skysight-inc/HackerNews huggingface dataset:
You're pretty much proving my point when it comes to confusing the law with what is right. Ignore the law, it's completely orthogonal to the discussion. Free speech isn't prescriptive. Holding it as an ideal doesn't mean you want zero restrictions any more than holding liberty as an ideal means you want anarchy.

Your 'system' is simply unrestricted speech to the powerful and your 'solution' is just a suggestion that Gab's community become powerful enough to speak. Does that sound like free speech to you?
I read that as him saying that T-Mobile belongs on http://plaintextoffenders.com/
Yes, you have to opt-in to this type of security
It would also remove a lot of political power of politicians. A large part of of politics is making sure everyone thinks you act in their best interest. But if the outcome of your policies would be known beforehand instead of only appearing years later it would be immedietly obvious who profits and who looses. Of course most politicians have no interest in this.
Technically correct, but in Europe the Ottoman Empire was called the Turkish Empire.

https://en.wikipedia.org/wiki/Ottoman_Empire
Tor was funded by the DoD / CIA for exactly this: https://surveillancevalley.com/blog/fact-checking-the-tor-pr...
I get your point but there's a strong bias against any program target at specifically helping men.

For example, there are few events targeted at recruiting more boys to college, even though only 40% of college students are male; and few programs specifically targeted at helping homeless men even though most homeless people are adult men.

Contrast that to the PR value of program like this that's targeted at helping women.
To some extent, though I'd argue that many of the failures of the current system are either orthogonal to or directly in conflict with Friedman's own policies.
TLS 1.3 is just a protocol for transporting encrypting communications. We have had such protocols for a long time. Censorship has continued unabated.

There is no technical solution that can prevent censorship. Censorship is a social issue. If a government policy, or the policy of a privately held corporation, insists on censoring something, it will do so.

Literally the only way a transport protocol could end censorship is if a law were enacted that specifically stated "This protocol may not be circumvented or obstructed by any party, private or public, by any means, for the purpose of censorship.".
Google chrome ‘found to be’ Apple Safari...

Apple Safari ‘found to be’ Konqueror...
This was definitely not before pirating.

Some C64 games came on cassettes and were extremely easy to pirate (compared to cartridges). And even before that, arcade games were "pirated", so instead of a license an operator would buy a clone.

Of course the scale would be different than it was with the Internet around.
"Open source" drivers are considerably less useful when they have to be WHQL-signed in order for people to use them.
So instead of finding the NES next to your other PCs at the time, it was near the toy aisle?

Yes, but chances were good that you were shopping for a computer in a small department store anyway, so it was all a short walk to the bedding and appliances sections. I don't know that they were marketed as toys so much as their primary market was kids.

Toys-R-Us had a pretty good selection of gaming consoles, plus the C64 and C128. No Amiga though. The boxes would show Dad fiddling with a mortgage calculator, then another picture of the family watching as the kids played a game.
There is a lot of light in rio; I've been. They do have a city by the beach, but there is plenty of light in the city. (Shade too in a lot of areas, on one side of the street. Both light and shade are important)
>And no matter what I think about the things they said I still hold that they ought to be allowed to say them among themselves.

And they are. No one is stopping them from talking to each other. They however are telling people to stop talking to each other in the office building Microsoft owns and rents out.

Perhaps that's the best analogy? Providing (P|I|S)AAS is a business transaction. Its like renting out commercial space. And landowners turn down potential leases for all kinds of reasons that have nothing to do with money ("we're trying to cultivate a certain image in this area"), and we don't bat an eye. We would think absolutely nothing of a landlord saying "no, local KKK chapter, you cannot set up your lounge here".

But when the space is virtual, it magically changes from a landlord to a speech thing. Even though the activities at the KKK lounge would be, by and large, the same kinds of activities that would happen at stormfront, except perhaps overall less harmful (more potlucks, less extremism).

The landlord isn't stopping them from chatting, he just isn't going to be party to a transaction that actively facilitates it. Why's Microsoft (or Google, or anyone else's) action different?

