skysight-inc/HackerNews huggingface dataset:
This hits me solidly in the feels.

Code signing certificates are a great idea if you're a company who gets to charge me hundreds of dollars per year to say that I am who I say I am. Code signing doesn't seem so great from my perspective, because I don't want to have to pay hundreds of dollars per year to a cartel engaging in a protection racket. Unsigned code warnings are nothing more than them saying, "Gosh, it sure would be a shame if we scared away potential users (wink wink)." If the certificates were based on inspection of the actual source code and building the installer inside a trusted environment, that would be one thing, but that isn't how they get assigned. Certificates are assigned based on whether or not I want to give the trust cartel a lot of money. Fuck that.
Ambulances Were Called to Amazon Warehouses 600 Times in Three Years
Conservatives protect the already-rich. Liberals prevent mobility up to the already-rich.

Both support the already-rich.
English is no longer the default language of American pop
I assume the data storage is on a separate chip which - in the context of this attack - is untrusted. That is, the firmware could try to wipe the data storage too, but that would be relatively easy to bypass and doesn't really gain you anything anyway.

Or from the opposite direction: Only the keys are stored within the trusted part of the hardware; they're the only thing you can reliably wipe.
Here's the Microsoft Guide, for comparison: https://docs.microsoft.com/en-us/style-guide.

This season it's 'select ... button'.
>maintain information on interactions with people where "issues" have occurred

The original title & article of this submission (while probably not as informative as currently) made it more clear that the TSA is being accused here of targeting people who have made complaints against the TSA.
Everyone on the CC list for each bugzilla bug was notified 6 months ago that any bug without action in over a year would be frozen instead of migrated.

(Do keep in mind that GNOME, unlike corporate projects, is largely volunteer based and time, resources, and contributors are limited)

As the email said, you just needed to ACK a comment on the bug to keep it alive and ensure its migration.

Given the nearly 900,000 bugs filed in the life-span of bugzilla, I think that was an acceptable trade-off given the very small workforce.

Hopefully, the gitlab tooling will allow us to track things going forward much better.

Personally, I think a lot of bugs in Bugzilla were just left open instead of closed due to a difference of opinion/vision but different maintainers have different triage styles.
complex yes but flipside is, if you alienate an advertiser your ad space is less valuable to others. if you are very friendly to the viewpoint of your advertisers, space worth more. its a dance tho
> Those employees will be mostly white, mostly men, and mostly known for upholding an industry whose sexism is towering, peerless and, according to charmers like James Damore, not even as sexist as it should be

Well, at least we can figure out which direction this book is biased from the excerpt...
"More than gonzo, an aura of laziness pervades the exercise."

Sounds like the book sucks.
I mean legally you are right...but I wasn't saying it is illegal. I was saying it should be illegal.

I can't imagine this is as common in Germany with employee elected board members.
I was agreeing with everything until this:

>>Please, don’t be stupid, PRIVACY IS NOT A HUMAN RIGHT. Privacy is at best a preference of some people; at worst, a luxury for spoiled neurotics.

I believe privacy is a human right, but the problem here is that the EU bureaucrats who formulated the GDPR regime are conflating the collection of voluntarily disclosed PII with a violation of privacy rights.

Warrantless searches are violations of privacy rights. So are income disclosure laws and the misnamed anti-money-laundering laws. In all these cases, non-compliance to what is essentially a morally unjustifiable invasion of one's private sphere means imprisonment or worse.

A company collecting data that you choose to disclose to it when you browse the website it serves you is not. It's qualitatively no different than someone remembering PII you disclosed to them when you went out for a walk, or went to their house, or had a conversation with them.

Others should not be forced to treat your actions and words as privileged information when they have never consented to entering into a privileged relationship with you.
Yeah, other languages (Go, Python, Node) can cold start much more quickly.
> if living with a family simply costs so much more there.

Being from Germany myself, the additional salary in the Bay Area usually compensates for the higher cost of living unless you're fresh out of University.

