skysight-inc/HackerNews huggingface dataset:
S/MIME uses a trust model similar to HTTPS, is built in to most clients and still has almost zero adoption.

I think the issue is that HTTPS is a pain in the ass for a few, while encrypted email is a pain in the ass for everyone. Between client cert distribution to wonky webmail support to escrow challenges for regulated orgs it requires deliberate effort for all parties forever.
It works for datasets whose distribution an underlying machine learning model can successfully derive. Otherwise it would fail:

"it works well for big data sets. Because the big data
sets usually have fair statistical properties, and its distribution is usually easy to derive and also has some kind
of continuity"
> Disney is directly responsible for strongly lobbying to make it last longer.

And the hacker scene is directly respondible for not developing darknet software with which one can circumvent these copyright restrictions.
Account-based marketing – another buzzword or something real?
Tangent:

Is it just me or does CBC (and block ciphers in general) always seem to be a troublemaker? Even if it's not directly at fault, it seems to always make everything more difficult to secure, and I don't recall ever having heard of a single benefit gained by using them. Why do people insist on using block ciphers instead of stream ciphers? What benefits do they have?
How naive would you have to be to believe Oracle has showed up in the best interests of consumers and is actually being truthful here? Problem is, from the article it actually feels like the ACCC might indeed be that naive.
Facts about how medical abortions are performed
I am on Oracle's side, my point is that people keep giving advises to switch to OpenJDK as means to get rid of evil Oracle (on their eyes) as if it was developed by someone else.

I don't even use OpenJDK, rather always install Oracle commercial's JDK.
Good tool that is often enough. Text-based means version control. I'm using it via a plugin in Visual Studio Code. Very lightweight solution.
Protip; don't
Except Cargo, none of these are default toolings and were made by the community.
I am on Oracle's side, my point is that people keep giving advises to switch to OpenJDK as means to get rid of evil Oracle (on their eyes) as if it was developed by someone else.
I fully agree. Docker always felt to me like a couple of lego blocks (image repositories and a single API for managing containers on a single host), when you needed a full box like Kubernetes (auto-restarting and scaling, resource negotiation, efficient bin-packing of containers across hosts, a single API for deploying across a cluster (possibly multiple, federated), declarative description of desired runtime state with allowance for 4-eyes control of configuration, rather than a bunch of random imperative commands).

Docker as a pseudo-VM where creation is incremental and intermediate states between Dockerfile lines are cached is really nifty for development, but the end result is little different than tar-ing up a filesystem after doing a clean box deployment. I think this bit is the sugar that got a lot of people hooked on Docker, even though it's not actually the good bit in the end.
Free Web Hosting for Students Projects and Education
CO sensor outside the car to force a shutoff?
Well, it's kind of a signal, see Steve Blank's essay:

https://steveblank.com/2009/12/21/the-elves-leave-middle-ear...

Sometimes financial decisions that are seemingly rational on their face can precipitate mass exodus of your best engineers.
Yes that's insane I used to work for a huge Arab civil engineer in london - the head of my division will have known many of the Bin Laden family and quite possibly met Bin Landen when he was younger.
Pretty much all heap allocation outside of init time is verboten in embedded contexts, whether C or C++. So yes, the regular unique_ptr, vector, some lambdas that heap allocated their captured, etc. You're not allowed to use malloc in C either.

Check out MISRA C, and the JSF C++ Standard for examples of embedded code standards.
Facebook is reportedly considering its own cryptocurrency
Well these inexperienced consultants also are trained to identify the silenced but real voices in the company. Because the leadership ignores their own employees, these consultants represent them and the leadership listens because they are paying a huge price.
I bought a BMW without an M performance package...now I contemplate suicide.
I've been interested in BBR since the ACM Queue article and finally turned it on yesterday on my home workstation.

But slide 27 in the slide deck is incredibly troubling, where it shows BBR completely destroying the throughput of a neighboring host using Cubic. (Cubic being the default on modern Linux).

