skysight-inc/HackerNews huggingface dataset:
Well that's one way to get attention to important issues, have a few congresspeople get personally inconvenienced by it. It seems like a lot of tall people get elected so even better in this case.

Now, if we could just get them to pay for college and healthcare (like normal Americans) at this stage of their careers we might really get somewhere!
It’s always easy to get these upgrades

Maybe I need to try different airlines. I'll pay the $30 (I would seriously pay an extra $100 for an exit row seat), but every time I try to get one of those seats, even months in advance, they're gone. I'm usually on Alaska, but I'd be hard-pressed to believe Alaska customers are just less stingy than others.
Can you elaborate a bit? Sounds interesting enough but I may misinterpret what you mean.
Most issues (apart from legacy asymmetric primitives) are actually either in the implementation (common in widely deployed software) or the design (even more common in widely deployed software) of higher level protocols. Many implementations issues in crypto code are just regular code bugs. Meanwhile, design issues are not so readily apparent.

There is no linter that will tell you that using the same AES key for years and keeping a block counter in an untrusted location is a bad idea. And if you make your code obscure enough ("abstract" in all the wrong ways), then people will have a really hard time figuring stuff like this out.

And no one does proofs on protocol implementations in practice. Yes, there are some. Yes, there has been some progress to apply it to e.g. OpenSSL — after everyone has been using it for critical infrastructure for decades — so there's like, literally, one practical implementation that has seen a sliver of formal verification.
People have a irrational fear of notches on the internet. In real life I never saw anyone caring about it but on the internet people get defensive/aggresive when they see one.
This is the worst sort if market regulation. It’s based on the fantasy that you can legislate markets to be better, rather than just different. Here, the market has chosen cost over comfort. All the legislature is doing is replacing peoples’ revealed preferences with their own.
dmbaggett was one of the original authors of Crash Bandicoot - I think he remembers how it was implemented.
Unless you're air-gapped you can usually assume that if the machines are syncing to public NTP then there's a way in and out.
I'm only 6'0" but feel your pain. I highly recommend checking your flight on https://www.seatguru.com/ to get a better idea of the seat pitch and whether there's any seats that might be slightly roomier (and ideally not right next to a bathroom).
Hmm, it's working for me on Chrome. What browser are you using? Do you see any javascript errors in your dev tools console (provided you know what that is)?
But in both Apple's and Amazon's denials they claim to have already done extensive investigations.

There's a cost to damaging your credibility.
How many years have we been hearing username/password auth is outdated and difficult and stupid and insecure? Fifteen? Twenty? Something like that at least, and I'm headbangingly tired of it. As tired as of the two factor idiocy popping up everywhere these days. Latest offender I've run into is Digital Ocean, who might otherwise have lured me back with a recent promotional offer. But no, they had to go and ruin it by plastering me with emails and codes and whatnot every single time I tried logging in, presumably because I like to get rid of my cookies the instance I leave a site.

Listen, passwords are not hard to use. Mine are 256 bit and utterly random everywhere they are allowed to be. I manage them responsibly. It's not a hassle, anyone can do it, there are great tools for the job. I do not want any centralised single sign-on solutions or other fancy hocus pocus, I do not need them, and I feel - increasingly - penalised for the laziness of those who can't be bothered.

So, in short, whatever this is about, I can only hope it fails like so many other attempts before it. The Log in with Google & Facebook buttons proliferating on every second site out there are plenty bad enough.
Exciting, but not so ethical. We owe society to put our knowledge towards making it better for all people, not just "our team".
>$600-1000

CDG-JFK round-trip can be done for 300 bucks on Norwegian -- it's insane

Business class will still run you min 2.5k though which is what the concorde was offering
My brain (or even my whole body) can't play HD video.
>Smart people who know how all this works need to dump all their knowledge in to a design and a process.

Great, are you paying?
Security audits, good implementation and proper reserach require the work of rare (as in there aren't many) and talented individuals. The funding model for open-source security is bug hunting and having big corporation who use your open-source product to give you from their money or their talent.

