skysight-inc/HackerNews huggingface dataset:
AFAIR the attack allows taking any old encrypted email and modifying it in a fashion so that a vulnerable client at the recipient would decrypt the message and send its content to the attacker. So the attacker needs access to the mail, either from the victims computer, mail-server or any or the senders computer, mail server (sent mail imap box) or intercepted in flight and the ability to send that to the recipient. It's not like this is necessarily hard, this is what GPG is supposed to protect against.

disabling the plugin until this is fixed would prevent an attack. Depending on your risk profile, this would be a reasonable mitigation: Don't receive encrypted messages for a while, but keep old conversations safe.
I think it would be perfectly sane for a company to dictate which scripting language their environment will support. Shell scripts are a bit different though because if you write a large enough software system on a unix-like OS you'll probably want to write a few shell scripts here and there to glue things together, so forbidding them completely would be a bit silly and counterproductive. Saying "avoid shell scripts, if you really have to write one it must be simple and use POSIX sh" is not particularly insane to me.

But anyway my argument was more about my opinion about a developer talking for myself, not a company style guide. Life's too short to learn two shell dialects so I can either learn POSIX which will work basically everywhere and will let me write any simple script just fine or write Bash whose added complexity I probably won't need or even want.

The fact that I'm an embedded dev probably biases my view though, I generally target environments where bash isn't an option anyway.
While I agree with you that there's a desire for this I'm not yet convinced there's a market for it.

As you say, this needs to be proven to be at least as safe as air travel.

Beyond that, for certain wealthy individuals, government dignitaries and the like commercial flight represents an unacceptable risk and cost in time eg Apple's board requires Tim Cook to fly private now.

Next, if the launch and landing pads are indeed offshore and otherwise remotely, this adds travel time at either end.

Also, rockets are subject to weather much more than planes are. If your landing pad is offshore then those weather effects are more pronounced as you have to deal with sea conditions too.

Lastly, current SpaceX landing is a "dead stop" approach (vertical velocity is designed to hit 0 when altitude is 0), which seems like it may not have the safety margins for mass transit. Future designs may of course improve on this.

So much as we'd like this, I'm not yet sure how we get there. Planes have to log many thousands of hours to be certified for passenger flight. Will we have enough launches to certify rockets this way? Even reusable rockets are, in comparison to planes, expendable because they're combusting huge amounts of fuel. Like I don't see you reusing the same rocket every day for 30 years like you can with a plane.
Based on the rest of your comment (which I agree with), I think you meant "Exchanging Bash for Python is a folly."
According to their blog, they are adding new tools for institutional traders:

> Over the course of the year we intend to offer lending and margin financing products to qualified clients, high touch and low touch execution services like over-the-counter (OTC) trading and algorithmic orders, and new market data and research products

https://blog.coinbase.com/coinbase-institutional-deea317d23a...
I'm one of those people who finds perverse pleasure in writing portable Bourne shell, and doing so correctly. I know I spend far more brain cycles on it than I should; once it gets past a certain complexity limit, I should just switch to Python. But I always say "It's just a little bit more code, there must be a good way to do this," and there generally is, but only after passing over several bad ways to do it first.

Oh, and of course in doing so, I always try to minimize the amount of calling out to other processes. Why call awk when you could use `while read` instead?

You only get one array to work with in portable Bourne shell, $@. You can parse lines using read, and strip prefixes and suffixes using parameter expansion (`${parameter%pattern}`). It's a restrictive little language, with a lot of quirks and edge cases, but it always makes a nice little challenge to figure out how you can use it safely.

One of the constraints I impose is that spaces in pathnames should always be handled correctly; the biggest form of trouble you can easily get in is to forget to quote something or to parse something on space delimiters when it can include spaces. I've seen someone write a script that accidentally turned into an `rm -rf /path/to/important/data` because of poor handling of spaces.

