skysight-inc/HackerNews huggingface dataset:
This position invites a slippery slope which will lead to the identification of us all at all times. Especially, to suggest giving the power of traceability to “official” law enforcement only is a really bad recommendation.

Did you forget what happened at the NSA?

Please don’t make these recommendations while using the name Vint Cerf, father of the Internet. It sends a bad signal as if you (supporting traceability) are not the minority here.

I have had enough of my /heroes/ supporting backdoors. Please stop it. I hate working against you (supporting anonymity is clearly something you don’t wish to achieve). :(
Oh, great suggestion, thanks for that! I'll update it as soon as I get home.

EDIT: Updated and published, thanks again.
It's also annoying how many job interviews are encrusted with CS oriented questions that have little to do with most jobs. There's a place for CS theory, of course, but these days when hiring I look for engineers, not scientists. Engineers are disciplined and know the science, but tend to be more application oriented. It doesn't matter to an engineer if the theory may say that something is hard - the real challenge is to succeed despite that.

A team that has a mix of people with CS and engineering backgrounds tends to balance things out pretty well. The engineers tend be more in the git'r done category, and the CSists tend to pump the brakes a bit and seek an elegant solution. Between those two vectors, we get pretty good results.
> Is there anything left, that's not on HTTP? Maybe NTP.

OpenNTPD also uses HTTPS (TLS, technically) by default [0].

Fortunately, they aren't yet trying to tunnel actual NTP packets over HTTP or anything like that, just using the information in the "Date: " header as a sanity check.

[0]: https://www.undeadly.org/cgi?action=article&sid=201502101036...
Except for 2 factors:

1) in many places, heat peaks around 4pm rather than noon in the summer because heat from the sun accumulates throughout the day

2) days when it’s 85+F with 90% humidity and overcast (such as the last week or two here in NYC)
It is Anglo saxon ; Australia has the paranoia as well. Not as bad as india but today hkg to mel was pretty shit.
Well, I can't get behind saying that hiding the site your visiting from your provider is the "whole point" of https when it specifically doesn't do that. I mean, we both understand what https is aiming to do in general, and I assume you aren't suggesting that https has been an complete failure since SNI was introduced.

However, admittedly I'm just reacting to you using the term "whole point" in conjunction with something it's failing to do.
Thanks so much for the pointer, those two drafts are now in my reading list!
But they do offer SMS as 2FA, they just recommend against it? (Same for recovery presumably?)
I know my ISP is required by govt to log all meta data (websites, IPs, email headers). If I'm not using a VPN, it's all logged. Encrypted SNI is coming, but without encrypted DNS it's all still logged. So it seems like a net win, even if cloudflare is logging everything.

Too bad dnscurve hasn't taken off more.
reddit.com/r/proceduralgeneration
People in Japan because of the US military are on something called a SOFA visa. This visa is of course invalid if you are deserting but that is not the major issue. For soldiers entering Japan they are not brought through Japanese immigration. Which means even if they had a passport they would not have the entry stamps. Thus any attempt to leave through immigration will only raise suspicions and get you handed over to the MPs.
If a cycle is wasted, Knuth gets quite irate

Tangentially, I believe the topic of generating random points inside the unit ball is covered in vol 2 of TAOCP, with all the math you could wish for to justify the different methods.
That's a bummer and a sad day for Venezuelans.
https://bitsup.blogspot.com/2018/05/the-benefits-of-https-fo...
What are soft constraints?
At least with current technology, electric makes the energy consumption problem worse rather than better, on account of the poor energy density compared to combustible fuel. The difference is manageable with cars, but with aircraft, where you have to take all that extra weight and pull it up in addition to moving it around, things get to be pretty stark.
Typically the generation of the uniform random numbers can be made quite cheaply, especially if the resolution is not critical (e.g. if uniform floats are enough and not uniform doubles etc) or if the quality of the randomness is not critical, and in these cases discarding half of these will win versus other costly operations.
There Are 600+ Games in the Main Debian Repository
An undisturbed rainforest hidden on top of an African mountain
I've been using SpamArrest for 15+ years. SpamArrest filters out 99% of spam. I have to whitelist all domains or email addresses the first time I correspond. It gives legitimate users an opportunity to get through.

