skysight-inc/HackerNews huggingface dataset:
unless they were designed for the load, long time water retention etc- it can be an expensive rennovation/refit and brings additional maintenance costs but it is still a good idea.

There are increasingly Tax breaks for necessary investment available in cities in the US doing this (1)and certainly many other countries/regions e.g (2) have various on going policy initiatives for similar developments.

all in all - its highly dependent on the building and local planning regulations - but more and more places are open to supporting it and hopefully actual adoption and implementation accelerates soon.

(1) http://myplantconnection.com/green-roofs-legislation.php

(2) http://ec.europa.eu/environment/nature/ecosystems/background...
He did it as part of the effort that resulted in Justin getting his account back.
Finishing my first big hobby project. Anyone can post and vote on Audio Books
There is zero evidence of enemy tampering in recent Navy ship collisions / allisions. It was simple incompetence and bad luck. There's really no way to tamper with shipboard surface radars, binoculars, horns, and VHF radios. As long as that equipment is working correctly all collisions can be avoided.
No, not really. Files at ~/.* were never readable or writable for strict snaps, even when they were granted the "home" interface, precisely for that sort of reason. The file permissions and ownership are also strictly checked by the store (no setuid bit issue). Classic snaps depend on manual approval, and need to be acknowledged by the user before being installed for that reason, etc.
I have a three year old Chromebook, still really useful. Kevin Mitnick in his latest book suggests Chromebooks or iPads for online banking because they are more secure.
Guessing some other company involved with packaging formats?
Netflix has a right to rent physical discs, but streaming is different than lending. I would love for movies to have compulsory licensing like music does though.
Even if Bloomberg would be incorrect, the good thing will be that everyone starts looking now and in the end it might become a self fulfilling prophecy. It's unlikely that something like this wasn't already done. Scale and targets could differ though
You can't own the stream, but you can still buy the DVD, and first sale still applies there.
Show HN: Donald Trump Reviews – Anonymous, Realtime and from Around the World
I run my DB at scale right now. About 2h of work a month. Hint I don’t use mongo.

Both AWS and GCE offer hosted Postgres for less than third party hosted mongo.

What model is good for mango? Postgres has jsonb. Cassandra has large scale data. Mongo is in a weird spot in the middle that isn’t great at anything.
>I suppose Uber could validate the GPS position of the driver and my phone and use that to validate my story, but I doubt they went through all that trouble :(

For that, I assume they would need to have tools built for that specific purpose, with security/audit in place. I doubt any support guy could just randomly query for GPS data for drivers/users.
And this is why I don't think those clauses should be valid. There's no way to negotiate with Verizon over that; it's take it or leave it. Either you accept that they can take things away without recourse, or you don't get anything.
I read HN everyday and really look up to you guys, this is my first "big" project and would really like to ask for any feedback.

Like the saying, "any project with a database is a database project" this has been the same. I have a huge database of audiobooks and related data. My goal is that each audio book will be a post on the site, then the home page, (it is sorted by number of up-votes) is essentially a long term (semi-permanent) ranking of peoples favorite audio books.
The Jedi dropout was iiuc, because Google doesn't have a data center fully staffed by people with security clearance, more or less.
Not sure why this got downvoted - pre-existing conditions are covered by law but that doesn’t mean the procedure at that hospital is covered at the same level as an in-network shop.

I’ve been charged out of network at an in-network hospital because the physician didn’t identify themselves or their network. If they’re not your primary doc it might be worth asking for someone who is covered to save you hundreds or thousands of dollars.
Using mongo as a DB adds more risk then using self hosted Postgres or MySQL. You can use provider hosted Postgres or MySQL for less money and a better product.

McDonalds is very popular, doesn’t mean it’s good food. Be wary the metrics of success you use.
The Osprey is shit engineering. It can't even fly in a dust cloud, which makes it essentially useless for one of its main intended missions.

https://medium.com/war-is-boring/the-v-22-can-t-spend-even-o...
I'm a Lambda school student. AMA

I'm in the FSW program but we're past that now. I've watched how people move in and out of the cohort I'm in.

I went in knowing how to make a basic website, a bit of sqlm and a bit of a few other of the topics covered. This put me ahead of about 60-70% of the cohort.

I have noticed students getting very hung up on the particular stack. It does seem that a few are just copying and pasting code to get it to work.

This was also the case when I went to college though.

