skysight-inc/HackerNews huggingface dataset:
> I'm an "engineer" but I am still concerned with the prices of things and dislike overpaying.

So do I, but unless you're carrying around a spreadsheet with the historical prices of every item you will be over paying for some things. I'm much less sensitive to the daily fluctuations than many/most though because I don't have to watch where every cent is going.

> I'm perplexed as to why your target is, specifically, engineers

I'm not targeting anyone, just pointing out that the empathy line for Joe Average is much lower than the billionaire level.

> What wealth is likely to do is simply make the individual less acquainted with a certain range of situations, which is something a person can rectify if they wish.

Correct, any person can rectify it if they want to, but it would take a concerted effort and even then there are many things they would likely not understand correctly, like the physiological effects of poverty. "Not knowing what you don't know" is also something many from wealthy backgrounds would experience in this regard, making it harder for them to empathize. Perhaps "too wealthy to empathize naturally" would be a better way to say it but I wasn't expecting this level of pedantry.

> You're basically blaming people for not having worse lives. How dare they have more GB than most people.

I'm not blaming anyone for having more GB, I'm blaming them for not knowing what a typical amount is. As software developers would should have some idea what our hardware constraints are shouldn't we? Otherwise we end up with terrible glorified IRC clients using GB's of RAM that our users don't have.
Results: https://docs.google.com/spreadsheets/d/1feDCU-yvdbhRCgMqren2...
Kareena will be seen working with Akshay Kumar in 'Good News' movie
Ask HN: Do we need a better domain registrar?
Hi HN,

Recently I've been researching a lot about the DNS infrastructure, and frankly I'm quite disappointed by the services provided by the average domain registrar. Most of them seem to treat DNS as a 'byproduct' in order to sell other services and they only seem to compete on price. As a result, they spend minimal effort on security, protocol compliance and advanced features that DNS has to offer.

I'm talking about features such as:

- 2FA on the control panel

- Full support of all record types (CAA, DS, CDS, etc.)

- DNSSEC key material stored in a HSM

- Ability to manage your own DNSSEC keys (DS record support)

- Support for domain locking (EPP status codes)

- Domain transfers while keeping DNSSEC activated

- Audit logs

- DANE support

I want to change this by starting a domain registry and hosted authoritative DNS service for professionals, with a strong focus on security.

However, the domain name market is saturated and very competitive (in price, volume), so the service would not be able to compete on price.

My question is: Is it just me or is there actually an opportunity for a 'better' DNS service?
> So it does seem simpler not to burn coal in the first place.

yes, provided you can control what the whole world does
As someone who tends to be a ball watcher and miss the nuances I love easy insights into the game. Two of the ones I've picked up are :

1: the back four are spread across the field but move as though chained together, so if the right back moves upfield into attack the other three get tugged to the right

2: Your front and back players are never more than half the pitch apart. So if the play is in the opposing penalty area your backs are at the half way line.
> ill be charged with 1,30PLN fee unless operation is done with mobile application and Blik system

Over on the Western fringes here, we had a similar push behind "contactless" payments. We also have Apple and Android pay, but nothing as slick as this.
reminds how both sides - Ukraine and Russia - (as the telecom companies on both sides were either the same or tightly integrated, technically and financially, and had [easy] access to real-time tracking data as well as to registration data) tracked cell phones carried by the soldiers and volunteers of each other (like a bunch of cell phones of Russian paratroopers moving from their base in Pskov and coming to Donbass :). Especially during the first few months of 2014 until the people finally realized that the tracking had been going on and had actually even been used in real time to direct fire at them.

Also, the leader of Chechnya, Dudaev, was killed in 1996 by tracking his satellite phone signal - https://en.wikipedia.org/wiki/Dzhokhar_Dudayev#Death_and_leg... (more detailed and more conspiracy style version - 2nd paragraph at https://jamestown.org/program/alla-dudaeva-describes-being-i... )
I don't know about this website, but you can take look at reveal.js [1]. It's a pretty powerful open source tool for making similar kind of presentations.