Worth every penny.
Why do you believe that this will be default on at any time in the near future without a reasonable configuration UI and without a reasonable set of DoH-capable nameservers? Especially given that this would break a substantial number of existing setupts? If you have this little faith into the FF/Mozilla folks, why do you keep using FF? If you’re not using Firefox, what are you concerned about?
The difference here is before the donor had to be a near perfect fit. With this method they can build the scaffolding from any dead body then use recipients cells for the tissue.

So we go from a couple thousand lung transplants a year with 50% mortality to potentially unlimited and much lower mortality (don't really know the mortality rate here but so far looks promising and better than).
It is -- hope they get him next time.
Not sure how end-to-end encryption would protect the end user from getting SPAM email, being trolled on the SM, seeing fake news or equivalent. Most of the issues come from the fact that there are no universal quality or identity checks for the information being published online. Perhaps unique/traceable identifier should only be required when you are creating content that others can see.
I enjoy lurking some niche subs

/r/waifuism is probably my favorite
I hadn't heard of The IKEA effect:

>"The IKEA effect is a cognitive bias in which consumers place a disproportionately high value on products they partially created." //

Which is a weird turn of phrase, as almost all IKEA stuff is already fully created, you just fit it together. I guess they mean something you put effort in to realising.

I'm not sure I agree, I think people preference stuff they took part in the production of (like kids helping with cooking their own tea), but I'm not sure we consider them higher value in an objective sense ... we often prefer things that we know to be of objective lower value, like in sentimental attachment.
But is that because they had an innate tendency to make decisions for others that caused them to be chosen as leaders? Or because they’d already had experience as leaders and were thus already experienced and comfortable with the idea of being responsible for outcomes for others?
Lessons from a small Firebase project. – ITNEXT
Yes, a small cadre of extremists did this, after they were kicked out of the Japanese Communist Party for being violent nut jobs. They were by no means exemplary of the movement.

At the same time, the right-wing in Japan (who was composed of former war criminals and had deep ties to organized crime in the country), was extensively funded and provided counterintelligence on their political opponents by the CIA. This intentional subversion of Japanese democracy guaranteed that the country could be used (at great cost to the Japanese people) as a forward operating base for US imperialism in SE Asia, something which was, and continues to be, deeply unpopular, even by those who are not “radical leftists.”

https://www.nytimes.com/1994/10/09/world/cia-spent-millions-...

https://en.m.wikipedia.org/wiki/Nobusuke_Kishi

https://www.japantimes.co.jp/news/2016/04/09/national/contam...
But this is the exact point. With DoH active by default (and no custom configuration set), every instance of Firefox will appear to be querying your DNS from outside, no matter if the machine is inside the LAN or not.
I don't work in this area, but ECM scaffolds undergo significant change with age. Crosslinks and age-related remodelling degrade the mechanical properties of the scaffold and interfere with normal cell migration and differentiation.

You would want to start with a healthy organ before decellularising and reseeding.
Troy doesn't really have that many positions on security matters other than "as an operator of a website, you must offer HTTPs". Is this the topic you're referring to?
Ask HN: Funding situation – help and inputs please
Product and competition:

Me and my cofounder have been working on a SaaS product since last year.
Then a lightning struck - we pivoted big time. And put our heads down to work.
Now we are way ahead (5-10x) than competitors who are funded ($9+ million).

Our funding situation:

We are in stealth with no funding (not much runway).
If we release our product - competitor will know what they lack
and they can put more resources to catchup.
We lack ammunition (team and funding) to compete with them.

Question:

What would be a good path to bring product to market ?