Even if everyone upgrades to BBR, slide 30 shows more trouble in paradise with BBR not getting to a stable bandwidth allocation. I have a hard time reconciling this with the ACM Queue article, since supposedly Google saw great results rolling it out at Youtube.

ACM Queue article: https://queue.acm.org/detail.cfm?id=3022184
Groovy 3 is full of nice-to-haves. Which is why it's taken forever. Anything that was a "problem" as you say got put into 2.4 / 2.5 (except for solving the Java9 module problem which is unsolved in any release ...).
To be honest, this is a really bad joke. Not only did they chose to go directly to the media/EFF without even informing the GPG people but they also attacked them[1] for not keeping quiet. Not to mention all the fud that was spread for an issue that is not even caused by GPG but by bad clients (in fact I am not aware of any client that is vulnerable to this). Shame both to the publishers of this and to the EFF for helping the spread of the FUD without even consulting the GPG people.

[1]: https://twitter.com/seecurity/status/995936859980222464
Natural Remedies for Back Pain / FIR Amethyst Healing Mats
Honest question: Are there some convincing arguments for why this isn’t also a failure of free-market capitalism? It appears to me that without government regulation (the irony!) most if not all free markets end up as oligopolies sooner or later. Indeed, isn’t that exactly how we got antitrust legislation in the first place?
Does E2E work now? Last time I tried, it did not. That was some time ago so things might have changed. It still is listed as "working on it" for many clients though.

To develop a new communication platform today without E2E as a core functionality is odd.
I heard FB starts vesting monthly right away these days, which imo is absolutely the way it should be. Google, take notice.
> He could make a game that would parody Monkey Island.

Now that you mention it, I think that would be even more awesome than a regular sequel. I cannot imagine what a parody of Monkey Island would look like, but I cannot wait to see it. ;-)
Oh, so claiming "60 fps 720p and 1080p" and later mentioning you are actually transferring ~100x50 and throwing out the rest is ok with you. Read that paper again.
I heard once that people didn't like the regularity of the input of CTR mode. That might be why people back in the day preferred CBC.

These days, the big downside to stream-ciphers is nonce-reuse. It can be hard to guarantee each message has a separate nonce on e.g. embedded platforms.
It's either "target", or it apples to all EU customers. "target" is far less of a problem for companies that don't consider their customers data to be important.
The chart shows all persons, and all ages. You can see the decrease in child mortality at the left of the curve, and the relatively small change in the age of the oldest at the right part of the curve. In the central part you can see where the biggest effects have been seen, i.e. in the annual risk of death for all persons.

E.g. for the cohort born in 1851, and who survived childhood disease, there was an annual risk of dying between the ages of 20 to 60 that was very much greater than the same for the cohort born in 1931.

You are correct in that most of this improvement can be accounted for by improvements in treating and preventing communicable disease, and prevention of septicemia, including but certainly not limited to those acquired during childbirth, as well as better management of the birth process itself.
Well then it'd require an investigation after the fact. If the computer has been modified, it's the driver or garage's fault. If it hasn't been modified, then it's the company's fault.

So in most cases, the likes of Tesla or Uber or whoever pay the other party's insurance. If it can be proven that a certain programmer or team screwed up, then they're personally held liable and sent to prison if necessary.

That'd certain encourage decent standards here. Do your job poorly and have it tied to your actions, and you go down for 20 years.
Yes, but we're talking about neo-Nazis, not the original Nazis.

The neo-Nazis have apparently glossed over his indiscretions. It's not as if cognitive dissonance is anything new considering racists have always made do dealing with their out-group, labelling the ones they deal with as "the good ones."