I generally do not attempt to handle newlines in pathnames. While it's possible to do so in some cases with null delimiters, I have never seen a case of newlines in pathnames in the wild. Of course, this means that I have to make sure that these scripts are never exposed to anything that could contain malicious filenames.

Also, I move away from portable shell if it will really make the code too convoluted or fragile. For instance, if I need to parse long options (--foo), I use GNU getopt rather than the built-in getopts (with appropriate test to make sure the getopt I'm using is GNU, so it won't break silently on a system without GNU getopt), or move to a real language.

Anyhow, while I know it's counterproductive, the puzzle-solving part of me really likes trying to solve the problem of implementing something in portable Bourne shell.
A dozen Google employees quit over military drone project
Wow, thanks for that thread. I just hit the "the system just goes out to lunch with no errors" issue again a few days ago on a ryzen server I have at home. This is even after an RMA months ago for the same problem. AMD support has been less-than-stellar, still waiting for their first reply this go-around.
I'm a bit uninformed on Firefox Containers. Can you help me understand how this is different from using things like ublock/adblock plus/ghostery and why you might want to use both those, and a Facebook container?
Very interesting and insightful opinion piece from an astrophysicist. I'm really curious why it's on the forbes.com website though; the "Forbes" name doesn't make me think "This is a science or astronomy website", in fact I thought it was originally about finance, which is what the old Forbes magazine was all about.

Anyway, I totally agree with him. Call anything round a "planet" and suddenly it loses all meaning, because thousands of objects in our system alone qualify for that. Maybe we could call the Big 8 the "major planets", and normally omit the "major" qualifier.
Scalable ACID transactions 2/4
> Also, my thought on the water as a solid, consider a steel wheel where instead of steel all the way through, put a liquid inside of a cavity

Well, consider that solid steel is considered too weak for a modern flywheel. So that questions why you'd be removing steel instead of adding more of it.

Modern flywheels spin really, really, really fast. Again, fast enough that modern solid steel is too weak. Newer composite materials are superior, but still need to be designed for maximum structural integrity.

Once a flywheel spins fast enough, it literally rips itself apart due to centrifugal forces. Any "cavity" weakens the structure and will break sooner.
We pay this much to strong PhDs with a good publication record. So do Google and FB. Must be able to code really well, though.
Extending the Heroku Timeout in Node.js
> "WiFi direct" is yet another completely different thing, that is meant for peer-to-peer connections (note: two communication partners) without needing an AP, which 802.11 consumer standards (b,g,n,ac) all did and do otherwise.

Wi-Fi Direct is nothing more than running (e.g., 802.11n) software AP with WPS on one device ("Group Owner") and having (multiple) peers connect to it to form a "group" -- it's just a normal AP, you can even connect legacy Wi-Fi devices to it. It does add functionality to automatically negotiate which device becomes the access point and to do some service discovery on the link layer before connecting.
Doubling the distance only gives you a 6db drop. So, the best approach is probably to have structures in the way to redirect sounds. Which should make a dramatic difference.
> Not to put too fine a point on it, but that's nonsense.

In PowerShell you pass structured data around instead of globs of text, which is much more maintainable. Using Bash on Windows is like going backwards, and it's sad that most developers don't even realize it.

> Historically, PowerShell was supposed to be a replacement for cmd.exe and roughly equivalent to bash, yet suitable for the Windows environment. They tried early on to port some of the UNIX & Linux tools to Windows and it didn't fly, so this is what we're left with.

Nonsense, Powershell is a fundamental improvement. It's not a "this is what's we're left with" situation.

> Although parts of Powershell are open source now, I suspect the mere existence of WSL means that Microsoft understands it has more to gain from compatibility with the rest of the world (Bash is nigh-everywhere) than imposing their particular philosophy on people.

Yeah, let's just drag everything down to the lowest common denominator.