Should we approach friends-and-family or 2nd/3rd level contacts or traditional investors ?
I'm still confused as to why Tunsafe isn't open-source. I feel like if he wanted people to trust it, open-sourcing it would be a way to go.

There's nothing wrong with non open-source applications in general, but when it's a closed-source client of an open-source VPN server, you can't trust it, sorry.
I'm not looking forward to this.

I use internal DNS for stuff I'm running at home (e.g., a NAS, Home Assistant, etc). I don't want to go back to the bad old days of having to remember what IP addresses go with what service.

My girlfriend is not going to like it when Pi-Hole magically stops working because Firefox doesn't respect the DNS settings that are served by DHCP.

My employer uses internal DNS for internal services. The helpdesk is going to have a fun time as Firefoxes across the organization get updated. It also doesn't help that a large number of users are BYOD users, so enforcing certain Firefox settings is a no-go.

Sure, there's instructions to fix it, but it should never be broken like this in the first place.

EDIT:

The article has been updated - it now shows a screenshot from Mozilla's blog[0] which says:

> We’ll use the default resolver, as we do now, but we’ll also send the request to Cloudflare’s DoH resolver. Then we’ll compare the two to make sure that everything is working as we expect.

Cloudflare is going to have a huge list of internal stuff used by Firefox Nightly users, and Mozilla is going to have huge insights into how many people use things like Pi-Hole, internal DNS servers, split DNS servers (e.g., BIND Views), etc. And they're going to be analyzing this data in order to determine how well DNS-over-HTTPS works.

I'm not sure if this is better or worse than I initially thought it was.

[0] https://hacks.mozilla.org/2018/05/a-cartoon-intro-to-dns-ove...
I agree with you that even limiting the operational environment that these things work in doesn't reduce the number of situations it needs to be able to handle by that much.

But I wouldn't be too quick to interpret a single sentence from a piece of short-form popular journalism as a precise specification of what their cars are and are not designed to handle.
If that would work I guess people would like to "refresh" their organs anyway from time to time to avoid failure.
Many of the most densely populated areas of the world are coastal areas, and at risk of being completely flooded by sea level rise.

Many of the world's best agricultural land is at risk of desertification.

What happens when NYC, Miami, LA are under water, and the Midwest is too hot and dry to grow wheat?

Will anyone help the US, knowing we did nothing to avert catastrophe?

Probably easier to invade Canada...
It can, if you first do: git add --intent-to-add <filename>
Speaking for the US now (this is an outside view) but to me it looks like institutions such as the CIA or the NSA are indeed seen as evil by the majority of the public. Now, both the NSA and the CIA would mean nothing in the medium and long span of time if it weren’t for the power projected and often times actually exercised by the US military. As such, one can be forgiven for looking at the military as “bad”, if only for the fact that it “supports” bad institutions. Or, in other words, you cannot pick the “good guys” out of the military-industrial complex, to think otherwise is just self-delusion.
The expected common deployment mode is soft fallback - using traditional DNS if connections cannot be made via the DoH resolved address. Captive portal provides the most common use case.

There is a hard failure mode available that you can use for better security if you're in a vanilla Internet environment - but we don't see a way to broadly offer that choice other than in technical documentation.
I don't normally comment on downvotes, but the downvotes are actually evidence of orthodox view policing, proving my point! :)
> i say this is the exact reason running your own mail server in 2018 is problematic.

It's a reason why allowing these fairly core services to be provided by a shrinking group of organisations is equally problematic.

Maybe one day Google will decide that they get too much spam from outlook.com (or vice versa) and cut them off too. What are you going to do about it, set up your own mail server? Vote with your feet to another provider? Start a company doing the same? Good luck with that.
One for sure, but he's also pretty adamant against password reuse of any kind on any site no matter how trivial and in favor of cloud-based password managers, which, while very much the current mainstream opinions today, I disagree with fairly heavily. I'm willing to bet many of these approaches will be seen in a different light in a few years, just like we no longer favor regular password rotation in recommendations today.