If you watch Daryl Davis' documentary, Accidental Courtesy: Daryl Davis, Race & America you'll get to see this first hand as Davis, a black man, befriends numerous current and former Klansmen. They, of course, are able to compartmentalize their racism and their friendship with Davis.
I don't think he is arguing for free food/drinks, nowhere did he say he was arguing in favour.
Normal C++ bitfields?
Sometimes you get that inside classes in the form of "bool x : 1; bool y : 1;" etc.
But that's much harder to use as far as function parameters go, so old school bitmasks are used for that.
I know next to nothing about botnets, but i wonder if you could divert traffic from botnets to a fake server that does nothing other than trying to keep the connection open for as long as possible (or being super slow in general) in order to increase the number of open connections from the bot's side, in order to stall it from opening new connections or make it slow in general.
That makes sense, but what about auditing (in isolation) the read-only replicas?

I suppose I could implement my own hash-chain to verify the authenticity? (aka, no missing data)
From what I've read, I thought that in modern cryptographic methods you always authenticate and encrypt, in part to avoid attacks like this where an attacker can modify the encrypted message in some way.

Does this mean that GnuPG and S/MIME don't authenticate/sign encrypted messages at all? Or that email clients still try to display encrypted messages that are not properly authenticated?
To provide data for UX decisions?
Depends on the relationship that you have with your employer.

I always (in the past) tried to drink the kool-aid as much as I could ... (until that got abused) ...

If I start a business, one of my main goals is going to be to build a team that does justice to the passion that it's members put in to it.
What Is Spacetime?
Also, the second attack seems quite similar to https://eprint.iacr.org/2005/033.pdf.
How can embedded platforms generate IVs but face trouble generating nonces? Aren't IVs also nonces? Or do you mean a different aspect of it is the problem?
Scraping business profiles from Instagram
/Donns alufoil hat

Google likes HTTPS, it makes the web safer, and keeps middle-boxes from interfering with their stuf.

However, Gmail likes access to the plaintext stuff. They no longer use email content for ad-targeting, but they still need this access for spam-filtering and auto labeling.

Gmail is essentially e-mail for a lot of people, so what they do matters.
Common Challenges which Xamarin.Forms beginner may face and solutions to them
I know some amazon employees that work in a WeWork office. Free beer & food regularly
He could call it Pirates of the Caribbean :-)
Do these issues impact the R community to the same extent?
Top 12 Reasons You Should Start an ECommerce Business with Drupal Commerce
People keep saying all of this. Again, there is absolutely nothing enshrined in GDPR limiting fines, other than $10/20 million. It says they should consider some things when determining the fine. But (for example) one of the 28 countries could decide that in their country, the lowest level fines are “only” $5 million, and they go up from there based on the factors they are supposed to consider. That would still be enough to destory most businesses.

You cannot tell me that there is anything limiting the fines (other than the cap) because it isn’t written. You’re saying that you hope and think that each of the 28 governments involved here will be reasonable, but in truth you have no way of knowing, and they have every incentive to not be reasonable.
The 10 typical sources of uncertainty in Software projects
Doesn't Thimbleweed Park count. I guess rather than a parody it's more of a homage, but he has made another ironic point and click.

https://thimbleweedpark.com/
Generally speaking, game developers need to create and maintain "fixed" economic systems to make the game fun. Games regularly suffer from ridiculous economic effects because it's too easy to get money and not enough sinks, or vice versa. Making the tokens tradeable outside the game doesn't fix this, and in fact creates even more problems - the presence of gold farmers and those who pay them can unbalance the game for others playing the game with them.

People spend their lives struggling under capitalism and use games to escape - and then you want to create a capitalist class system there too?
8K exists, and will be in use for at least some of the 2020 olympics.

why will 5-10 years make any difference? Will living rooms become larger?
> they are described in the Bible as having 6 wings for example.

No, a particular high order of angels (Seraphims) have six wings. Your run-of-the-mill, proletarian angels have two wings. https://en.wikipedia.org/wiki/Christian_angelology?oldformat...
ASMR Ear to Ear Whisper About C Programming for Relaxation
Just like with DRM, technology is not a solution to a social problem.

