things without being called out on it. That's what they're upset about.
I'm quite happy with Private Internet Access
Ask HN: What is HN reading?
Interested in seeing what others are reading.
My pick for now:

A Tale of Two Cities by Charles Dickens ( https://en.m.wikipedia.org/wiki/A_Tale_of_Two_Cities )
Regression tests for docs
Africa's first automotive city
I liked previews more when they didn't spoil the entire movie. Movie theaters are okay for louder movies. I regret watching a quiet place in a theater. The loud audience did their best to ruin the experience.
I've used Python quite a bit for various projects. For a compilers class I wrote a compiler in Python and had a blast. So I spoke with that advisor and decided I wanted to get a Master's and he had suggested a project that analyses Python. The main question concerned which dynamic features of a language cause performance issues. Python just happened to have a lot of the features that we hypothesized caused slowdowns so we chose it. Plus we were both familiar with the language so that was a draw.

The same analysis could be done on JS or Ruby, it would be cool to see if a similar compiler would yield the same performance results for restricting features in JS/Ruby. It would also validate this work nicely as well.
Vague question can only lead to a vague answer, but I've been happy with AirVPN.org for my particular use case and needs.
- a can-do attitude, with the willingness to be open minded and learn new tools

- a robust understanding of statistical methods and common pitfalls

- the ability to communicate succinctly

- broad is better than deep (but don’t be too shallow, it’s a balance)

- excellent data vis and “munging” skills - you need to be able to pivot, slice, filter quickly - a date scientist should slice and group like a sysadmin uses the cli - in a rapid and composable way

- a good sense of humour
Been checking out some of these Github posts today on HN (there have been several) and then spinning up dashboards for them at Chart.ly.

https://chart.ly/github-dashboard/joe-crick/pure-css-compone...

Interesting that this project has a negative streak of 440 days (440 days since a commit has been made). So not a super fresh project.

Also interesting that it made it to the front page of HN! Nice work!
The statistics in this opinion piece are cherry picked to hell.

"People who have dropped out of college — about 40 percent of all who attend — earn only a bit more than do people with only a high school education: $38,376 a year versus $35,256."

A small difference between college drop out salary vs high school diploma salary only says that the key is to actually get a degree. half of a degree is worth much less than half of what a full degree is worth. That doesn't say anything about how much a degree is worth really.

"They found that for Americans born into middle-class families, a college degree does appear to be a wise investment. Those in this group who received one earned 162 percent more over their careers than those who didn’t."

Ok great but then they go on: "But for those born into poverty, the results were far less impressive. College graduates born poor earned on average only slightly more than did high school graduates born middle class."

Now they are comparing poor college grads to middle class high school grads. Why not compare to poor high school grads. Poor people may have the choice to go to college or not, but they certainly don't have a choice to be born into the middle class.

"25 percent of college graduates now earn no more than does the average high school graduate."
So the bottom quarter of the college grad distribution is lower than the top half of the highschool distribution. This shows the overlap, but again isn't comparing apples to apples. Whats the difference in median incomes?

"Nearly 30 percent of Americans without a high school diploma live in poverty, compared to 5 percent with a college degree, and we infer that this comes from a lack of education. But in 28 other wealthy developed countries, a lack of a high school diploma increases the probability of poverty by less than 5 percent"

For americans they compare poverty rates for highschool grads and college grads. Then for the 28 other countries they compare highschool grads to non highschool grads.

The only stat that actually speaks to the worth of a college degree is that those born into the middle class earn 62% more income if they have a college degree. The rest of the statistics are so inappropriately misrepresented that it seems the author is intentionally being dishonest and the NYT shouldn't publish it, opinion or not.
Why should a company not registered in the state of the alleged criminal be allowed access to the mugshots?
I'm sure it will be an interesting case, wouldn't be surprised if it goes all the way to the Supreme Court.

However -- there are clear laws making it illegal to demand money to not speak/publish information (i.e. blackmail). I expect the defense will argue that they are not publishing the information, they are merely amplifying it by making items of public record more available.
It's dead simple to setup, and very cheap to host. Plus I found some decent themes for it that were easy to tweak.

Overall though, nodeBB looks really nice, so go for it!
This is a great resource for comparing VPN options, with a focus on privacy and security: https://thatoneprivacysite.net/vpn-section/

Be wary of folks recommending individual services... the VPN market has been hot in the last few years, and most recommendations should be treated with a fair bit of skepticism.
Many social programs should get cut if we get UBI.

I also think many more programs should be socialized. Notably college and healthcare.

I'm not sure if I have reasonable arguments for which things should and should not be socialized.

Guaranteed jobs force people to work. That forces people to have latch-key kids, or daycare. Family bonding is ridiculously important.

Early childhood development is the most important thing in your life, basically. UBI encourages family bonding.

Also, if we get UBI, I think we have to get rid of protections for Unions (union-only shops), tenure, and minimum wage. Make the labor market much, much more of a Free Market. People will ACTUALLY QUIT shitty jobs. Which is good for everyone. Wages will have to go up if the job is shitty, or the job will need to be reworked to be less shitty.
Gotcha. If you happen to use Firefox, I published the extension to the FF store yesterday too [1].

I will definitely take a look at your PRs. I see that you linked them below. I plan to review all of the outstanding PRs in the twofactorauth.org project to see if there are good data cleanup/improvements that I can take advantage of too.

[1] https://addons.mozilla.org/en-US/firefox/addon/2fa-notifier/