There's significant problems with all of those views, and while arguing about each one would be a larger discussion, Troy's behavior towards people who don't agree with him is concerning.
What is the best way for me to access Sci-hub? Does it cycle through domains? If so, what is the best way for me to access the most up to date URL. Is there a UNIX command line method for doing this?
Updated:

"We wrote in a previous version that "the next Mozilla patch in September" will enable DoH by default. We corrected that part as it is not clearly stated on Mozilla's blog, as can be seen in the screenshot below."
How is it related to Vue?

If it depends on Vue, I wonder why. Why would it need Vue?
You might like to check out the BBC podcast "the boring talks". People discussing the hidden complexity behind mundane objects.
https://www.bbc.co.uk/programmes/p05t3gr2
Muff Wiggler - a forum for modular synth enthusiasts

https://www.muffwiggler.com
I go to its Wikipedia page, but sci-hub.tw has worked pretty consistently for a while now.
Why can't they raise more money and get a bigger team with you in the picture. What's the complete story?
but your ISP will still be able to see all your connections even if you don't use its DNS servers unless you use a VPN... this just spreads the information to a third party.
Not sure if is a niche, I enjoy reading about well-reasoned fights between characters:
http://vsbattles.wikia.com/
Who Is Right?
Hey HN,

A little project I made last weekend when my wife and I got into one of our many light-hearted debates. Sometimes, we can't agree so we ask our friends. Sometimes, we like to hear other people's opinions on our thoughts. So I made whoisright.app.

It's a Laravel web app that allows you to post a question, your take on that question, then invite the one person you want to debate, discuss, or argue with. They'll be sent an email and can sign in and can put in their take on your question. The public can then vote on which side they feel is more right, in their opinion.

https://www.whoisright.app

Feel free to sign up and post some questions and begin some debates! I know it's very MVP and missing some features so I'd love to hear any feedback or thoughts! Thanks!
I wasn't able to finish, but the first section was worthwhile. Very interesting ideas about how the brain encodes and associates information, and trying to find an algorithm and data structure that behaves the same.
I think you substantially overestimate the number of providers that behave ethically with regards to DNS and substantially underestimate how many people have shitty ISPs. You seem to have a very skewed view of how the number of internet users distributes across the world. Even in Europe, providers are not refraining from hijacking DNS and using DNS blocks for certain sites.
And they somehow actively push adoption in narrow circles. I often see “why xyz if you have tox” in local forums, from people who are otherwise professional in their areas, but believe in tox almost blindly. It also doesn’t implement any sort of push notifications for phones, rendered useless for battery-saving modes and vaguely competitioning xmpp-otr.

https://github.com/irungentoo/toxcore/issues/1398 - discussion on homepage claims

https://news.ycombinator.com/item?id=12657891 - past
Well yes, his views on password reuse are obvious, and that password managers are the best option for most people are clear, but I haven't seen any tweets shaming people for these things. So I assume the bullying behaviour you're referring to is regarding HTTPS.

If that's the case, then you should probably be more clear. He ridicules people for not using HTTPS is a much weaker claim than that he ridicules people for not agreeing with his security principles.
Forgive my ignorance, I’m new to bitcoin. If I buy bitcoin with cash at an ATM, how could a transaction be traced back to me?
This is still ultimately a limitation not an impossibility. I can easily imagine some form of tissue deposition like 3D printing where you use laser activated gene regulation to control cell fate of the stem cells digitally at high spatial resolution.
Reach out to their website. They just released housing in SF. https://mobile.twitter.com/AustenAllred Reach out to him he’s one of the founders. I heard about the housing from his Twitter.
Well, because it's a Vue component?
As written, it is ambiguous.

You say you don’t reveal the prize, but one can remove six cups at random without revealing their contents.

“Removing cups” is not the same as “removing empty cups.”

