skysight-inc/HackerNews huggingface dataset:
I’ve found that I could wear a bandanna under my helmet to cover my ears (and absorb sweat or keep warm, depending on the season), and significantly reduce the wind noise—specifically so I could listen to audiobooks more comfortably.
Real link: https://stratechery.com/2018/the-iphone-franchise/
here's an article about how much less disk space is used by pnpm. This concept will probably come with the same disk space savings http://www.andrewconnell.com/blog/npm-yarn-pnpm-which-packag...

but this concept is fresh, pnpm already works;)
Modern intersectionality dictates that people be treated very differently based on their gender, sexuality, and ethnic origin.
I think you're referring to the package-name-maps[1] proposal. We've been made aware of it during the middle of the development, and while we chose to continue using the static data tables approach, they aren't incompatible.

The reason we abstracted the static tables behind a JS api is precisely to make it easier for everyone to experiment with various implementations - some might use the internally embedded data as we do, some could consume a package-name-maps file, and some could do something entirely different. As long as the contract described in the document is fulfilled, everything is possible.

[1] https://github.com/domenic/package-name-maps
Who decides these nonnegotiable values? Society as a whole? If half of the country voted for Trump and believes in his values, then half of the society that you are a part of has different nonnegotiable values. So these values are no longer nonnegotiable and are now very much just whatever values the majority holds.
There are typically three things you need to think about:

1. The intended audience, whether an individual or group.

2. Anyone who could generically presume you somehow meant them or were commenting on their life.

3. Actual people you personally know that you actually are speaking about or that might legitimately assume you meant them when you didn't.

Group 3 is probably the biggest source of trouble for most people. It's the one I make the most effort to account for.

My brother-in-law is (or was) a programmer. Though his hourly rate is certainly something I envy, he has a history of working part-time and intermittently and is more talented at spending money than at making it.

That strongly shapes my failure to live in awe of programmers and my failure to presume them to all be wealthy and powerful types. But I believe this is the first time I have said such on HN because it's challenging, at best, and potentially impossible to express that without sounding like I am putting him down. So I just never said anything about it. Most people didn't really need that information anyway, so not saying something potentially offensive to my sister, her husband and other relatives was the easy solution.

Basically, before you tell that cutesie anecdote about your own life, contemplate what it says about people connected to you and how they might feel if they heard you telling that story. Does it cast them in a bad light? Could it be construed as such, even if that wasn't your intention? Is there some means to tweak it to make it less problematic?

The other thing I worry a lot about are acquaintances that will think I meant them when I didn't. I try to not make comments that could be taken to mean I am talking about them when I'm actually not. This is often a matter of tweaking it slightly. It might be as simple as saying "a curly haired person I know" instead of "a blonde person I know" to make sure a blonde acquaintance with straight hair doesn't assume I mean them.

Group 2 is best addressed by finding a sympathetic framing and going ahead and giving some provisos. Don't assume that folks will just know that, of course, you would make allowances for X.

Your friends and relatives may know that, but other people won't. It helps to view it as simply an artifact of clear communication.

The mistake most people make is only thinking about the intended audience and stopping there. You do need to think about that. But you should also think about anyone you are "talking about" or could be construed as talking about.

Edit: To be perfectly clear, I'm not putting my brother-in-law down. His work history is due in part to supporting my sister's career, a thing she doesn't appreciate enough.
Leaving the computer on is a cold boot attack now?
That's true, but it's what encrypted filesystems are supposed to prevent. The lesson is that sleep/low power modes are not enough. You should be powering-off or hibernating any time the computer is not in use.

Unfortunately this is against many enterprise policies for desktops, because they like to apply updates during off-hours and need the computers to be on (or at least able to wake up from sleep) to do that.

For laptops, you should configure them to hibernate when the lid is closed, not just sleep.
Everyone's quickly jumping in to post "physical access is not secure", while over there Apple have iPhones that appear to be almost completely secure against all but the most dedicated state-level attacks (and of course compromised accounts). We can do better, and should. Without compromising the freedom to change operating system.