I'm happy to provide thought experiments to test where you actually lie on this debate. I expect that your views will normally fall on the "no one is under any obligation, even ethically, to provide someone else a speech platform, and refusing to provide someone a platform is not the same as censorship", although I can't say for sure.
I did pomodoro for about a month once. It was actually helping a lot. I think I got lazy after a while and stopped doing the entire stop-watch thing, thinking I would continue doing it by just looking at the clock.

I think I will try pomodoro again today and see if I can get back that juicy tomato timer goodness.
Sorry for his loss, and the mobile providers do need to do something about this known attack vector. But with cryptocurrencies you need to "be you own bank", and extending his own analogy how many legitimate or long lasting banks would store USD24 million in cash in a hotel room safe?
Learning to code? These are the programming languages creating the biggest buzz
I said this on another thread, but it bears repeating:

If you do interesting or novel technical work with a Chinese company, especially on things like AI, it will be used by the People's Liberation Army and the Ministry for State Security. You can almost guarantee it.

So if you don't want to work on technology used by a military, then don't work on technology with any Chinese based company.
The BLS statistic isn't filtering by enterprise size. Does it include self-employed guys who registered a company and named themselves CEO?
Ajit Pai Testifies at Senate Commerce Oversight Hearing
Well there's a few issues.

The SS7 (https://en.wikipedia.org/wiki/Signalling_System_No._7) does not have any authentication so anything over the telephone networks can be easily MITM'd.

And at provider's stores they are too eager to please a "customer" so social engineering is very effective at swapping SIM cards out and hijacking your number.
I can see your point.

What I'm saying is rather that the term itself encompasses a broader array of views than we're discussing here. I think to simplify it to "equal rights" isn't exactly congruent to what every adherent to the term holds as it's sole meaning.
Intelligence isn't just about human intelligence sources. Historically the US has been terrible at human intelligence and peerless at technical intelligence such as spy satellites, bugs, signals intercept, etc...
Just a guess - private trackers often do this. Back in the day I got banned at couple of places because of a riseup email.
Ask HN: How did you get into game development?
These would be peculiarities of the C programming language, not issues of typed integers or of expression ranges. Other, actually-strictly-typed languages will complain that 256 doesn't fit in a byte, or if 256 is a larger sized integer, that automatic comparisons between differently sized integer types is not allowed.
Functionally, we support all of the VT sequences you'd need to make ncurses work resonably well on windows for a few releases now (ever since WSL was introduced). If you could build an ncurses that assumed TERM=xterm-256color, then you might be able to get it to work on windows.
Exactly. It tends to not make the news, but it's all there still.
Exactly. I was able to get into my Verizon account at the store by showing the sales guy my number on my phone. I was moving my number to my non-work billing account.

When I was surprised that this is all the authn they needed, the sales guy joked with the rhetorical question “well, you are <my name>, right?” i.e. “well, it ain’t a problem at the moment, right?”
Where did those claim to not be based on Chromium?
As usual, let me point out that Dijkstra's handwriting is a treat if you haven't seen it before. Here's the handwritten version of this note:

https://www.cs.utexas.edu/users/EWD/ewd08xx/EWD831.PDF
That depends.

1. Most platforms these days require a signature with a key issued by the platform. In the browser you have HTTPS but that doesn’t help if the server is compromised.

2. It’s easier to target individuals (thus evading detection) if you’re serving the code to users directly (which I think is also the case with Chrome, but not Mac App Store, Linux package managers, etc)

3. Some platforms even do some amount of auditing before including software in their repositories.
Ok, here's another counterargument: nuclear is currently losing in terms of economics with renewables + gas and this problem is only going to get bigger.

That ship has sailed already.
Even as a troll, that shit isn’t funny here. I’ve seen college students at Tulane trying to “finance their education” by selling Cutco. These guys are not from poor families.
Credit where it's due: https://xkcd.com/927/
everything is a function if you contrive hard enough.
This is arguably a limitation of C-style for loops.