At least that's what I've seen for Engineers that remain mostly technical in Germany.
I don't exactly know what CTO salaries are like in Germany, but I'd assume it's usually less than 200k Euros. Most experienced Engineers in the Bay Area make easily more than that in total compensation (salary, bonus, RSUs).

Even if you have to pay another 100k a year for rent/... , chances are you'd still come out ahead. Plus the weather is great.

That being said, society is a lot different in Germany, so it's not just about money and job opportunities :)
https://github.com/signalapp/Signal-Android/issues/7869
I thought those were interesting articles (that coincide with my own heavy skepticism towards uber), but see you got heavily downvoted. Are you aware of/have links to criticisms of Horan?
Do you have a source for that claim? She claims to have "negotiated and won more affordable and middle-income housing than any city legislator."[1]

[1] http://kalw.org/post/mayoral-candidate-jane-kim-takes-afford...
For those curious what "Olive Garden drama of years past" is, I believe it's https://en.wikipedia.org/wiki/Olive_Garden#Activist_investor...
We have the NTP pool groups as a model for how to organize groups to offer services like DNS-over-HTTPS.
Doesn't matter what they were designed for. With TCP they need to behave that way. Otherwise this is a solution for people with latency <10 ms to the server. So not a whole lot.

I'll argue that the TCP and TLS handshake take more processing power then keeping the connection open.
If I wanted to slander a city, I, too, would visit and write an exposé about the local landfill.
But she changed her position and held rallies opposing 827 saying allowing more housing near public transportation was not the answer nor going vertical. She says “we are not against housing" and "this is not the right way to build” but her actions prove different. I have not seen any solutions from her
That CA took you for a ride. My open source Windows projects are signed, too. No smart card, no PIN when signing, no special software. I did have to provide some identity information and a photo, but identity verification is the service that CAs are expected to perform here. You would have had a better time with a different CA.
>For this great convenience, Amazon can now pretty much gull every mayor in America into selling their schools, transportation systems, birthrights, etc., in order to draw 50,000 tech employees — among the least beloved specimens of humanity — to invade and comprehensively ruin their city, block by blessed block. Those employees will be mostly white, mostly men, and mostly known for upholding an industry whose sexism is towering, peerless and, according to charmers like James Damore, not even as sexist as it should be.

I'm not white, hopefully that means I make it into Nikil Saval's good books.
Troubleshooting tips: How to talk so your cloud provider will listen
Original source: https://petapixel.com/2018/05/30/canon-is-now-out-of-the-fil...

I'm so tired of the TechCrunch blog spam on this site. They've literally stolen another site's news story and HN mods never replace their links with the original source of the article.

Why is this site always given a pass for content theft?
I agree (though I challenge the utility of current standardized testing to fulfill that job-to-be-done). My position is that we are already paying tens of thousands of teachers to assess the ability level of their students everyday while maintaining a secondary assessment industry that is able to exist because teacher's assessments are not able to be trusted. If we can make teachers' assessments trustable (for ranking/sorting/certification of skill & knowledge) then we won't need the very expensive secondary assessment industry to nearly the same degree. Likewise, many of the negative externalities of standardized testing could be mitigated by ubiquitously assessing student ability rather than relying on traditional "snapshots" as is the status quo.
> In other, perhaps less forgiving locales like North Korea, China, or Russia, I imagine

Many European countries have 'key disclosure' laws; give us the keys, or go to jail. In these cases, silence is illegal.

https://en.wikipedia.org/wiki/Key_disclosure_law
What would the goal of self-hosting a FaaS solution be?
I know nothing about the "standard remote wipe technique", but neophyte me believes that wiping security keys isn't exactly protecting you against your data being eventually retrieved and decrypted.
Lucky you I remember when it came out ;) That should make you feel better.
Wiping data is time consuming. Wiping the keys that can be used to decrypt it is much less so.
I dunno, I'm trying to square "political beliefs that are [...] above some group-politics that sees some groups oppressing others" with, well, okay, I have two close friends who are trans, and one of them lives in one of those states that's been doing the trans bathroom laws.