Having a darknet software that circumvents copyright restrictions won't prevent a squad of guys with guns appearing at your doorstep and taking you to a place, where you will spend several years. To prevent that, you need another solution and the answer is not technology or software.
Ask HN: What do you use for analytics?
GA has always been my goto for web analytics, but what are the options? Any good self-hosted packages that don't require me to build my own frontends? Any new services that give GA a run for their money?
> He basically created modern computing.

Whooaa, that's quite a stretch.

'Modern Computing' was happening with or without Steve Jobs. He certainly was an exemplar visionary that put the right parts together at the right time.

But, he did not create or define. Technological progress has it's own immutable momentum.
If I want to decrypt a message to you that I have intercepted I can create my own email containing a modification of the intercepted message and send it to you, causing you to send me the plaintext contents.
I am not convinced with the reproducability issues. To me, to reproduce a scientific finding using the exact same versions of all softwares involved is obvious (unless the authors rule out specific side-effects).

So to reproduce paper A from 2015 that used numpy 1.234 in Python 2.654 on a 32-bit Windows system and version abcxyz123 of obscure library X, I would need to recreate those exact conditions.

Whatever happened in the future of the softwares is irrelevant. Bugfixes might change results anyways.
I can see a few points that a consultancy can sell

* Insights across the companies competitors (because they have / had engagements with them)

* Insights from other industries / markets

* Experience with a certain situation (assuming similar trends happen in different industries at different times)

Employees of the company might have similar knowledge but distributed across many instead of focused in the consultant team.
The one who did a digital art of training activity, Google maps and Strava
"Free" doesn't mean unregulated free-for-all, it specifically means that people are free to enter the market as buyers or sellers, and free to choose what and when to exchange, at what price. The government does not regulate who is allowed in the market, nor the prices; but rather would get involved by protecting those freedoms to engage & price.

Monopolies work against a free market, as do barriers to entry. Businesses make more money if the market is not free, i.e. if others in the market are not free to choose competitors' products or to become a competitor themselves. The "invisible hand" is about reflecting pricing movement of free exchange, not enforcing the freedoms. If a society wants a free market, they need to set up rules that promote market freedom as a societal goal, which would (ideally) end up working against individual profit maximization (compared to a usurpable market) but for greater overall robustness and correction.
The bug would work only if all of these are true:

- only-encrypted (not signed) message (signing is good practice),
- clients that do not do MDC (MDC was introduced in 2000, every non-prototype client uses it)
- client that rendered HTML mail with broken markup,
- client that automatically fetches remote resources.

tl;dr this is a very narrow case
> On the other hand, I trust them to make better Star Wars content than Lucas,

Really? I mean, have you seen the last one? I wish I didn't...
How do you decide that your new view is valid and is not based on your need to lessen the fear of death.
I have problems with this with every new thing I try to use to make death more palatable, be it religion, philosophy or anything else.
I just cannot believe in anything because I feel its just a convenient way to make the fear smaller.
How can any view be valid if its based on self interest?
GPG is not a standard, the standard is OpenPGP.

As for the tools, they seem very easy, especially engimail which IS 1-click setup.

> add generic messages about encryption in alternate mime content bodies and simply encode the encrypted messages into it's own

This is exactly what it is doing. PGP/MIME is a thing.
Google offer enterprise services for a fee, and don't track you.
Hmm. From my POV, nothing in your example is actually incompatible with a process using explicit static types.

As long as I'm writing code without any assumption regarding the JSON structure, i.e. "I'm gonna take strings and push them around", there won't be anything else than string based type signatures.
As soon as I've reasoned enough about the problem that additional assumptions are manifest enough to influence future code (e.g. code that presumes your version 1 properties) the type signatures are extended.

The main thing I see different: I strive to make those assumptions explicit before writing code based on them, and to make them explicit in a universal manner. This has nothing to do with "The Truth". Quite the contrary, one should always be aware that code as a whole and typing information especially are only a model based on assumptions.