A funding model where you pay the company to hire auditors, implementors and researchers directly could be argued to be the better funding model.

I'm not saying it is better, since open-source has proven itself many times, but it has also failed miserably many times because of lack of funding or interest.

Open source, especially open-source that is produced and maintained by companies with different agendas (for instance google) as opposed to a foundation is prone to having that agenda color the way it works. Commercial product's agenda usually align better with it's customers then some random company. Some would say that in a security product it is vitally important that the creators' motivations are aligned with the users'.
It depends on what you are looking for. Docco and friends seem to only be capable of reversing the relationship between comments and code.

However, they don’t allow you to structure the program however you might like independently the need order and _nesting_ of code. In a lot of cases you can get around this through appropriate design patterns.

I’ve recently taken a quite deep dive into possible tools for literate programming. I work with signal processing so code documentation is extremely important but also frustratingly challenging.

There are a lot of “old” tools for literate programming (noweb, FunnelWeb), and they all lack in platform support, but are exceptionally stable and quite pleasant to work with. The more modern “true” literate programming tools are typically using a form of markdown (no links since my notes are not at hand). The last group are the “coffee script style” tools and they seem to be quite popular and active.

It seems to be a case of natural selection for tooling: true literate programming is serverely disadvantaged in terms of IDE/editor support and the programming philosophy is, unfortunate, too different from the norm. Docco styles seems highly pragmatic in contrast.

One option I haven’t tried yet is Emacs’ org-mode which includes true literate programming support. I haven’t found much with regards to real-world usage.
The interface chip they were working with had a bug on a hardware shift register and the designer were not able to switch because management wanted it to be compatible with the VIC 20. So they implemented a software solution which was 5x slower that with hardware.
Tenorshare ReiBoot Pro 7.1.5.2 Crack with Full Registration Code Latest
As a side note/question.

I have no idea how things actually work in companies like Apple or Amazon, but would it be "normal" (at their size/scale and given their surely advanced knowledge in technology) to have inspections on the hardware they use (inspections at hardware level of the kind capable of showing these modifications)?

I mean do they routinely do these checks?
Here you have it... Moral relativism should get you paid less as an employee. Regardless, the modern craze of relativism should still require evidence.
Then it means that a service is vulnerable by default unless it implements the list of allowed origins. With CORS if there are no headers then it means no authorization.
In NYC you can get from the airport to Manhattan in about 10 minutes with a helicopter flight. There are a few companies that offer it. My friend likes this one:

https://blade.flyblade.com/p/bounce

It's about $200, but if your time is worth a lot to you, it might be worth it, especially since a regular taxi is $60 anyway.
Scary scenario: Apple altered their Warrant Canary in 2014 [1]. I'm looking to see if any of the other companies did the same.

EDIT: Not sure if it's related, but in 2015 Reddit removed it's canary [2].

[1]: https://www.theregister.co.uk/2014/09/20/apples_warrant_cana...

[2]: https://old.reddit.com/r/announcements/comments/4cqyia/for_y...
HMD is a bit as if Foxconn acquihired half the original nokia mobile division, though. Lots of people who worked on those old Nokia phones now work at HMD.
I wouldn't read too much into it. Stocks in general are down today, as bond yields go up.
You can be as sarcastic as you want, but these stories are absolutely indicative of a much larger problem. It might be beyond the capacity of one company to fix, but in the aggregate they represent a serious political and economic threat and need to be dealt with one way or another. Preferably by literally anyone other than Donald Trump.
Ask HN: What is the best Gmail client alternative?
Gmail.com totally sucks now since they've pushed the new UI to everyone (no revert back option). We all hate it, it's confusing, can't even find out if I have a new email because of the color/font/bold they use. Especially when you use Labels. And yeah, it's simply ugly and slow. Hurts my eyes and brain every time I look at my emails...

