skysight-inc/HackerNews huggingface dataset:
Over the past year or so I've done a complete re-evaluation of my home network and online activity with an eye to privacy and safety, after having the epiphany that the cloud is just a fancy term for other people's computers. Why would I trust my modest compute needs and most personal data to someone else in this age of cheap hardware and virtualization?

To concentrate purely on the DNS side, I set about re-engineering things for privacy, safety and speed (in that order). I'll only address my local resolver, and not the DNS I'm serving to the world at large for my personal domains.

I run Palo-Alto's free minemeld server in order to get realtime threat lists. Any medium or higher threat level domains are fed to:

an unbound caching resolver on my OpenBSD edge firewalls. These threat domains (along with adware domains from someonewhocares) are blackholed to 0.0.0.0. Any queries that are not in the cache are forwarded to:

a BIND 9 server on a VM that has no direct access to the internet or the rest of my LAN. It will either answer authoritative queries for my internal LAN or forward queries that require an external authoritative answer to:

Six DNSCrypt proxies in a round-robin scheme. Each proxy was chosen because it (claims it) doesn't log, and will also pass back DNSSEC failures. OpenDNS doesn't!

Notes :

My BIND server verifies DNSSEC. I also have a bunch of known-good/bad DNSSEC domains that my Nagios server checks constantly, verifying that DNSSEC is succeeding/failing as expected. I also have DNSSEC/TLSA/DANE for all my domains and services. Thank you letencrypt!

My OpenBSD pf firewall forces ALL DNS queries to my unbound resolvers, so regardless of what server an internal client attempts to use, it ends up going thru all my security and privacy apparatus. Malware is unable to use it's own DNS servers to bypass my blackholing.

I have not gone the extra step of using TOR. Although this seems like it would improve my privacy, I can't shake the feeling its an NSA honeypot and does more to mark you as a target of interest than it does to protect you.

One feature I would like, which I have found impossible to implement on my own is fresh DNS cooldown, to prevent brand-new domains from resolving for x number or hours. I like the idea that malware using dynamically generated domains could be thwarted with this, but there isn't any central list/mechanism to figure this out. whois info is too unreliable and unstructured.
My bet is on graphene capacitor batteries.
I almost hope his self created recession/depression hits sooner than later. Possibly nothing else will affect his polling.
> The real motivation is a financial one.

And the absolute hatred people on HN have for it is most likely due to the downgrade from personal office to shared space.

In Europe, where personal offices never really happened outside management, Open Office are not working better, but they are the norm that people accept, not a anger inducing topic.
Announcing the Vanguards Add-On for Onion Services
Microsoft To-Do for Android and iOS Updated with New Features
I always thought the Great Person tile improvements in Civ5 were really interesting, because they felt like a big, rare sacrifice - you had to pick a tile to weaken for a different payout. Converting it to a standard feature of development makes for strange gameplay, even if it makes a lot of thematic sense.

Still beats the Beyond Earth development experience for me, but that's not really saying much...
Like I said, the burden at that point is on the users
Generally speaking, startup times for Java / JVM based apps should be worked on next by the teams behind it; in the container age, fast startup is a good thing. I know the JVM itself starts up fast enough, but then going with e.g. Spring on top of that just adds a minute of startup time - and I've no clue what it's doing, I wouldn't think loading config, registering services and opening up a servlet thingy would take so long.
Calm down Bronitsky.
chisel made from steel may be but even then... try it on concrete or rock just for experiment (I tried).

But if chisel is made from cooper or iron ... good luck ... may be you have 10000 years in your life
I would presume it would work the same as if you had two other part-time jobs, such as working at both Walmart and Best Buy.
I have one simple counterpoint to all of this. Not everyone likes wearing headphones 8 hours per day.
This is a no-problem when you vendor your dependencies.
You think some guy who's willing to shoot up a pizzeria is going to reevaluate his life choices because he can't post his conspiracy theories on Facebook?
> Julia may be more interesting (and it offers types!) plus much more focus om performance for iterative operations (which Haskell is lacking). Though, each time I tried it, I had to go back to Python - again, due to maturity of its data science ecosystem.