> (See also, Apple's decision to adopt UNIX underpinnings)

Which is sad, since it could have been so much more. The Unix way of doing things, isn't the be all and all.

https://www.youtube.com/watch?v=rmsIZUuBoQs

https://news.ycombinator.com/item?id=16813796
I had some success with Node.js (though it was in a Node-based project to begin with). I haven't tried piping commands, but to run a bunch of commands and then have all the logic in JavaScript it's quite convenient.

Here's an example that builds a React Native app, while updating version numbers and Git tags:

https://github.com/laurent22/joplin/blob/master/Tools/releas...
For many more mesh technologies beyond those mentioned here:

https://en.m.wikipedia.org/wiki/Wireless_mesh_network

2017 https://news.ycombinator.com/item?id=15797079

2004 https://m.slashdot.org/story/47393
Awareness is not just useful to convince people to act individually, it's also useful if you want to pass that legislation.
Ironically enough it is more readable on my laptop.
> POSIX shell, on the other hand, is everywhere.

Indeed! The significance of this, I believe, is underappreciated.

During 2008-2015, when I used to work for a network security company, we had a file transfer script[1] for Unix and Linux systems. It was written entirely as a shell script. It began as a simple wrapper around the scp and sftp commands for which a shell script was appropriate. The fact that every Unix and Linux system comes with a shell meant that we could ship a single file to all target Unix and Linux systems without requiring the administrator to install any new packages. The alternative was writing the file transfer functionality in C or C++ which would have required us to build and test the solution for every possible Unix system that our customers used or writing it in Java which would have required us to require the customer to install JVM on their systems. Many customer admins were averse to installing any additional packages on their systems. Given these constraints, a shell script was a good solution.

Unfortunately, the initial shell script relied on several bashisms.[2] Some customers began complaining that their Solaris or AIX system did not have bash, and they needed the script to work with Bourne shell or Korn shell. The customers refused to install bash. So I decided to clean up the script, remove all bashisms from it, and ensure that only POSIX specified features were used, only POSIX specified commands were invoked with POSIX specified options only (with the exception of the scp and sftp commands of course because that was the primary reason why the customers wanted the script).

I am not fond of bashisms. If I need bashims like arrays or regex substitutions in parameter expansions, it's a sign that the script is becoming complex and I switch to a modern programming language. These days, when I write a shell script[3], I restrict myself to POSIX.2001 (2004 edition)[4], write unit tests to exercise every line of code, run the unit tests with bash, ksh, zsh, dash, posh, and yash on Debian, run the tests with bash, ksh, and zsh on macOS, and use Kcov[5] to measure test coverage.

[1]: https://community.rsa.com/docs/DOC-53124

[2]: https://mywiki.wooledge.org/Bashism

[3]: https://github.com/susam/vimer

[4]: http://pubs.opengroup.org/onlinepubs/009695399/

[5]: https://github.com/SimonKagstrom/kcov
If you use the normal Containers addon, you can be logged in to a different FB account in each Container. With the Facebook Container, all traffic to FB is blocked outside of the Facebook Container, and any attempt to navigate to Facebook will be hijacked into the Facebook Container.

There is also a special Google Container which works similarly.
Putting on a pressure suit, guaranteeing your body can handle 5-6 Gs sustained for a few minutes, having a death rate of 1.5 percent.
It's funny how any comment critical of kissinger is downvoted immediately. Could it be the pesky russian bots? /s

> Henry Kissinger: concerned humanist

Well The Atlantic was fawning over the saudi prince just a few weeks ago. If kissinger is a concerned humanist, then the saudi prince must have been a concerned feminist.

> I love dark irony first thing in the morning...

It isn't irony. It's propaganda. I too love the smell propaganda in the morning...
I have yet to see any mention of how the passenger experience is going to be. I assume it is much worse than some ear pain on take off and landing. Can the average person handle this trip comfortably? Or do they have to pass some astronaut-like conditioning test?
SJTU Develops World’s Largest 3D Photonic Quantum Chip
Just one additional note that might not be immediately clear from the advisory: Exploiting this requires the attacker to first manually place malware (a malicious JavaScript file) on your computer or on a Samba network share that your computer is already connected to.
Wires exhibit predictable behavior.
If you can, run wires. More than you need, in case the cost of having twice as many cables as necessary is lower than lying even one additional cable to the farthest-away location.
And if you can, go for Cat.7, which allows higher speeds should those be necessary.