What is the fastest/lightest client out there you guys use to handle your @gmail.com stuff?

Thanks!
An on-prem "production ready" k8s cluster in under a day? What kind of businesses are you setting this up for? Are these all greenfield projects? I'm sorry, but I find it hard to believe that.

We run on-prem k8s, on bare metal and VMs. Integration with existing storage (we use NetApp Solidfire and NFS), load balancers, firewalls, backup strategy, DR, etc. takes weeks, if not months of work. But we may disagree on what "production ready" means.
Confirmed. The intent is anyone can audit our whole codebase in one GitHub repo for vulnerabilities and not scripts spread across many CDNS and projects which may change over time.
The brain still tops every CPU at visual processing, which may be its highest throughput interface.
Minor word nit: "alright" is not a word. Or shouldn't be. It's not "all right".
> When Gmail got hacked by the Chinese government, Google was pretty honest about it.

That hack involved several companies, most of whom were not up front about it.
First thought that came to mind was: _sarcastic mind voice on_ "huh, didn't apple even patent the notch? They are screwing up left and right now". _sarcastic mind voice off_.
Technically BMC is the hardware and IPMI is the software, but yes they're the same thing.

It's good to change the network port settings to "dedicated" so it doesn't failover... but if it was malicious, and it clearly has the ability to piggyback on your production interface, why wouldn't it? There's honestly no way to secure this without cutting off your hardware from the internet completely (or firewalling it off similarly).
I just got one on an otherwise full flight that I booked 3 hours before departure. I fly Spirit/JetBlue/American mostly. The flight was so full they called for volunteers to check bags, but the seat next to me was empty.
Floppy disks where also much more convenient to handle. If you had more than one program on your cassette you had to wind the cassette to the right spot manually. This was not to unusual, a typical 60 minutes cassette could hold about 100 KiB per side, enough room for two or three simple games.
Good catch, thanks! We'll fix that.
You're welcome to your opinion.

Anecdotally, I've heard from many people that Go only took off in China because chinese programmers like google and it was sold as a language by google.

> Google engineers probably favors Java/Python

That's irrelevant. The fact of the matter is that Go has a company backing it and providing a constant stream of well-paid developers and infrastructure. Most small languages can barely afford to have two poorly-paid fulltime developers.

I doubt go would exist if there weren't several people getting paid very large quantities of money working on it.
Neuton: faster, smaller, better neural networks?
Airlines typically disclose this information even if it's not directly in the search results. SeatGuru tends to have good information, especially with heavily mixed fleets. Airlines also have details posted on their websites, for instance here is what I flew on last weekend, a United 737-800, version 3.

https://www.united.com/web/en-US/content/travel/inflight/air...

Basically if I always upgrade to either economy plus or first since I am almost as tall as you. I also like to work on my flights so I almost always get a bulkhead when sitting in the back.
Well, if your platform can't support implementation of typical Lisp/dynamic idioms, then it's frankly a shit platform and doesn't deserve to be called "general-purpose computer".
Thanks for publishing this post i really like this post
QuoteToMe.com | Winnipeg, Canada | Frontend React (+MobX) Developer | Contract/Freelance | REMOTE
Our mission is to build a more informed, harmonized, and thriving construction community.

We are a young and well funded startup that is building a modern communication and quoting platform for contractors and equipment rental companies.

We Are Looking For Someone...

→ Who knows how to write clean, modular, composable, properly scoped and named code in React + MobX (and vanilla JavaScript/ES6).

→ That knows how to implement new features or improve existing ones based on provided designs and make them even better using good UX considerations and good sense of aesthetic.

→ That can self-sufficiently debug & implement solutions with minimal direction in a sometimes ambiguous environment.

→ Knows how to write code that works across a multitude of devices, screen sizes and browsers.

→ That is always learning, open minded, collaborative, open to new ways of doing things and open to receiving and providing constructive feedback.

→ With experience in working in a remote "asynchronous communication" environment via Slack, Email, etc. And who knows how to communicate via english language with clarity in both technical and non technical matters.