Mind you we also need to keep pressing on security for the desktop, against ransomware and malicious installs. Again without compromising freedom of choice.
Ah. Swipe customization. Well I guess that's a little better. It's so feature heavy though. All this stuff is pretty buried.
Aston Martin Teases Rapide E EV Packing 600 Horsepower and 200-Mile Range
If everybody had the same "morale", the world would be doomed in weeks.
I tought only clever people ended up CEO, not amoral cowboys.
The guy dosen't even think about all the people he has an impact on... I would have laughted my ass of 5 years ago if I red this thinking this was the biggest troll ever, but to realize people actually think like this today is really sickening.
Nvidia's Rolls Out Next-Gen DRIVE AGX DevKit for Autonomous Vehicles
Haven't happened to me ever, but then I've never used Uber in France.

Is there anything you can do in the app like raise a dispute, etc?

If not, for 3.26$ I'd just let it go and leave a 1-star review to the driver. Such a review can cost the driver a lot more than 3,26$ so it's actually some sweet revenge.
Trump admin. proposes rollback of methane rules to save industry $484M
Hands-On with the iPhone XS, iPhone XS Max, and iPhone XR
These Three Security Trends Are Key to Decentralize Artificial Intelligence
Off topic. Is there any service to do a "marketing campaign" for a product launch ?!

So if we have a working app page, we throw $X at it, and see how many users we can get ?
When Cryptocurrencies fluctuate, he uses these tech tools to keep track
Bringing packages into your work is your own choice. You should always be doing an evaluation of the benefit given by a package vs. the bloat it brings to your project. For many packages, it is worth it. But if you are in the habit of installing a package just to avoid writing a widget in your UI or writing some helper functions, then... yes, your projects will amass dependencies quickly.
I'm pretty sure Adobe Reader, or CCleaner had that; I was a victim. IIRC it was after EU legislation that made default install of bundleware unlawful.

https://www.google.com/search?q=ccleaner+driveby+install+Chr...

Suggests that CCleaner at least had it, didn't check Reader.
Google employees are highly educated (disproportionate numbers of PhDs work there etc.), and highly educated people in America, on both the left and right, were mourning when Trump was elected. You do not have to be left leaning to think a President who does not read books, who admires dictators, who is surrounded by criminals, and whose campaign rhetoric involved the overt demonization of ethnic and religious minorities (and plenty of dog whistles too), might be a bad thing for this country. I would have voted Republican if the Democrat candidate had encouraged division in this country the way Trump did. I have intelligent Republican friends who voted for Hillary for the same reason; even my Christian Conservative father in law, who said Bush was not conservative enough, could not bring himself to vote for Trump (he only voted for congressional candidates in 2016). People across the political spectrum recognized the danger Trump poses from the moment he started talking about Mexican rapists.

One problem with the "debate" on Trump is the effort by some to make this into just another political disagreement and to normalize Trump. It is not just politics and the all-hands meeting was not a "political event." People have every reason to be scared by what has been happening since Trump took office.
Cold boot attack: An attack in which a running system is reset and information extracted from its memory that survived the reset. Seems like the article is using it correctly.
What’s worse than a dongle? No dongle – The Verge
So do y'all regularly dump liquid nitrogen on your computers after powering them off?

Last I checked, cold boot attacks have to be executed within moments of a computer powering down unless it's immediately put on ice. I don't understand why we're worried about this.
Purser – A library to manage Ethereum hardware wallets
> I was wondering the same thing then read in the article that links with 'single word' descriptions are ok. So my guess is that it's aimed a "linkers" who quote a significant fraction of an article (I.e. eliminating the reason to click on the link)

Wouldn't that also preclude inclusion of the title? How would single word descriptions even be meaningful beyond being used as citation link anchors?
Thanks for asking, tomjen3!