I definitely agree that the Julia ecosystem is still maturing and not everything is as developed, however I've often found that the lack of maturity is less of an issue in Julia because the flexability of the language through generics, parametric types and macros makes a lot of the infrastructure needed in Python unessessary in Julia. Obviously your milage may vary in this regard though.
Honestly only ever visit and skim it after I submit something myself. I think its mostly a time thing. If I stick to the front page (sometimes two pages) I can minimize the distraction. If I am looking at new there is always new (duh) stuff to distract me.
On the web, you can at least use a tracking blocker. That's much harder to do in games (unless you're blocking on the DNS level, which is at least a bit more involved than installing uBlock Origin).
The bulk of people trying to get stuff done in a data / statistical / ML context are heavily biased toward not having to write their own tools. I fancy myself a reasonably good programmer, and reasonably competent at applied statistics, but if I had to, say, implement a way to estimate my own GLMs, I’d quickly go crazy.

A lot of research and data science (at least as far as the computing is concerned) is plumbing just like a lot of web development is writing CRUD apps.

Part of the success of R is that statistical researchers (i.e. the tool makers) implement clever new methods in R. Someone else has done the lit review comparing that fancy new method to other related methods. Someone else has validated the math. Someone else uploaded the code to CRAN.

Python has historically lagged R in the stats space because statisticians weren’t building tooling for it. Even fairly common models that have long been in R are still missing from the Python ecosystem.

But something started to change a few years back when the buzz about Bayesian methods started. Most MCMC based estimations of Bayesian models became more of a computational problem than a stats problem. Python started to not be laughably deficient in Bayesian methods.

And then we started having an explosion of deep learning whatnot, and nobody knew what the hell they were doing, and so everyone just used the frameworks gifted from big companies like Google—and they released stuff with Python APIs.

So I think that what language you use for data science is still driven by ecosystem, and also your ecosystem’s comparative advantage in implementing the methods you care about.

All else being equal, I’d love it if we had better languages for data science. Julia may get there—it’s a reasonably nice language that both Pythonistas and R...barians(?) find inoffensive. Given the strength of R’s tidyverse in implementing useful DSLs, I’d love to see the Racket community blow our minds with the language-oriented programming that they’re about, but ultimately mind-blowing will take a back seat to ecosystem.
I guess I'm just going to resign myself to this then, and own it.

Now look, I don't disagree with your points about people's ability to handle, triage and effectively respond to interruptions. It's a completely valid argument to make.

Where I'm having a hard time agreeing with the seeming majority here: is that when I'm interrupted in something I'm doing, by someone who sits two feet away, whipping around and saying "here's how you do that, it goes here, and does this" makes me the problem person (I use problem in the most delicate of ways, I hope the meaning is taken well and in good faith), when it was my work time and efficiency that was interrupted by someone seeking guidance.

If it's in a group channel, makes a bit more sense. When it's a direct message, well then here we are.

But I'll mull this over.
Data portability is interesting for private data (like the example of photos given in the white paper) but I don't think it's useful for social data. It doesn't solve privacy problems; in fact it would give more companies access to your data. It doesn't solve monopoly problems; when you port data from Facebook to Google you still have a Facebook account.
A lot less than 1% of my time here. Either when I just made a submission myself, or when I'm really bored.
Fog Creek did it, and it seems to have paid off for them.

The problem is that, for most businesses, cash is king. Hard-to-measure productivity improvements will invariably lose to immediate financial rewards.
So let met get this straight - you're telling me that people are staking their livelihoods entirely on Uber, and none of this is Uber's fault, it's just the people who are idiots?
Can the Sun Bring Us Superpowers, Science Says Yes
>I take Uber a lot and not once has a driver had anything bad to say about the “gig economy”. Most are thankful to make a couple extra bucks during their free time.