And don't neglect a room that could need networking in case of one more/less inhabitant is living there in the future.
App Architecture: iOS Application Design Patterns in Swift
You're correct, my mistake.

Still, that would be 20 times the average load on those homes, to charge a single vehicle. To move that power 100 feet, like from a busbar (I think, I'm not an electrician) to the charger would require a 3/0 AWG copper cable (which has a diameter of around 2 1/2", or 5.8mm). That cable costs around $2.59 a foot, or $259 to get power to that charger. That would be undersized, since I calculated it out at exactly capacity, and that price wouldn't include conduit (since the cable isn't direct burial) or installation.

Multiply that by three chargers, which I'd consider to be on the very low end of what a commercial installment would need, and you have quite a high demand for power. Five hundred amps at 480V is no joke. On the plus side, all this could spur adoption of renewable energy; with enough demand for power, investors will shovel money into renewable energy faster than it can even be used.
We’re living in the world Klout built
I am still awaiting a day when you can be projected anywhere and acceptance of it as a means of face to face. The old hologram style of science fiction interaction.
> he is also "burying the lead"

The expression is burying the lede, not lead.
This, combined with all the tech needed for a Mars colony, would make it trivial to build a permanent settlement in Antarctica.

A domed, self-sufficient, city in Antarctica would also be a cheap way to test most (not all) of the tech needed for Martian self-sufficiency, along with the psychological impact of living in a desolate wasteland where rockets are the only way in or out, and it would be a good insurance policy against many possible global catastrophes.
> (you should be!)

Too bad, I don't have a phone. I never understood why Moxie thought that only allowing phone users would be a good idea.

Also, considering how Moxie is against other clients (see the libresignal case) and at the same time considering that Signal is centralised (and Moxie refuses to federate) I would argue that you should not be using it.
Well, Kissinger's interventions have meant the end of many humans in history as well...
I would be remiss if I didn't mention shellcheck, which will also warn you against doing stupid things.

Very useful when debugging.

https://github.com/koalaman/shellcheck
I don't understand your point about dead stop approach. What would be the alternative?
Concorde was run at a significant profit for years. R&D costs where not recuperated, but that that's just a question of scale.
If you're interested in the how, who, what and where, there's a more chatty account of how this vulnerability was discovered, reported, fixed and disclosed here: https://ivan.barreraoro.com.ar/signal-desktop-html-tag-injec...

(submitted yesterday at https://news.ycombinator.com/item?id=17070032)
I've had no trouble with spacemacs on nixos: I just let spacemacs manage its own elpa/melpa packages. Works the same as on any other system.

What's the issue with keys/secrets you've had?
How to Fix Windows Errors
It is a preconfigured generic container that has a few extra settings to further isolate Facebook specifically, as it is so insidious in its reach around the web.

The user 283894 makes a point that sometimes, it's nice to have your logged in Facebook container separate from other Facebook content.
Amazon’s Mechanical Turk Has Reinvented Research
What? Where?
To Build Truly Intelligent Machines, Teach Them Cause and Effect
Ah, cool. I'm no longer active; there's a handful of people in my local barony that I want to avoid, so I just bowed out altogether a few years ago.
WooCommerce Conversion Rate
>What happened is that the internet stopped being something you went to in order to separate from the real world — from your job and your work and your obligations and responsibilities.

It seems we (or many of us) spend all our time on the internet, it no longer feels like a place to escape reality. Even when you are away from your desk, you are still connected to the internet through your phone. It doesn't have the same wonder it used to.
I don't disagree with that, but my point was more that 'dating up/down' is murky/subjective, so both sides could feel like they're dating up or down regardless of what other people might think. So even if two people were to be dating based on physical attractiveness, they could both think they got the better deal.
It is, but don't forget it's a guide for Google engineers on the Google machines.