[1] https://github.com/hakimel/reveal.js/
Well, it was designed to be executed using dice, pencil, and paper rather than a computer ...!

(IIRC the 1st edn AD&D DM's guide dates to roughly 1982. (Can't find my copy to verify: that's going from memory of when I got mine.))
I'm a European.

Venmo?
That's like saying the 2018 Lenovo X1 Carbon needs its own trusted package manager.
No adds, no tracking, minimal js and css.
Yes, various RSS feeds.

Alert options explained here: https://elifesciences.org/alerts

early versions: https://elifesciences.org/rss/ahead.xml
final published versions: https://elifesciences.org/rss/recent.xml
Weird, my experience doesn't match yours, and I run both Pi Hole and uBlock. I guess the blocklists factor in a lot and also the sites you visit.
I don't think you've understood what has to be guessed. It's not the OTP alone; it's the OTP and the password, together.

If the OTP "000000" is correct with 50% probability after 500,000 attempts, you've just increased the number of attacks necessary to brute-force a password against a live server by (conservatively) 50,000,000%.
It's reasonable to complain about security theatre from the standpoint that it is security theatre. It is not reasonable to complain about a policy for from the standpoint that it causes physical harm if the level of "harm" inflicted is orders of magnitude smaller than other aspects of the same activity.

This is not a what-about-ism, because the very act of flying (which is what border security policies are strictly related to) causes "more harm" in this specific context than the policy itself.

The harm caused by flying itself is also incredibly insignificant, but if someone is going to argue that scanner's radiation is the reason people are getting sick then they must agree that the radiation from the act of flying itself is a much larger issue (and discussing scanner radiation would make no significant difference to whatever harm they think the radiation is doing).
Imageric.com – Thousands of absolutely free photos, vectors and videos
At what point do you just station an officer nearby, lying in wait, that will arrest that person on the spot? There has to be some criminal law against this. And as there is not an infinite supply of shit-smearing persons, it would stop soon.
DNSSEC stuff is terribly boring.

Yeah, there’s lots of room for a better domain registrar, but such a registrar should focus on doing a better job at registrar things instead of wasting time on DNS.

A big issue is that registrars will happily take down domains when a law firm reaches out to them, there’s simply zero interest in standing by their customers.
That's at least two clicks. Disabling JS with a plugin like disable-HTML is one click.
Sometimes the secondary will take precedence over the primary even though pi-hole is reachable.
Stop seeing a lead as the better/more important team member. The lead just has a different set of tasks to fulfill, that's all.

If the lead is any good at his/her job, then he/she will respect your experience in your field and let you do your work.
Peer reviewers should summarily throw out papers: "unclear procedure", "missing data", "the software is not available at the time of review"...
> Someone actually reviewing the source code is in a different category entirely, they don't need a download at all.

This isn't an all-or-nothing deal. Just because you read the source code for a package doesn't mean that you can't also download the binary. Reproducible builds give you some additional confidence that something weird hasn't been snuck in through a single compromised machine, and additional confidence that the binary package corresponds to the source code even if you didn't personally build it.

Malicious software is also not the only thing you're looking for, but things like unsafe practices in the code or insecure defaults.

In practice I do review source code from time to time before I install something, and sometimes I decide not to install it after looking at the source.
The vim commands are mostly great, they are a fantastic set of hyper-productive defaults we all should learn. One of the reasons is that almost every other editor has the ability to use vim commands.