How am I supposed to square this ideal that politics doesn't need to involve oppressing people, when I see this one friend who's basically being told she can't legally use the bathroom that's right for her?

Like, how is that not oppressing?
Facebook Finally Fully Embraces GDPR – Generally Derailing Pages Recklessly
Given the sheer number of Xooglers involved in startups and non-profits, one can play the guilt-by-association game ad infinitum. If I leave Google, chances are I'll try to raise money for a startup, and no doubt, I would use any connections or acquaintances from people I have met or worked with at Google to facilitate that, who wouldn't? But working with people, or having worked with them in the past, doesn't mean you're controlled by them as a "sock puppet".
Based on.. them falling out easily?

Battery life on them is 5 hours each.

They have a great experience when they have battery life. Just can't charge them 2-3 times a day.
Anecdote time:

Last night I stumbled by a group of older (than me, all clearly retired) folks talking about Unions at my local pub. Interested, I sat down and quietly listened in-they didn't seem to mind.

At one point though I spoke up about how surprised I was that we haven't seen more tech workers unionizing in areas that aren't San Francisco, Cupertino or Austin. The "leader" of the pack so to speak,went on to talk about all of the amenities tech giants offer like day cares and dog parks on campus, laundry facilities etc and then he capped it off with "but none of that stuff pays your rent in San Fran".

Bringing it all back around, I do genuinely think about this sort of stuff a lot and I wonder if there's something to be said of a tech culture that gives it's employees so much that they passively lose something that binds us all to the connective tissue of citizen engagement.

I only bring it up because I've noticed the exact same phenomenon you have: lots of very smart, well paid tech friends who confessed to not even bothering to vote despite very huge opinions about everything political and an even larger eagerness to display their "wokeness" on social media.

It's my poorer blue collar and service industry friends I see online asking for rides to the polls, and are the ones who ask ME "did you vote today?"
The warning goes away for "widely used" binaries.

I maintain a desktop application (with MSI installer) for a niche industry with a few hundred users and for the first few weeks they had the scary red warning, but after then they started seeing the blue, non-scary pop-up, even for new binaries provided they're signed with the same certificate. We have a Comodo code-signing cert (non-EV though) which costs ~$70/yr through Tucows (remember them?).
Nice! iPhone gets the best variety of cases. One area where the Pixel 2 lags.
This is what happens whenever you have unchecked power. It grabs more power. There is likely nothing deliberately malicious or malevolent here and those grabbing this new power have probably convinced themselves its necessary for safety and similar reasons. Any power without proper checks and balances will be used to garner more power. Any power without proper checks and balances will be abused by the person wielding that power - maybe without them even knowing they are doing so.
German teen girl needs surgery after being violently raped by a Syrian refugee
Parts of Virginia are under a flash flood warning. Related?
Powerlines are far from lossless, so there is still an advantage to being close to the power source. https://en.wikipedia.org/wiki/Electric_power_transmission#Lo...
They do sometimes reference the "wisdom of the masses" in their reviews as well, where they'll occasionally reference the overall ratings from various sources within the detailed portions of their reviews.

I'm generally a fan of the Wirecutter while remaining somewhat skeptical of the motives behind their reviews. My skepticism hasn't changed since NYTimes took over, but I do still visit the site when looking for a specific product. Nonetheless, they've made a good deal of affiliate $$ from me, and I haven't been severely disappointed yet.
Interesting, I had no idea.
Are packages for distributions a thing yet?
I think you mean the days are too hot. :)

All of the good skiing in the rockies is in areas where it can easily go weeks without it getting above freezing.
What is your opinion about:
Lambda the Ultimate
http://lambda-the-ultimate.org/
Can you link to any rebuttals of Horan's argument? I found his articles to be pretty convincing, but am open to reading the other side.