I'm generally curious about the role of culture vs specific mechanisms (laws, regulations, etc.) and how they intermingle. I'm sure I'm forgetting a bunch, but these are the questions that immediately come to mind:

How is Denmark able to limit corruption (relative to most countries)?

How is Denmark able to pay its working class such a high wage (relative to countries like the US)?

How are you able to institute regulations that are both effective but not overly burdensome?

How is Denmark able to balance a strong social-safety while promoting a productive working class/discouraging freeloaders?

What areas would you most like to see Denmark improve?

Thank you again!
Just submitted a project! What's next?
The Psychology of Making Something People Love
My main complaint is probably about webpack and its dependencies. Unfortunately, it seems to be the accepted standard bundler. The benefits of hot module replacement are too nice to forego easily.
European Blockchain startups – infographic
We combined Coin Market Cap’s Top 250 list and our own internal resources to compile a list of 57 Europe-based businesses.

As expected, we found a heavy weighting towards fintech, with a high number of players in the exchanges, wallet providers and investment sectors. To find out more read the full blog post: https://blog.cofound.it/blockchain-in-europe-dba25d92f267
"What's more often happening, is that you change the structure of some object in your store somewhere, that's passed around a lot. And you forget to update the usage one of those places and stuff break runtime."

This is the big reason I tend to even prototype a system with a statically typed language, if it's going to take more than about a week. Dynamically typed languages have the characteristic where they seize up after a week or so of development, it becomes impossible to fit the full graph of who is calling who in your head anymore, and from that point on, you tend very strongly to do defensive code changes rather than good ones, e.g. "this function used to take a string, but now it takes a dict with three parameters, but I'll still keep the code for if it gets passed a string because maybe something is still doing that". Then when the time finally comes to do a big refactor, you're often darned near rewriting from scratch.

I've lost track of the number of times I've refactored something successfully in a static code base of several months age by just continually running the compiler until it's done complaining, and how often I start a refactoring that seems to be going really well until the compiler points me at some bit of code and I realize that what I'm doing right now is actually fundamentally flawed in some way I'd forgotten about. In a dynamic language you tend to just power through those and put in sub-optimal solutions.

Plus, at least in my experience, if you do this consistently, it often is practical, feasible, and correct to just "ship the prototype", because whereas with dynamic code I would have a messy prototype with half the methods taking an unclear combination of values, with the static type-based process I've written something quite production-ready, with cleanly-defined interfaces.
Here's about the most prominent example.

https://i.imgur.com/mY0iBWU.jpg

That's an earlier screenshot of the page. It had about 2 million likes at the end. They posted provocative content, government critical stuff, some of it true, some of it false and some of it utter nonsense. None of which is illegal. Welcome to election campaigns around 2018. It's not our fault they have sunk to such a low level, but that's what it is and there's no consolation price for being the good guy.

This page had more readers than all but the biggest printed newspapers, which is quite a feat. Then one day their page was disabled and later deleted.

No real person has been and would be prosecuted for what they did. Personally, I think their content was crap and didn't follow it, but that's besides the point. They did what most politicians and official newspapers do to get attention and clicks.

This was in the early days, when the law was in planning, but not officially passed. Since then, many other pages like that simply disappeared.
The world would be $78 trillion richer if countries had open borders. So I'm not sure what definition you have for "fine".

https://www.economist.com/the-world-if/2017/07/13/a-world-of...
Ahhhh Lucee... An engine specifically designed by developers who refuse to learn/accept NodeJs.

I made a decent career as a ColdFusion developer for about 10-years. I embraced Lucee when it first was launched, and I still use it when I get in a bind.

But that being said, I bit the bullet about 3-years ago, and switched to NodeJS. It's simplicity and speed just doesn't compare.