"Using static typing" doesn't mean "Let's build an army of interfaces and classes as large as we can come up with in our brainst...erm,analysis sessions". That's a rookie mistake. I dunno...your experience might be primarily in overspecified "SeaOfNouns"-Java projects, but the problems associated with those have nothing to do with static typing itself.

And to be frank: Statements like "Thus you are seeing my exact level of ignorance, and my exact level of certainty." scream "hubris in action" to me.
No: What I see is what you think your exact level of ignorance and certainty are. And I don't find that kind of information particularly helpful.
Ask HN: Two countries, one iPhone, how to handle country restricted apps?
As a US citizen in the UK, I have finances and responsibilities on both sides of the pond. I have US bank accounts, UK bank accounts, etc...

Unfortunately, the most critical apps tend to be the apps that are only available in the app store of their country. For example I can only download American banking apps from the US app store, and UK banking apps from the UK store.

This is no problem; I have payment/residence info in both countries and can "switch my account" in the store.

The problem is that I cannot have two apps from different countries on my device at the same time. So every time I want to use one of the apps, I need to switch my account to a different country again, which deletes the apps from the other country.

Any solutions to this problem, short of jailbreaking, getting a second device, or switching to Android?
This is an over-generalized assumption with no sources.

Tax evading?
If you’re using a cloud provider, using docker isn’t going to magically save you when switching providers cos chances are you’re using services of the cloud provider. Your code has to be rewritten.

And in regards to scripts or docker. No you wouldn’t need to rewrite everything.
From the privacy policy:

> We (Nexusfuse Ltd) may update our Privacy Policy from time to time. Thus, you are advised to review this page periodically for any changes. We will notify you of any changes by posting the new Privacy Policy on this page. These changes are effective immediately after they are posted on this page.

"This is our privacy policy. It will change from time to time, and the only way to figure out what changed, is to perform a manual diff on this page frequently."

Seems trustworthy.

This of course is in addition to the dubious nature of an ad-supported service that you hand over a good chunk of your purchase history in the form of receipts, but that will hardly surprise anyone here.
HTTP Caching in .NET, CacheCow 2.0 Supporting .NET Standard and ASP.NET Core MVC
> ... I'd probably have to take a sizable pay cut to work elsewhere

There are other companies besides Amazon that say this. Because of this, it can't possibly be true. The only way to know for sure is to brush up your resume and see if you can get some better offers. Don't take your boss's promise that you're well paid. They can't possibly be objective about it.
> Fostering and scaling cooperation is really difficult.

It all depends on incentive. BitTorrent was so popular that it had to be outlawed and heavily persecuted

> It doesn’t stand in for all the slow and messy bureaucracy and debate and human processes that go into building cooperation, and it never will.

Blockchains didn't want to go there anyway. But they replace the implied trust in statespersons that lies behind any bureaucracy with machines. thats quite radical, even if you layer a huge trust-based bureaucracy on top of that.

> there is no linear-causal relationship between decentralization in technical systems and egalitarian or equitable practices socially

There is a causal relationship between centralization of the internet and monopolies/inequality and everything that people hate
It doesn't matter if the message was signed or not:

https://efail.de/#will-signatures
"To decrypt the emails, he first manipulates their ciphertext
by using appropriate malleability gadgets." - so if you use triple wrapping as per https://www.ietf.org/rfc/rfc2634.txt you are safe. e: To make the claim more precise: you must drop messages which are not triple wrapped and those which are triple wrapped, but inner signer is different from the outer signer.
Perhaps a better expression is that he helped popularize computing.
I find it weirdly comforting to know that nothing in this universe is really eternal. If you could live literally forever, you'd witness the end of all life on earth in about a billion years, and eventually the slow heat death of the universe.

I'd love a lot more life than I have in front of me - a few millenia at least - but even with a traditional, linear view of time there's no point, need or possibility of eternity.