Playing devil's advocate here, doesn't the need to provide quality customer service come into play? I'm not arguing that you can't provide good customer service while also communicating a negative opinion about the company you're driving for, but I've got to imagine that at least a portion of drivers feel like it might be uncouth to discuss something like that and opt to not complain.
I actually once bought this book "Change Your Brain, Change Your Life", written by a certain Dr. Amen. I think his claims went not far beyond the emphasis on how diagnostic tools, most prominently MRI are useful for attuning treatment to the patient - including finding the right medication.
Most probably it's not "sewage" water but "corpse decomposition water"
The strawman is:

>It is selfish, in the workplace to ask a colleague for help who sits an arm's length away?

Because I haven’t said that, at all. I’ll bow out myself.
> I wonder if cubicles are considered open plan or not?

Not.
Can you back that up?

Modern JVM bytecode is cheap to verify and gives you very strong properties like memory and type safety, i.e. the app will not have buffer overflows or type confusion attacks in it.

WASM gives you virtually no guarantees about the software running in it, beyond that it (maybe) can't escape its sandbox.

It's a much better universal bytecode than any other offerings currently available.

I think that's a very strong statement for something so debatable.

WASM appears, to me eyes, to have numerous serious flaws that make me wonder why people are so excited about it. JVM bytecode appears to beat it in every aspect.

1. No GC support, no real workable plan to get there because there's also no type system worth a damn. They've been looking at it for years and this article says all they've got is a tiny stepping stone - no actual GC, just a way to mark pointers to things that came from JS in the type system. This wouldn't matter if the future of the web was software written in C, but if it is, god help us all.

2. No threading. JVM has been thread safe from the start, and has had a huge amount of work put into its memory model, so you can reason about the nature of bytecode when run on different CPUs and in the presence of multi-threading. Moreover making a runtime like V8 fast is much harder if you try to make it thread safe. JVMs have a long history of being fast in the presence of large scale threading but no WASM supporting VMs do.

3. No support for exceptions, apparently at least one failed attempt to add it. Even LLVM has support for exceptions. Again, no big deal if the future of the web is C99 but what a bad joke if it is.

4. No FFI of any use.

5. No dynamic code loading.

6. Tooling is poor or non-existent.

7. Ignoring these differences, WASM bytecode looks a lot like JVM bytecode e.g. is a stack based language that requires compilation client side via JITC to approach good performance.

As far as I can tell it's a significant regression from what Java could do even 20 years ago. And don't start talking about security. WASM integrations already opened up critical security bugs in browsers:

https://bugs.chromium.org/p/chromium/issues/detail?id=729991

https://bugs.chromium.org/p/chromium/issues/detail?id=794091

https://news.ycombinator.com/item?id=15712270

If you think WASM is magically immune to sandbox bugs, you're wrong.
A very small fraction (<<1%) of the population has a genetic variant that may allow them to survive with less sleep according to Matthew Walker, who runs a center for sleep research at UC Berkeley. It is discussed in his book or you can watch him talk about it here: https://youtu.be/pwaWilO_Pig?t=5581

Wishing you the best in getting the benefits of less sleep without any health consequences. You might want to contact him to discuss.
What do you mean?

A previous submission of the same article was flagged to death, so I thought I’d try again. But I’m not seeing the “[flagged]” label...
Okay, I get this, but then do services like Google Analytics get a free pass?
In your roadmap I see "Deploy to multiple global cities based on public feedback and demand" and "Complete global deployment in all practicable global cities"

This sounds like it could be a huge waste of time compared to investing in other areas of the product. How have you determined that your customers care where your service is hosted?
"He actually doesn’t talk bad about immigrants"

"He does badmouth _illegal_ immigrants, true"

So which is it?