If the rules of the game permit you to remove the cup with the prize, it is significant. I think the math and optimal strategy changes.
Shoot I should have mentioned it’s 50k or more. I think. Not 100k
How do I set up mail in a box on a sub domain? Example.com is on outlook which I cannot disrupt but I’d like to set up and programmatically access all the emails coming to anything at dev.example.com

Preferably just query what emails do I have coming in for local name at dev dot example dot com

Deliverability is not a problem because I don’t intend to send any mail. Just need a sinkhole I can query. How difficult is this?
Bookmark https://whereisscihub.now.sh/go
Actually, yes, I do. From their blog:

> We believe that negotiating a privacy first operating agreement is something that Firefox can do for people that is just impractical to ask them to do for themselves. Imagine calling up your residential ISP and asking them to agree to an audit that demonstrates they do not log your IP address on their DNS server. And then repeating the process for your favorite coffee shop, library, friend’s house — anywhere you and your browser go to connect.

Firefox improves user privacy by default by finding good partners, establishing legal agreements that put privacy first, and eventually shipping a default configuration we believe is best.

They know about the power of default settings - and with the current default, they will be unable to roll-out this feature to a meaningful number of users. So at some point, the default will probably change to activate DoH.

Technically, this isn't "force" as you'll probably be able to turn it back off via about:config - if you know which options to change, what to change them to and if you are willing to click past the "if you proceed, you may damage your computer" warning.

Not every random guest that wants to access your local Nexcloud instance will be willing to do this.
I would look hard at k8s or serverless. I went with k8s for my SaaS business and it is a huge competitive edge.
What is Vue specific about it? Looking through the code, I don't see anything.
Wouldn't be surprised if he didn't orchestrate the attack on himself so he could blame someone else for his problems.
No it isn't clear, the obvious answer is parents reacted to a risk and in doing so kept their children safe.
Last car I owned had all the trip counters in Mph and the fuel efficiency in Mpg. New one is km and lpk, I'm totally lost
Egyptian Marble Granite
Mechanical Characterization of Structured Sheet Materials
Makerspaces are fun place to find all sorts of niches in the DIY community.
Just came across this yesterday while planning my new rig!
Yeah but why? It's just applying CSS. You set the props, it applies those props as CSS. Why not cut out the middle man and just apply the css directly? And why is lazy loading bundled in? What's that got to do with image processing?
It's a Vue component, how is that not Vue specific?
- https://github.com/runkids/Imagvue/blob/master/src/imagvue.j...
https://hackaday.com/
If people live longer than at present, either more food is needed to feed the larger population that arises from a reduced global death rate, or more young people are made reproductively sterile to reduce the global birth rate to maintain global population levels. You can also help by contributing to those as well.
Ah yes I missed that. Hopefully they do explain the risks of using SMS. At least they don’t force you to use it unlike some sites.
Ummm all sides have been using quadcopters and RC planes in the Syrian Civil War for years now
Indeed. From NPR:

> One of Ai's assistants, Gang Ra, told the AFP new agency that the rental contract for the building had ended last year but that it "simply wasn't possible" to move out at the time because of the amount of works still present.

> He said that they had been told that the move would need to take place within a matter of days, but added that they had not been warned when the demolition would begin.

As much as I love his work, agreed this sounds like a non-story. He's a tenant who refused to leave for at least 7 months and the landlord had other plans for the property.

If Ai had been the owner and his building were demolished without warning, that would be completely different... but that doesn't seem to be the case at all.
The article states that DoH will become on-by-default in september.

In general, I find it highly unlikely that it will stay off-by-default forever, because there is no way to have any meaningful adoption of it as an expert-only feature.
I did not know that. Makes perfect sense now. Maybe not the knots though :)
Top Chess Engine Championship: http://tcec.chessdom.com/season13/live.php and the amazing community project of LCZero to replicate Alpha Zero results in Chess: https://groups.google.com/forum/#!forum/lczero