People who share code for the world to use should use:

- `#!/usr/bin/env bash`

- or `#!/bin/sh` for POSIX shell scripting
This quote on whether to always use braces with variable names (e.g. "${var}" or "$var"):

> These are meant to be guidelines, as the topic seems too controversial for a mandatory regulation.

It's nice to see that even Google has bike-shedding arguments.
This is going to come down to what you're most familiar with. I personally can never remember what the arguments to `cut` are due to rarely using it, while I'd be able to write the equivalent python from memory.
This is the second fire truck a Tesla has rammed into.
Os.listdir isn't much harder to remember, and of course os.walk is actually probably easier for recursive filesystem actions.
I understand that people are usually driven to build a hackintosh out of frustration with Apple's hardware offerings.

That doesn't change the fact that it's against their licensing agreement. Anyone who wants to be able to sell their software in the future (or write software for a company that sells software) should care about that and have good reasons for violating it if they choose to do so. Many people in this thread seem to accept that it's a morally okay thing to do without thinking about it at all.

The site may be called Hacker News but it's full of mainstream software developers, many of whom work for companies like Apple. It's also (as far as I know) always been more focused on the startup scene than the hacking scene. You would think that people who's goal is to build their own business would care about this sort of thing.
Demystifying functional programming (in a real company) – Building Nubank
Hyperbitcoinization incoming!

In all seriousness, the attention from institutions, growing maturity of custodial solutions and good monetary policy are colliding. Nocoiners, watch out!
Good point. It really depends on what area in biology you're in. For immunology, pathology, and, honestly, most subfields, you're closer to phenomenology than emergence.

I will say that I'm skeptical of a lot of the work done in biology in relation to networks and complexity. It's often either done by those without sufficient mathematical background (and, typically, wholly statistically invalid) or a bunch of hand-wavy, feel-good nonsense for a sexy tagline by those who should know better.

Better work is done by researchers in complexity who analyze biological systems.
I believe that what you’re looking for is called a “spectrum analyzer”. You’ll need a calibrated antenna, too.

I’m guessing that SAR (specific absorption rate) is usually measured with a block of soggy flesh-imitating goo that’s set up as a calorimeter, though. You could look up how the FCC defines SAR, perhaps.
The aspirations which some people manage to realise of living in modest, simple, more biostable, more biophillic surroundings dont deserve to be categorised as retrograde.

The glamour and possibilities of an intimate experience with natural materials and settings is part and parcel of cultural and technological development towards the goal of mass coexistence with natural systems, through a variety of places and architectures.

Even ignoring the benefit of investing attention and sense of identity in biophillic aesthetic and ideology, the typical enthusiast of yurt living or similar is at this stage no less ecologically viable than the rest of us - who are currently occupying space and resources and polluting directly and indirectly plenty.

Rural biodegradeable cabin dwellers might not be able to live quite as eco-lightly as urban dwellers might be able someday in a specially arranged ecologically optimised municipality, but such optimised municipalities dont exist yet.

Experience reveals we dont all benefit from living with plumbed water and toilets -all of the time. Poverty is more complex than the presence or absence of such facilities.

The history and development of permaculture technology does not deserve special cynicism and is never criticised with representative data.
> The community made a thorough and good-faith attempt to end the churn with `dep` -- which was summarily dismissed, ignored in part and whole.

I've used `dep` on a few projects and I don't mind it. If that's what we use that's fine with me.

> I don't see why `vgo` should get the fast track now, when the core team has been dragging their feet on the issue for years.

I think you misunderstand my point. I'm not throwing my weight behind `vgo`, I'm throwing my weight behind making a long term decision of any kind.

I get that it's important to take your time and get things right. That way you can avoid starting down one path and wasting everyone's time, then switching and declaring that everyone follow you down this one, and so on, and so on...

Oh wait - that happened anyway.