→ That understands values of maintainable and clean codebase and code standards.

→ Has at least basic understanding and experience with GIT (+GitHub).

→ Enjoys taking ownership and responsibility for their work.

Please fill in the form under this URL to apply: https://goo.gl/forms/2C3xOmpwkCWlv2XG3
SEEKING FREELANCER | QuoteToMe.com | Winnipeg, Canada | Frontend React (+MobX) Developer | Contract/Freelance | REMOTE
Our mission is to build a more informed, harmonized, and thriving construction community.

We are a young and well funded startup that is building a modern communication and quoting platform for contractors and equipment rental companies.

We Are Looking For Someone...

→ Who knows how to write clean, modular, composable, properly scoped and named code in React + MobX (and vanilla JavaScript/ES6).

→ That knows how to implement new features or improve existing ones based on provided designs and make them even better using good UX considerations and good sense of aesthetic.

→ That can self-sufficiently debug & implement solutions with minimal direction in a sometimes ambiguous environment.

→ Knows how to write code that works across a multitude of devices, screen sizes and browsers.

→ That is always learning, open minded, collaborative, open to new ways of doing things and open to receiving and providing constructive feedback.

→ With experience in working in a remote "asynchronous communication" environment via Slack, Email, etc. And who knows how to communicate via english language with clarity in both technical and non technical matters.

→ That understands values of maintainable and clean codebase and code standards.

→ Has at least basic understanding and experience with GIT (+GitHub).

→ Enjoys taking ownership and responsibility for their work.

Please fill in the form under this URL to apply: https://goo.gl/forms/2C3xOmpwkCWlv2XG3
Looks like SuperMicro was delisted by Nasdaq just over a month ago. Wonder if it has anything to do with this under their pretty poor surface excuses for not being in compliance.
Surely you can implement your security rules this way. But for most people CORS are a cheaper way to enable cross origin requests. And clueless people are stuck with same origin policy which secure by default.
Outlook.app on iOS (it's hands down the best and I keep forgetting it's not the default mail app) and Microsoft's Mail under Windows 10 (it's not incredible but it's lightweight and most importantly keeps out of the way).
You don't really need to jump into Kubernetes to be prepared to eventually migrate to it. As long as you're using some kind of compatible containerization platform it is not incredibly hard to shift those workloads to Kubernetes. If you're really only needing to run a small handful of containers, running them directly in Docker or rkt isn't challenging and has very little operational overhead compared to running a full k8 cluster.
The most plausible theory I have seen so far it that this chip was embedded in the pcb below an empty pad for the backup flash that loads the management system firmware.
Three reasons this would work well:
1. The pad looks empty on casual inspection.
2. The data and power traces are already routed to that spot
3. The management system is already set up to load from this flash if it is populated.
Strategic Budget Planning
Almost everything on a plane is regulated (for good reason!), I think we'll survive.
Someone used my IPFS gateway for phishing
So no more using Intel?
I once put an audio cassette of The Cure into my Datasette.

Then, I made a short assembly routine to copy that datasette output while playing to the SID. (I think I used the volume register?). it made a very badly sampled sounding version :) was fun :)
Mixing threads with event loops is possible, but so complicated that few programmers can afford the mental burden for their applications.

This is just Apple's Grand Central Dispatch model, or the event loops used internally in Chromium. It's not complicated at all, it's a very practical and productive approach.
At least the open-source crypto can be proven to be good and audited by anyone.

I'd rather use an open-source crypto than take a security russian roulette on a closed-source one.
And I want to grow wheels and be a bicycle...
I've used ruby, java, python, etc and all of them require a decent amount of dependencies to get a server up and running.

Likewise, dependency hell is an issue in lots of languages. The company I'm with has legacy dependency issues with their Java. They have pip dependency issues with Python. The front-end testers learned JS and left ruby simply because they couldn't get their tooling installed on another machine without a couple days work (turned out JS was easier to maintain and faster too). Yarn exists and solves the major issues NPM had (though they seem to be improving as well).