Evil, the Emacs vim plugin, implements the vim commands plus some popular vim plugins (like vim-surround), and the resulting experience is awesome. I'm a heavy Spacemacs user and the user experience is so well done that it is a joy to use.
Good to know, I'll definitely give it as go as the windows update issue with Truecrypt is a pain. Thanks.
While we're dissecting humour, this reminds me of Dennett's book about it - the core idea seems to be that we find things funny because we're trying to 'debug' them:

The main thesis of “Inside Jokes” is that humor is an evolved adaptation used by humans to “debug” mental representations, i.e. find tacit incongruities and contradictions within representations and bring them to light.

https://rosehendricks.com/2013/06/13/review-of-inside-jokes/
"Typical concerns about the impact on software quality of adding C code to Go do not apply to SQLite as it has an extraordinary degree of testing. The quality of the code is exceptional."

It could be worth noting the thread concurrency limit imposed by cgo calls locking the OS thread to the calling goroutine. For example, 128 concurrent requests running long statements would take up 128 OS threads.

Of course any language not using a lightweight threading model has this issue either way if each request is mapped to one thread but it seems worth it to point out that you may want to limit your own concurrency at the request level or with properly sizing a connection pool (like the one present in the sqlite driver).

Edit: whatever the solution to concurrency is, benchmarking it is a good idea for any sized product going into a production environment. There's a good article about this by the people at Cockroach labs: https://www.cockroachlabs.com/blog/the-cost-and-complexity-o... (see Cgoroutines != Goroutines)
It seems that both primary and secondary are being used in round-robin and the primary gets relegated when secondary happens to answer faster.
I meant to say vim is the "hip" thing, as in, it's in fashion with a certain type of programmer for some reason. Fashion definitely exists in our world, even though it's hard to admit. In my (purely anecdotal) experience, vim gets a lot more lip service than actual use.
On the other hand, Amazon has this almost traditional infatuation with their one click patent. If one click is good, no click must be better. The idea of streamlining the buying front-end not only further than anybody asked for but also more than most people are comfortable with isn't new to Amazon.

Also, the browser is where people compare prices much more than in any other buying interface. Blame it on the very high "UI bandwidth" of browsers, which voice lacks. A tiny fraction of users switching to an interface that allows makes bargain hunting hard and thus allows higher margins can be extremely valuable to the vendor.
I've been to see a few comedians playing small theatres whilst they are developing their acts. Sometimes you get big names who are polishing their show for an imminent TV appearance, sometime they've not been on stage for a few years and are just starting to get back into it for a tour the following year. They will often play with stories, making notes how the audience react as perhaps they've gone too far or just missed the point.

I think I prefer seeing them working in the small venues like this when their act is quite raw and not just seeing the highly polished finished routine. They are incredibly talented and getting an insight into their thoughts is wonderful.
I found this bit interesting:

> After meanwhile four weeks "leisure mode" of the Pi-hole in my network this comes up stately 12245 DNS inquiries, of which 7102 DNS inquiries were blocked. That's 58%. It's interesting, if not surprising, that six of the top 10 blocked domains come from Microsoft, two from Google, and one each from Amazon and Vungle.com.
How Accessible Is Psychology Data?
"The trick" to not do any household chores anymore?
What would a registry need to do better when it comes to registering things? Any examples you can share?

EDIT: I was too soon, didn't see you updated your post.

> A big issue is that registrars will happily take down domains when a law firm reaches out to them, there’s simply zero interest in standing by their customers.

That's what EPP status codes are for, if implemented correct, the registrar can't even change the domain ownership even if they want or are forced to.
my guess is it has something to do with copyrights
What is the problem exactly with this "rip"? I often go swimming in the ocean although not in Australia.
> Google's business _is_ selling my information to third parties.

No, Google's business is using your information as a tool to build products it sells to third parties. Actually selling your information, as such, would undermine that business.

Google business is no more about selling your information to other people than a ferryman’s business is selling his boat.

Your privacy against non-Google actors is Google's moat. They have every interest in protecting it.
I can see your comments going up to "Weak AIs designing, producing and controlling agile robots is a great step, but it is a long way before they learn enough human psychology to perform as well as a door-to-door salesperson."

I'm not sure what will follow.
Note that this is often done based on your IP address if you've not opted-in.