For example, Python:

for i in range(0, 256):

Rust:

for i in 0..256 {

and many other languages have similar things.

Proper ranges also mean that the compiler never needs to do complicated reasoning that may depend on signed integer overflow having undefined behavior in order to prove that the loop has a finite number of iterations or that `i` doesn't wrap around.
This looks a very interesting project! One thing I couldn't tell though, could you 'stream' LED pixel values over wifi instead of generating them on the hardware?

Using the ws2812b Lights and the:
https://github.com/jgarff/rpi_ws281x library,
I made my LEDs pulse out an ID, which I read with a webcam, then used it to make a simple webapp, to 'paint' my Christmas tree's lights.

https://www.anfractuosity.com/projects/painting-a-christmas-...

This year I'm planning on buying some APA102 lights though, and taking it outdoors :) (So i'm looking at the IP68 versions). Ideally I want to create a 3D map of the LEDs this year, but I need to do a lot of reading on that!
This is a false equivalency, and your language seems to be intentionally politicized to provoke an emotional response rather than a rational one. It reeks of "whataboutism."

You argument is comparing the actions of the US military against a foreign enemy - and their associates - to the actions of the Chinese internal security against their own people. Are you saying the Chinese are at war with their own people?
But this is exactly what is happened, just that every new one is ad-hoc, and on top of the olds. Every time a new api happened you create standard + 1 * N browsers.

Eventually, you increase ad infinitum the tech debt, or restart.

I think the cost of the whole web stack is high enough not only for the browser makers but EVERYONE ELSE. Is multiply JS (n-versions) + CSS(n-versions) + HTML(n-versions) * N Browser * N OS.

Now, what other rational option can be offered... push forward and keep doing the same and increase the tech debt? Not exist a way to refactor this?
Any viable improvement to the status quo needs to take multiple stakeholders into account:

Web developers - want a clean, extensible, sane system to code against

Major consultancies (e.g. IBM) - want lock-in, wide and cheap talent pool, and minimal changes (unless it's an issue they have)

Browsers - want to render whatever they see fastest and securely

Content developers and end customers - never want to have to update their site that they bought in 1995
Which part of the world should any service be provided from to be trustworthy? Let me rephrase, which services are known to have never cooperated with any agency, nor ever being hacked by them?
> So when I write that “open source has failed” I’m obviously not writing from a technology perspective,

Well perhaps you could add a few words to the title so that the title actually reflects what the article is about.

The article is actually a critique of capitalism and intellectual properly law in the US disguised as a discussion about open source software.

At the beginning of the article:

> To say that open source contributed to the overall innovation of the world would be a shameful understatement.

> Better would be to say that the world’s computing innovations owe their existence to the triumph of open source development

> I don’t know how to calculate the total value of open source software to the world, but I do know that if open source software suddenly went away, the results would be catastrophic, an existential crisis for humanity.

> One could claim, without any exaggeration, that our current world runs on open source software or that our modern world would not exist in its current form without open source software.

Near the end of the article:

> If the proliferation of open source software cannot begin to resolve our issues with concentration of wealth in the technology industry, and in fact exacerbates it, then what good is it?

Sure, open source is literally responsible for the world's computer innovations, providing an incalculable value to the world but what good is it anyways if it doesn't seize the means of production and cast away the chains of the bourgeoisie?

Terrible article.
> just this morning Walmart stock increased 10% == $26B - 1000x his salary

And? You said that Walmart has 2.3m employees. Why do you attribute that stock increase to one of the employees?
Who Left Open the Cookie Jar?
Starting at 1 is more intuitive, and therefore IMO better.

Regarding some of the advantages of zero-based:

- Indexing backwards from the "end". Your language can always add an `end` keyword like Matlab does, and this stops
being an advantage.
- Indexing cyclically using modular arithmetic. Yes, this is an advantage. Albeit a rare one for me.