I'm not a finance person, but it seems like how Buffett wanted to hedge his investment would mean that he isn't so rosy on Uber that he's willing to go in without guarantees.
Microsoft: Cutting Back Our OPT STEM H-1B Workaround Would Be 'Terrible' for USA
I know, right? Just the other day on here I read, mid-discussion of an unrelated subject, someone saying "like vegans" as a random example of an unreasonable, aggressive, troublesome, proselytizing group. I wanted to comment but couldn't think of anything....suitable to say. (vegan here) I don't know if they didn't think vegans would read it, or not care, or it didn't occur to them.
I've seen a few pivot from "what they said they were going to do" to "we just took all your money thx".
Let’s Hold the Applause for Tesla’s Brake Update
DNS over HTTPS is actually a lot slower to resolve than traditional UDP DNS.
There is an important difference... PHP on shared hosting (often connecting to MySQL) most definitely did not autoscale and self-heal. Even if you had a load balancer connecting to multiple machines, there was no automatic provisioning of more machines. Your database didn't automatically grow to handle more data and traffic.
Lol, finally someone with the same opinion as me. Yes, climate change is real, but it would be more expensive to stop it than to adapt to it
Yes I would think intelligence agencies should prefer Telegram over other encrypted chat providers since there's at least this possibility of leaking.
How much screen time is too much for kids? It's complicated
This looks really cool.

I currently use Meteor for webapp development, but when I really look into it the main parts of meteor I use are pub/sub & method calls.

The rest is just react, react router, and the meteor build tools which can be swapped out.

This looks like a promising light weight alternative...
plus meteor doesn't run on raspberry pis :(
> The trend is to have applications use less memory. On bare metal an application used all memory, a virtual machine has the OS overhead per application, on a container an application uses just one process, and with serverless even the processes can be reused.

Processes on App Engine are reused between requests. We cache some things in instance memory.
Make sure to clock the visible mole, not elsewhere in the page
Sony's Arduino-Compatible ARM MCU Dev Board
"It’s extreme capitalism meets Social Darwinism by way of rugged self-reliance crossed with puritanical cruelty."

I don't know if this is true. There seems to be something else emerging in America.A failed attempt at socialising thing one making the situation worse. Yes medical costs have sky rocketed due in part to an attempt to give universal health care.

They are accused of extreme capitalism but bail out large corporations and subsidise the growing of corn.

Things seem pretty bad over there but I don't think think they have a well regulated free market, they have something else.

The article accurately pointed out the asymmetric risk. A society cannot function with everyone living on the knife edge like that. The only insulation seems to be extreme wealth. But I don't know that socialism will fix this.
How am I "stretching the facts" by stating the technical limitations and benefits of Apple's approach (i.e. not introducing a third party that can potentially track all of your internet activity)?

This isn't theoretical. iOS apps were in fact storing and selling data that went across the ad blocking VPN solutions.

Ad blocking Chrome plugins have a sordid history. Why would I trust them on my phone when I can set up my own solution relatively easily?

The IOS solution for in browser plug ins is more secure and it protects your privacy.
It does mention ‘experimental’; I would not think the author is done or expects anyone to drop Prolog in favor of this just yet...
Even more radically than having "no kids at all", one could also commit suicide in order to immediately and more completely "reduce impact" -- as the end-goal seems to be.

Can you explain how that is not the logical conclusion? Along those lines, some radical environmentalists have been advocating mass slaughter of the human species.
Call me crazy, but I think the way to opt out is not using the site. Privacy policies and cookie policies are a waste of time, both for the reader and the writer.
Amazon accused of treating UK warehouse staff like robots
One thing that's sort of wonky (and possibly it's something that just got set up in a weird way by an admin here at some point, I'm not remotely a G Suite expert or admin) is connecting Groups and service accounts, or having a service account for a group. For example having support@example.com be a group, but also having a support@example.com service account.