It's often a quirk when using CCC (Chaos Computer Club) IP addresses at events in other countries; you'll be looking at google.de for the first couple of days until google correlates enough location data from people that have opted-in to correct the IP location.

On the plus side it means that a personal VPN with no opted-in devices will give you your home-region services (ymmv).
I actually agree with you. The comparison is not correct, but useful. It reminds me of Box's comment that "all models are wrong, but some are useful". This comparison can (and is/will be) abused, but it's still useful for most laypeople.
I feel like Apple really dropped the ball on that. Neither of the two reverse video modes remove blue. Flux works great on OSX and the people that make it really care about low-light accessibility, I'm typing this on my Dark Mode MacBook that I bought specifically to live at my bedside. Nothing else compares.

iPhone's accessibility page for color filters looks like a clown car show of useless features. If anyone's found the magic configuration that makes that shitshow usable please share it.
> I remain astonished that so many people would choose to install an always-on, cloud-connected listening device in their most private spaces, with utterly no accountability or auditability.

You mean after their smartphones and smart TVs and after putting many years’ worth of intimate details on FB despite all the discussions of Zuckerbergs attitude towards privacy? It doesn‘t surprise me at all.
Pi-Hole has dnsmasq built in so it is also handy for doing things like connecting to ssh servers in your network with your own hostnames instead of just ip addresses.
I don't think parent means the algorithm execution. The whole site just felt very painless to use.
How to Whitelist SQLCLR Assemblies in SQL Server 2017
Sure, but, do you know how much a packet of oreos is, without looking it up? Despite having bought them more times in the past than I'd be willing to admit, I only have a vague perception. I know they're under my "this is too cheap for it to be worth me agonizing over the price" filter.
Feedback wanted – build python microservices within minutes
At least one good news

Maybe we should look into farming seaweed (and other algae)
I would love to have your honest and straight opinion and feedback on an open-source microservice framework I am building lately.

Appkernel enables the delivery of REST based micro-services from zero to production within minutes (no kidding: literally within minutes). It is powered by Flask and it offers native support for MongoDB repositories.

So, fasten your seat belts and don‘t hold back please, just post anything is in your mind ;)

Thank you in advance.
SQL Server 2017 changed the security model for SQLCLR assemblies. This post looks at a new functionality in SQL Server 2017: whitelisting of assemblies.
Alexa is a hands-free generic solution that I already have.
The man who lost his body after a right temporoparietal brain tumour
Google maps stalking is indeed bad and I hate it but you can easily disable it by not running Maps in the background.

Honestly Android allows me to tune out of the internet business model a lot easier than iOS. Just dive into permissions and install a system wide adblocker. You can even bypass the app store.
Smooth Code Review Directly in Visual Studio with Updated Review Assistant
funding should go to more reproducible studies because those are the ones that are usefull. What use is a study saying that X will cure cancer Y if noone can reproduce that and verify?
I remember being impressed by how strong the wave were and also how cold the water was, compared to the air temperature.
> But once you reach a certain age the social stigma of it will prevent you from even trying,

Are you sure about that? There are a lot of people who worry about going to the gym , concerned that everyone else will be staring at them. No one [except for the very rare hole] is bothered about what you're doing, they are just getting in with their workout. I'd expect swimming to be the same.

Our local pool has various sessions for beginners, both young and old. Normally the pool is separated into three lane sections, fast, medium, and splashing around.

Any 'stigma' you do perceive isn't worth bothering about - it's their problem and not yours.
No. If the customer is at fault there is no problem in blaming them especially if they run a smear campaign.
A peek into the compatibility of AI and ethics
> One of the reasons is that almost every other editor has the ability to use vim commands.

Really? It would have to be a modal editor to use vim commands. Emacs commands, on the other hand, could work with the vast majority of editors out there, and actually do work in many cases. readline, for example, which is used by bash and many other CLI programs uses emacs bindings. fish and zsh use them too.
Search for something like "dangers of rip tide" and do some reading as it may well save your life one day.
That was a great analysis. If anyone is interesting on this topic, I highly recommend Talking Funny. Four comedic greats talk about comedy - of course there's lots of laughing but it's just fascinating.