I commit less off-by-one errors with 1-based, and I don't have to double-check as much -- so on balance, I prefer it.

[edit]

The amount of karma this comment is getting is undergoing something like Brownian motion.
Proofs of correctness for Amazon's TLS library
True, I meant large-scale pirating, torrenting etc.
>> Amazon has overwhelmly failed at their ventures.

Amazon has a market capitalization close to a trillion dollars. Their failures are part of their strategy, as I mentioned, because they are unafraid of sinking billions in experiments to find growth, and the strategy is clearly working.

Of course Amazon will not be around forever, just like any other company, but I fail to see how that is relevant to the discussion about their current growth.
It is extremely easy to get a SIGSEGV by creating a double pointer and then attempting to assign something to *p.
Show HN: Buzzngo.io – Real-time public polls using RethinkDB
Processes. A quick skim of the documentation linked by the person I answered suggests that processes can be associated with a job object, but threads cannot. But a process cannot really be suspended directly, except by suspending all its threads.
Honestly, learning Windows is just like learning another programming language. This API is designed to be the Windows equivalent of a unix API - of course it's not going to be the exact same thing, but functionally it does the same thing.
By that definition, airlines are public transportation.
Do technical writers need product owners?
I've found that pomodoro solves two problems.

First, 25 minute is a small, non-frightening investment of time that you CAN do; so it facilitates starting an activity.

Second, since 25 minutes is indeed a short span, the clock usually stops before you have completed the activity (meaning that you know what to do next) and also before you are tired. So after a little rest it is also easy to start another pomodoro. And so on. You keep momentum.
The mandated standard code sets are actually mappings of code values to prescribed meanings, so they are in fact prescribed semantics and not just bare syntax.

Likewise the mandatory transaction standards prescribe semantics and not just syntax.
(I was mildly disappointed to note that sans-serif font on James Clear's site is not Clear Sans.)
And the original SC version was written by James Gosling, the guy who went on and invented Java. I happened to attended a talk by him recently. To my surprise, the guy mentioned very little about Java, which I thought to be his greatest achievement. For most of the talk, James just discussed his work in space-communication technology and the development of an autonomous marine-time vehicle in his recent employment. He went on and talked about the IOT devices and felt annoyed that people think that they could shove NodeJS or Python code to a embedded device.
It's amazing that I feel like he's still pretty much interested in doing the daily developing/debugging: his eyes were lit up when he talked about debugging the autonomous vehicle underwater in Hawaii.
Hi HN,

my name is Basti, and I would like to showcase our project Buzzngo with you. Our system is running with RethinkDB under the hood and although the company behind it faded away we still think it's a nice tool to power real-time statistical analysis.

Our tests in Frankfurt, Berlin and Hamburg (Germany) were great collecting thousands of votes during a sunny day. Feel free to sign up if you want to start public polls in Germany/Europe in the near future.

Happy to hear your opinion!

Greetings
Basti
> An attacker in possession of the primary device can increment the counter, making the primary still working

In the article I explain how to make it impossible to just "increment the counter" of the primary token, see this section: https://dmitryfrank.com/articles/backup_u2f_token#caveat_wit...

> In crypto, keys are secrets, the rest can’t be relied on for security.

First, there's no 100% security in the world: it's all about time and resources, and a proper security consists of many layers. The counter is one of them; after all, it does exist in U2F protocol for a reason (to prevent clones).

And if you've read an article, you'd notice that it mentions: the backup token should only be used to log into accounts, add a new key, and invalidate the old one. Of course it would be a bad idea to keep using backup token. To avoid waiting for the new pair of tokens to arrive, I keep them together with my backup: my backup consists of the backup token itself, and also a brand new pair of tokens (new primary and new backup), which aren't used anywhere yet. So if something terrible happens and I lose my primary token, I go all the way down to get the backup, use the backup token to login to each service, add a new primary token, and revoke the old one.
:raises hand: I use it!

If you have no problem with focus, perhaps you don't need it.