(Currently we have a support@ service account that sometimes sends automated emails and which forwards incoming things to a group where everyone in the group has been granted "send as support@," since the group side is basically acting as a collab support inbox. I think the whole thing could possibly be a "shared inbox" type group were there just a way to have a service account matching the group email. And of course there may some benefit to it being set up how it is that I'm missing, or a way to do so currently that got overlooked somehow.)
Ask HN: What do the people need?
If you don't have a disposable income you might not have access to digital tools like VPN, VPS, Hosting Ect.

No government program is going to pay for a person's VPS when they are unemployed or otherwise unable to tinker on the web due of a lack of resources. But this kind of program might provide the most benefit at the lowest cost.

What would be the most useful and cost effective (at bulk) tool to give away, that people may not have access to?

If you are in that situation and have a idea, especially one that benefits people and you can't implement it due to a lack resources, maybe I can help.
Local elections have pathetic turnout, usually 10 to 20%
The TLS WG currently has only a problem statement for Encrypted SNI. Even the weak selection of two possible ways forward didn't achieve consensus as I understand it.

I don't see any way to have encrypted SNI without paying a price of one additional round trip. That's a fair price for something you must have, but for anybody to benefit we must insist everyone use it always, or adversaries will simply block it. And a round trip is a high price for users who don't (believe they) need this.
i personally like the stats on the last page of the slide show, and the tailing comment about being benchmarked on a Raspberry Pi. Not that anyone would host a server like this on a PI, but knowing how small of a machine is needed to run something like this is cool.

Of course you could probably do a pretty slick home automation system with this and only a Pi...
Are you seriously comparing the operating margins of profitable companies to a company that has yet to make a profit based on its operating activities? (Selling credits doesn't count, that's a one-time stunt.)

The numbers for Ford, GM, and Fiat Chrysler include all of their global activities, including their sales of lower-margin cars, compliance cars (i.e., no-margin or negative-margin vehicles, massive R&D, international operations, etc.). You are literally trying to compare the gross margin on a single Tesla model to the overall operating margins of entire companies...that's not even apples to oranges. That's comparing apples to zucchinis.
The practical means of redress was the government empowering individuals with public funding for development of anonymity technologies, public directories comparing services and their abidance to voluntary data protection standards, and possibly public service announcements educating people about what data they disclose while browsing non-anonymously, or browsing particular types of websites, and how that data can be shared and used by private data collectors.

Regardless, I don't think it's clear that the benefits of the market being left to itself haven't outweighed the costs. My snap judgment (which isn't that useful when assessing massively complex topics like this) is that the benefits dwarf the costs.

Much of the internet services that have emerged over the last 20 years have been paid for by personal information that users have traded away in exchange for these services. Everything from Gmail, to Google searches, to Facebook, to millions of Youtube videos, to the vast amounts of self-help content one can find about any topic, is ad-funded, which depends in large part on this exchange of personal information for web services.

The problem is people are taking all of these services available on the web for granted, and recklessly assuming we would have all of them without the ability to target ads using collected PII, and with the added burden of complying with the onerous GDPR requirements.
You can always email hn@ycombinator.com to reach the mods with suggestions like URL changes. They usually respond pretty quick.
I'll have time in a few weeks when school lets out. Thank you for the suggestion.
If you ping textsecure-service.whispersystems.org, it points to localhost 127.0.0.1

Wonder if this is a misconfig / related to AWS error / legal action
If users could install Telegram from third-party sources, without rooting their phones, this issue wouldn't be so serious. Or if users could install from trusted friends, even. That is, if iOS apps could be shared. There's a similar issue for Android apps. But it's my understanding that it's easier, and doesn't require rooting.

But of course, this would break Apple's "we are the only app source, because you can only trust us" security model. Or maybe it's "... because we can only trust us, and we don't want increased support load".
Yeah, but they repeated that line like 5 times. It was annoying to read and felt like SEO positioning.