EventMachine or twisted are two event-based servers (ruby and python) with some level of popularity. The big issue with them is every library you reach for has blocking code everywhere, so actually making it work is painful. Promises eliminated callback hell years ago for most of us. Koa/generators eliminate most of the rest as well.

On the flip side, JS as a language is rapidly evolving and node is a serious consideration when adding new features. Node as an implementation is extremely fast and I doubt that there's another scripting language that comes anywhere close to its combination of performance, size, memory usage, startup time, etc.
Absolutely correct, but extraordinary claims require proof. I'm certainly willing to be proven wrong, and of course I could be, but there is no indication that this is anything other than Bloomberg being misled at this point. Location of clearly exploited hardware, acknowledgement by anyone involved, or analysis of traffic from one of these boards would all corroborate the story.
The Commodore Datasette was much more reliable than any of the other systems out there. The one on the Spectrum, Apple and Atari (all std. decks) pretty much gave you load issue 20% of the time. You had to mess with the volume level, etc. My Commodore one just worked.
And let's not forget how the US rolled all over latin America during the cold war...
> Assuming its all crowd sourced, why can't we just verify the details that were linked instead of shooting the messenger?

Wikipedia is a tertiary source by design; you seem to be suggesting it should be a primary or secondary source, which is not it's mission.
Scathing Report Accuses the Pentagon of Developing an Agricultural Bioweapon
Introducing the Secretless Broker Open Source Beta
Ask HN: Is Quitting One's Job a Hiring Black Mark?
I've been in technology for a very long time now, most recently in a large, rather dysfunctional tech company. Most of my tenure, I was working with and for competent, pleasant people and ran my own show under their auspices.

Recently, a major reorganization moved me into a group that, at least among their customers, is regarded with well-deserved scorn. I thought I could be a part of the solution, but after 3 months of abuse, I reached my limit but a transfer out was explicitly disallowed.

After a really pleasant outside job interview, I realized how intolerably horrible my environment had become and submitted my resignation. I have enough resources to be safe for a good while and really notice the absence of dread every morning, and am sleeping normally again.

However, I'm coming up to the time where I have to update my resume to reflect my non-employee status. I'd really like some current input as to whether this is/will be seen as a negative sign for hiring. I have to live with it either way, but maybe there's some way of mitigating it?
It is called business. The company's ONLY duty is to bring profit to its investors and management is legally bound to maximise it. Now, the definition of profit may differ as well as what is profitable and what is not, but the company is legally obligated to work to bring profit and if you throw a good deal because you don't like it you better explain it to your investors.

Whether you like what your supplier does or does not is of no concern. If couple of units can be detected and written off it is treated as cost and you move on to decide if it is still profitable and whether you can get better deal somewhere else.

You let you emotions rule and it just means you are not fit for the job.
Spirit = never again. Worst airline in the world.
Love this post
I know I'm moving the goalposts here, but the houses in Pebble Beach aren't exactly middle-class houses, and not because of the price. A 4-bedroom, 7-bath, 5000 sqft house just isn't a middle-class home.

It's why I try to define "middle-class" by specific behaviors and possessions, not by dollar amounts.
Worries about the rise of the gig economy are mostly overblown
Placing it on a low speed SPI read/write trace to the flash chip containing the BMC firmware is entirely plausible, and in no way would require "dozens (possibly hundreds) of engineers."

EDIT: https://news.ycombinator.com/item?id=18138638
Mohon di bimbing untuk pemula
Apakah saya bisa jadi seperti kalian?
Real world open crypto libraries have sometimes really atrocious code. Openssl being notorious.

Open source is way to go imo, but the automatic assumption that it is good or someone reviewed it is wrong.
how would you measure the moment of inertia though? probably by checking your changes in angular momentum when applying a moment
Astro's Elroy Personal EVTOL in Flight Testing