I've found it useful at my work (consulting/team lead) where I'm expected to be somewhat responsive to email/slack. Rather than leaving Slack/email open (rookie move, I know), I use Pomodoro (currently at 45/5) just to remind me to open them, check for new stuff, and then close them again for my next chunk of work.
Yea, some combination of that for projection mapping, and perhaps sending directly out to Artnet/sACN for LEDs, servos and lasers? Still trying to piece it together as things get bigger and bigger.

My contact information is in my profile. Can you reach out? I'd love to see some of the stuff you're doing and ask a question or two.
Are you being serious? The vast majority? It absolutely does not work like that.
the video game crash was mostly north america/usa though, wasn't it? from what i've heard europe wasn't as affected by atari's woes and kept chugging along with home computers over consoles.
> If Bank A makes my PIN number automatically the last 4 of my SSN, and Company B discloses that information

By Kerckhoffs's principle

> https://en.wikipedia.org/w/index.php?title=Kerckhoffs%27s_pr...

a cryptosystem has to stay secure even if everything about the system, except the key, is public knowledge. So Bank A is at fault, because it neglected basic guiding principles for designing security systems.
The section from the "About" page of Tesonet (26 Apr 2018)[1], which got removed soon after that HN thread:

"For the latest project, Tesonet is working together with an international brand from Switzerland to create a security product that helps users protect their network traffic. As part of this technical partnership, we are collaborating on datacenter and network infrastructure that can easily supply 10 Gbps worth of bandwidth to users around the world. The product is developed using the latest authentication encryption methods and the best practices in the security world."

[1] https://web.archive.org/web/20180426161609/https://tesonet.c...
List of Online Jobs for Students in Nigeria That Pays (2018)
How would brutalist design make the point any less valid?
Search for SS7, it's a swiss cheese of vulnerabilities.
China is very much communist. It's very different than 19th and 20th century communist state, but the US looks very different than a 19th and 20th century capitalist state.

The Chinese governmental structure is very much communist. The ideals in the propaganda are communist. The goverment has strong control of their citizens, controlling how many children they can have, which city they can live in, etc.
Heretic.
Phone numbers are specifically designed to serve as public identifiers.

I don't think you can expect a security mechanism that is supposed to work counter to that to work very well.
Forward secrecy: how TLS 1.3 stops the mass surveillance that Snowden exposed
Ask HN: Are modern browsers just not that good?
Kept finding myself going back to this post:news.ycombinator.com/item?id=17638477 and was wondering what happened to all the mainstream browsers? Is there any out there that are user friendly and customizable without being locked down?

I mean Edge is getting to the point where it's somewhat useful, IE is...well, IE, Firefox is now a clone of Chrome, and Chrome is at a point where I'm afraid to have more than one or two open tabs because of the amount of system resources it consumes. What happened?
I fly regularly from LON to NZ to visit family. I would also happily pay extra for the break in the middle. Hell I've even paid for business sometimes, since it's so bloody long.

I wish there was an overnight ferry option of flying, where the cabin is just bunk beds, like russian sleeper trains.
Following this analogy, would the bank sue the builder or vault manufacturer if they gave someone a key to the vault without the bank's knowledge and it was used to rob the vault? Or might the bank sue a armored carrier for irresponsibly storing monies that were stolen in transit between banks?

Maybe you can be your own bank, but banks have to depend on external factors/entities to do what they're supposed to do as well.
...and why all the downvotes? Interestingly, if I write from other accounts I don't get all this downvoting.
The ugrads I've seen have been wearing them around the waist, but now that you mention it, I do recall seeing older folks (older than ugrads, I mean) wearing them over the shoulder.
Computing, Climate Change and All Our Relationships (video with Transcript)
Yes it's bad UX on mobile, here you go:

https://raw.githubusercontent.com/mvdan/talks/master/2018/go...
> It's not clear to me that the Cache API offers the same level of security guarantee.

Last I checked it seemed there wasn’t any way to prevent the service worker itself from being updated.