The CF community has failed to realise that web pages don't really refresh anymore. We are in a world where JavaScript rules the front end, single-page apps are king. So the only useful part of CF is as an API engine, and frankly, NodeJS, Go Lang, Elixir, and Python will all run circles around it.
Omnus – A Siri-Inspired web app built with React and Express
So who is using HHVM other than Facebook? Genuinly curious? Will be interesting to see where Hack goes altogether.
Mate, we're humans. If zeta wants offspring, zeta has myriad ways of producing zeta-derived offspring.
Rubidium atoms mimic the Eiffel Tower, a Möbius strip and other 3-D shapes
I’ve bought two SEs on Gazelle and three on Swappa. I’ve been happy with all of them. Typically “fair” or better quality will look nice.
Hershell – Simple TCP reverse shell written in Go
Really? I thought was just the job of the Global Task Scheduler in the kernel.
SimpleAdmin – simple way to create an administrative panel
Another question—does this also resolve from directory paths to index.js, add missing extensions, and so on, or does it only map package names to directories? As in, does this get rid of all 'superfluous' file system access during resolution?
IPhones are probably vulnerable to cold boot too. It's just that cold boot attacks are absurdly difficult to execute. They only work if you already have physical access to an unlocked device before it powers down. If you shut off your machine and wait two seconds before walking away, you can never be cold-booted
I'm not in the security area, so I'm wondering the same.

From the article:

> like all previous cold boot attacks, their method requires physical access and a special tool to extract leftover RAM.
Well, yes and no.

Not necessarily if you turn off your computer or use hibernation instead of sleep, AND you use full disk encryption. This will stop short-term attacks, like cold boot attacks and the like.

Of course, if they "borrow" your laptop for a while, opens it up, installing key loggers, modifying the firmware/hardware, and you do not notice this: you are f*ed.

I mean: even if you believe that "if someone has physical access to your computer, it's pretty much game over" you don't necessarily drop encryption and user password on the laptop and always put it in sleep mode.
The FBI have trouble compromising iphones despite having unlimited physical access so that isn't true in general.

What I'm worried about is closing these holes while preserving the ability to run whatever software I want.

And also preserving the ability to provide consistent instruction to people on how to install other operating systems. In other words if every laptop has a different magic keyboard sequence to bypass boot security it's going to be a pain to write the Debian install instructions.
BlockFi raised $52M from Mike Novogratz – this is CEO on APompliano's podcast
Here, in the former USSR this drug, known as Furadonin, is like dirt cheap, bottom of the barrel cheap.
So when are we getting encrypted RAM?

With all the talk I hear about "cache being the new RAM", since it's so much faster, particularly the L1, it sounds like it would make sense to have some transparent encryption going on. A random key generated at power on, then kept inside the CPU, and instantly lost at power off, would be enough to secure the contents of DIMMs against attacks like this.
Many people do not always power down their computer completely when they leave it unattended.
Hah. I just did this (yesterday) with Kickstarter. Hit 140% of goal in 24 hours.

I made a write up around what I wanted to do. I made a quick video at work summarizing my key points. And I set a $100 goal.

13 people contributed. More than half of them are total strangers.

This does work and can also be encouraging for feedback.

https://www.kickstarter.com/projects/rememberlenny/new-publi...
Surprised to see so much support for google sheets over excel.

Of course, all the aforementioned issues with excel can be avoided or changed in settings.

Has the pendulum really swung so far to the other side that sheets is the consistently better option? What about keyboard shortcuts and power users?
UK mass surveillance ruled unlawful in landmark ECHR judgment
Or possibly the sql standard
No, a cold boot attack is a way of recovering data from a system you gain access to while it is running.
These fork-like efforts are able to take the risk of the experimentation without putting the mainline project at risk, and their successes allow the supporters within the original project to point to it as a viable path and gain the needed mindshare to pursue something achieving the same goals.

It's a similar model to larger corporations allowing innovation to occur in startups and then buying them out once the model or technology is proven to a degree.
I'd recommend to give the next size up a chance.