Full video on youtube, too: https://www.youtube.com/watch?v=JrqkP1JpBRY
No questions. Just wanted to say it's a good translation. I wouldn't have know it wasn't written in English first. Unfortunately my Hebrew is non-existent so I couldn't check the accuracy :-)
Gosh, I misread it as "lack of internet piracy". Had a minor heart attack!
I believe vim is a lot smaller, so for many cd-images it is easier to find the space to include it.

The quickes way to validate this believe was to look for the Ubuntu package sizes (look at the size (installed)):

https://packages.ubuntu.com/bionic/vim-nox

https://packages.ubuntu.com/bionic/emacs25-nox
To be honest I've seen very few linux machines with emacs preinstalled, nano seems to be part of the ubuntu default install (maybe debian too?) but isn't on any fedora box I have immediate access too (it is available in the repos). This might be because I mainly deal in servers with smaller installs than most desktops.

I would entirely agree that a lot of vims popularity lies in it being part of the default install on pretty much every unix box ever though. That and it actually being a decent editor once you get over that initial insert mode/command mode learning curve.
They don't limit the power of the computer, only who can access that power. It's not hard to grant an app full access if you trust it - but the "trusted by default" model is hopelessly outdated now that the vast majority of software is sourced from anonymous internet 3rd parties rather than a few well known software vendors.
Last time I tried to use AKS I just got cryptic errors about the size of VMs available in Europe so I gave up and used GCP.
It's one of the dozens of proprietary corporate mobile payment systems that only work in specific nationalities and only in conjunction with bank accounts...

https://en.wikipedia.org/wiki/Category:Mobile_payments
Really interesting. Makes me think of Daisyworld and the Gaia Hypothesis.

Daisyworld is a model Earth covered in black and white daisies, that either absorb or reflect light. In the model, black daisies need less light because they absorb more, increasing the Earth's heat absorption. White daisies absorb less so need more light, but also reflect more light back, increasing the surface albedo of the planet and lowering its ambient temperature.

Because of this, there's a feedback loop were even if the sun gets a little hotter or colder, the successful daisy would spread and either warm or cool the Earth in response, effectively acting as a stabilizer. Gaia theory suggests that the world is full of these stabilizing systems.

Anyone who ever played SimEarth in the 90s, it was based on this theory and even had a Daisyworld simulation built in.

In this case, the paper is suggesting that seaweed grows much faster in response to raised CO2, and then sequesters some of that carbon underwater.

One question I have is how sequestered the undersea carbon really is and whether it will have other, unknown effects on the deep see ecosystem.
Cool, but frustratingly slow.

Also what's the point of genres like "French House" and "Detroit Techno" etc. These genres are ridiculous to the point where it sounds like satire.
If space-time has defects, how could we find out?
Until the stock price goes down the drain like it did with RIM. They could have just issued larger dividends and investors would have something to show for it.
Note that it's 'curl', not 'curl -k'
4 Αποτελέσματα Ερευνών Για Το Πορνό – ESCORTS ATHENS – CALL GIRLS
Ask HN: Would You Be Interested in a Google Analytics Downloader SaaS
Hi HNers,

my idea is to create a SaaS where you can compile recipies for the GA Reporting API, i.e. you define metrics and dimensions and a set of segments.
The service will then permutate the segments, download the data from GA Reporting API directly to your S3.

This could be used in your ETL pipeline.

Advantage: You don't have to care about handling pagination or quota limits, you just create your set of queries and get the ready CSVs in your S3. Additionally, this can keep historical CSVs, so that you would not have to query these again.

Would that be a good idea? Is there something else on the market (I've found nothing) or do people prefer doing this on their own within their ETL infrastructure (e.g. Airflow)?

Thanks!
An introduction to Julia