It really doesn't matter though, as the point is that he is putting the blame on others (immigrants, other countries and their trade practices, etc.). Whether the immigrants are "illegal" or not doesn't matter in this context: it's an out group that grievances can be directed towards.

I'd be remiss if I didn't leave this here:

“Allowing the immigration to take place in Europe is a shame,” Trump said. “I think it changed the fabric of Europe and, unless you act very quickly, it’s never going to be what it was and I don’t mean that in a positive way.

“So I think allowing millions and millions of people to come into Europe is very, very sad,” he continued. “I think you are losing your culture. Look around. You go through certain areas that didn’t exist ten or 15 years ago.”

https://www.washingtonpost.com/news/politics/wp/2018/07/13/t...
Yes, but if you solve that problem, it implicitly means that you have a fingerprint of me that can be correlated across the web. So, next time I access a different game, someone can know that I'm the same person who bought the original, and perhaps try to persuade me based on that. Whether anyone does so or not is irrelevant - the only way I can try to ensure it doesn't happen is to try to never leak this data about myself.
I recently participated in a Tesla rally from London to Monte Carlo and built some custom tech to record and share the journey. The location tracking is built on top of the Esplorio app (which my team and I built) and the metadata comes from integrating with the Tesla API.

We pulled battery levels, inside/outside temperature and also pulled in real-time wind speed/direction readings from openweathermap.org to give participants indicators on additional drag they may encounter on longer stretches. Click on a car/name to see the details.

This was kept private during the rally, but now public. We're thinking of adding a "play/pause" button to show a sped-up map of progress over time.
Human surströmming
There needs to be some kind of codified Consumer Bill of Rights that says, in effect, "We paid for your product. You do not get to monetize us further after the point of sale."

Companies could then signal whether they agree to adhere to that code of conduct or not, and use it as a selling point for consumers to tell, at a glance, whether they want to support said company or not.
Pycharm is free
For Clojure, there is a complex set up of vars in the core namespaces - see e.g. https://dev.clojure.org/display/design/Improving+Clojure+Sta... - but GraalVM kills it. It's even worse for serverless!
It would be cool if these had tests around them where it made sense.
> Development is on going and active.

It's sad someone has to emphasize this. Too bad too much money just makes people lose focus. Maybe the game is out there if they only had $10m.
Thanks for the link! I think the page hits the nail on the head with this: 'As data science employs techniques from many problem domains, numerous base technologies are required.'

Any language that can successfully and seamlessly pull packages from other languages will do very well. Since most of the packages for data science start off in academics, and written by people who are experts in their field, and not computer science, 'cool' languages are going to struggle to get mind-share in package development.
Also, if you use a web-blocker, they can't create a fingerprint anyway.
The whole "gig economy" concept is just marketing. I don't think you can find a single platform where most of the services are provided by people with some free time on the side.

This is the industry that decided that "ride sharing" consists of getting in somebody else's car and telling them where you want to go...
I agree, but if you had financed the operation with Bitcoin would you have left a trail of hundreds of emails specifying each Bitcoin transaction and what they were used for like the indictment claims?

Only saying that if they were dumb enough to do that they may have been dumb enough to go directly too.
Why are they idiots? If it’s their best opportunity then they would be idiots to not take it.

I don’t think people doing the Uber bashing here understand what it’s like to be poor and that service like Uber are actually a good thing.
Almost never. I'm an easy prey for procrastination, so I'm actively trying to limit my time on HN and Reddit especially. The new submissions section is thus something I actively avoid.

But I do also think it is important to check it every once in a while, for the same reasons with you. So maybe having the---say---newest 10 submissions appended to the main page would increase visibility, and we'd have more interesting stuff get the chance to see the front page.
Author here, I just noticed that this got picked up so I'm late to the party. I suppose I'll take the bait and aim to clarify one thing that I think is funny people are getting hung up on. My line: "I don’t want to live in a world where the best language humans could think of for working with data was invented in the 70’s"

Read in context, the meaning of that sentence isn't that things invented decades (or centuries or millennia) ago are all bad. I even state that SQL is a great and powerful tool. If you took from the post that I think SQL is shit and needs to be replaced, you weren't paying attention.