I had a much-loved, carefully-charged and -protected iPhone 5 for about 3 years. I thought it was perfect and that it was all I needed.

When I finally upgraded I was given a 6s, and it took about 3 days for me to realise it was just much better. I still have the 5 somewhere, and it makes my hands want to cramp just thinking about going back to typing on it! The screen real estate is also a huge improvement for just about everything.
"There's no reason anyone has to respect ethno-nationalist views against immigrants."

There are plenty of reasons to be against the current immigration regime that don't involve ethno-nationalism but it's nearly impossible to forward any such arguments without being accused of being an ethno-nationalist.
Actually, RAM can keep its contents for up to a few minutes after shutdown. See here:

https://citp.princeton.edu/research/memory/
Probably nothing.

This is just a guess but I don't think ISPs are expected to do any form of DPI. The most likely question they will have to answer is "who is this IP address assigned to?" and possibly "who communicated with that IP?". Neither require any form of packet inspection that goes beyond what is needed to perform routing.
Are you sure/can you provide sources? Given the substantial efforts law enforcement has been taking to get access to suspects' iPhones, this doesn't seem right.
There are so many easier way to compromise the computers of 99% of the population that this particular flaw, while interesting, doesn't really appear all that critical to me. How many people (or even companies) bother to encrypt their hard drives these days? Not many in my experience. And for those who do how hard will it be to phish the credentials using basic social engineering?

If you're carrying nuclear codes then yeah, you should be worried about these attacks. If you're security officer for a small company then you probably have a long list of things to worry about before you have to consider cold boot vulnerabilities.

Furthermore if you're worried about an attacker having physical access to your computer what about simply installing a keylogger or a device that broadcasts your display for instance? That seems massively easier and faster to pull off than the attacks described here.
> Every country in the world has "ethno-nationalist views against immigrants", and things work fine.

For whom?
I am sorry if I will sound cold or not caring (which is not the case at all), but as an US outsider too, I don't get these strong emotions. I look at the cold, hard facts since pure emotions are a bad way to perceive... well anything in this world.

3000 people died, very sad. What were your emotions when 250,000 died in pretty horrible ways during 2004 tsunami? Rwanda genocide? Or any ongoing genocide in the middle east? Surely some NY-based bureaucrat isn't more valuable to you than any other human being, no? I presume you must have had mental breakdown for 6 months after every such event and carry every trauma with you forever.

Damage to infrastructure was substantial, but nothing that city like NY can't absorb in couple of weeks, apart from directly affected companies that were in the buildings.

It sure looked like whole US population froze in disbelief for quite some time, traumatization well supported by US media running 24/7 just about the attack. Now imagine how it is living in Vietnam, Iraq, Afghanistan, Syria, Yemen or other war-torn places where smaller-scale but similar situations happen almost daily (most of them as a direct result of US actions). Suddenly 9/11 is just a small blip on your radar, yet another horrible event in a long line of horrible events.

Things changed (mostly) for the worse, but only because general population allowed it to be changed. To me, 9/11 is a prime example how easily human population can be manipulated, how easy is to scare them into accepting ridiculous things, and how whole society still works on sheeps/wolves principle on all levels. As always, as everywhere.
That's a little unfair since NodeJS was released 3 years after Lucee (then Railo). And probably the main usecase is more around people with stack loads of code already that they need to keep running. If you were a CF shop, throwing everything out and switching to Node was probably not a great use of your time, especially given that Node didn't even exist at the time! :-)
How will this impact OpenJDK?

Or is it time to migrate to .Net Core or something else?
As defined in the article: "when a computer is reset without following proper procedures (what’s known as a cold/hard reboot)"

Even if you disagree, "cold boot attack" is the established name for the actual attack, the new aspect presented here is how to circumvent a certain firmware protection that would overwrite the memory on a cold boot to prevent that attack.

If you would give your definition we could see if it is right, too.