The point of that line (and really the point of us creating Flux) is that we think there can be a more elegant and understandable language (read: API) for working with time series data. But that we won't get there by trying to improve SQL. You don't build an automobile by creating better wheels for your horse and buggy.

Also, SQL isn't a language like English. SQL is an API and APIs change all the time. Yes, code is communication, but its form evolves much more quickly than spoken and written language between humans.
This is a true reality,10 people with super powers are caught live on tape
> 500 KB compressed.

WASM has significantly less parse penalty than javascript. A larger bundle size than your accustomed to with pure js is not necessarily a problem.

https://blog.figma.com/webassembly-cut-figmas-load-time-by-3...

https://hacks.mozilla.org/2018/01/making-webassembly-even-fa...
Ah, ok, I wondered why all cars are in Monte Carlo. So the race already ended. https://twitter.com/esplorio/status/1014497314105327616
Encrypted SNI will take years before it is in common usage.

If you're that concerned about privacy, you better use a VPN.
But this isn't someone's house. This is a public square where nearly everyone is invited to speak, and also given tools to block people they don't want to hear. And I never spoke about the 1st Amendment or any of the free speech laws, but of governing principles of the United States - that Democracy only works when all voices are heard. People who don't have a voice might decide this whole Democracy thing isn't working for them and decide they should be heard through violence. And we had 300,000 years of that shit. Democracy is mind boggling special considering our history and every effort should be made to make sure everyone has a seat at the table. And like it or not, Facebook is one of the most important tables these days.

Bad ideas should be discussed publicly so that all can see the arguments against. Covering up/hiding such speech doesn't end that speech, it just makes sure that those who believe it never hear a refutation.
What I’m suggesting is that if someone is driving for Uber they should be getting paid at or above minimum wage, and that they should have standard employment protections such as unemployment. This is not the same as wanting to kill Uber.
https://work.qz.com/1296208/gig-economy-data-from-the-bls-th...
I'm guessing this [1] is the report you're referring to.

The problem is that "contingent workers are persons who do not expect their jobs to last or who report that their jobs are temporary" and I don't think factors in anyone with a full or part-time job that also does side work.

[1] https://www.bls.gov/news.release/conemp.nr0.htm
Perhaps it's because this tracking software is installed onto your machine without your consent, allowing it to be considered spyware. I agree that Google Analytics is just as bad, if not worse, but the fact that it's contained within webpages makes it harder to claim that it's spyware.
If you have a product that runs on thousands of machines you will be approached by folks that sell this kind of app. Saying no takes integrity
This entire comment thread began because the person you're replying presented a situation where they are the person sitting arms length away from the messenger. At least, that was my impression, having sat back and watched this thread balloon so quickly, seems like a lot of people missed that and thought dvtrn was the one asking for help, when he's the one being asked and interrupted.

dvtrn have I misunderstood your posts? Sorry to put words in your mouth if I have.
I would agree that our perf isn't the best. Almost all of that comes down to our rendering stack - something like 90% of our CPU time is spent rendering the window. This is because at the moment we're stuck with GDI, and IIRC we have to kernel-thunk every row of text we render. It's not a great situation.

Stay tuned for updates in this area though. Improving this experience is one of our top priorities.
A neighbor of mine is a taxi driver. I can call the number on their cab (or their business card) and get them, specifically. I can also hail them if I see them on the street.

That seems like a far more legitimate "independent contractor" relationship than the one Uber sets up between drivers and riders.
It has not been around for 2000 years, more like 1200 years in common use in parts of the world.
Yeah, we've had a lot of success with this at Fog Creek, but the overall diagnosis is correct: most companies make false optimizations for short-term gain over long-term. Sometimes it's understandable because resources are constrained, but other times it's truly inexplicable.