What I don't see people mentioning is the effort their putting into improving the curriculum. It's a living thing unlike most college classes I've been in. They no longer teach Bootstrap for example (which was probably causing most students more trouble than it was worth).

I'm on average doing something coding related 8-10 hours a day now. Occasionally I take days off and go play Minecraft or something. I make about one extra project every two weeks the latest being ( https://whatisthecolorofthesky.netlify.com/ )

The people I see being the most successful are the ones who probably could have succeeded without Lambda. However I think a sense of direction, a constant source of help, and a sense of community accelerates the pace.

I don't know if I'm going to regret spending 7 months (plus whatever the job search takes) of my life doing this but hey it beats what I was doing before.

If you're curious what the class content looks like it's in my Github which is linked in my profile.
how did you loose your 2FA device?

this is what scares me the most about using 2FA.

github for example says if 2FA is lost there is not way to recover.

i have lost a phone number before... and although github also supports other 2FA devices, such as a rotating key app which can be on multiple devices, you have to set up all devices at once. so i can put it on my laptop and my phone, but not my home and my work computer unless i carry one to the other place. phone and laptop is not enough. if i use my bag, both are gone. and i'd have to reset all devices if i ever want to add a new one.
at that point i am more afraid to loose access through stupidity than through theft.

no thanks.

greetings, eMBee.
Who creates 10k threads, really? The hypothesis seems like a strawman
I think I saw this before. I don't know about the back end but the page itself could use some work, if you are not a designer by training it may be worth hiring someone. Five bucks on Fiverr could get you a redesign that looked more web 2.0 and less web 0.2
Cook’s successes have been....AirPods and the iPhone X?

Sure, Apple has made tons of cash but their products have been lackluster. The Mac Pro bombed, keyboardgate, the stagnated phone development...
This isn't a cold hard algorithm, and my dispassionate stance here doesn't mean I'm lacking empathy-given the specific context I've brought up: there is no decision tree here being pondered.

It's also not an endeavor to be correct about the matter.

This is an attempt to objectively understand what appears to be an interesting dichotomy in popular responses to who we allow to be the gatekeepers of disseminated information and opinion, and what (un)enumerated power we tacitly give them.
Richard Thaler - 21 results.

Bengt Holmström - 8 results
I've been told the Android One program is the spiritual successor to the Nexus line. Does anybody with more knowledge or experience feel like commenting on that? Do those phones get updates as reliably as a Nexus would in the past?

Also, how does one shop for a phone these days when you want plain old Android and sensible security updates but have other feature concerns as well? I don't want a flagship phone, don't want a giant phablet, and care more about offline GPS performance than data performance...

I am still carrying a Moto G4 Play which I think is borderline too big. It still lasts almost a week on one charge when I take it into the woods in airplane mode and just use the camera app and OSMAnd+ with GPS logging for 3-4 hours per day.
I thought Lauren does a good job here of distinguishing between the people who work at a company, and the emergent behavior of a company based on profit motive or other incentives.

Throughout the article, is the explicitly stated assumption that Google's enemies/critics are evil. Google has plenty of good critics with good criticisms. That's precisely the kind of substrate of viewpoint, in which Google is somehow anointed, which Lauren forwards and which underlies the very Google hubris she decries.
Yeah, but that's just giving into them. If I've had my username for a long time, and I like my username, why should I have to be the one to change?
But I still want to be able to use my Flatpak VsCode to edit config files in .local or .config, and I still want to use my Flatpak Gimp to edit images in .local/share/icons.
Here's an example from just today:

"This article has been updated to indicate that the 1,500 people who were errantly registered included non-citizens, but that did not mean all 1,500 were non-citizens."

[0] https://www.breitbart.com/big-government/2018/10/08/californ...
I think flatpak is probably the right choice for a phone. Assuming equal developer attention on both flatpak and deb repos, there's nothing inherently worse about flatpak.

The nice thing about flatpak for a phone is that it could in the future offer something like the Android/iOS permissions interface.
One reason this issue isn't explored much is that it doesn't have much in the way of practical implications. You don't need permission from Movies Anywhere to inherit your parents' Movies Anywhere account -- as long as you learn the password, you can just use the account without bothering to notify Movies Anywhere of anything.
“Sandbox” and “full access to your home directory” doesn’t compute. That’s literally one of the biggest reasons to sandbox applications.
How the Border Patrol Threatens Civil Liberties Far from the Border
Lexington Kentucky could be a good example of this, though I dont know if UK would be considered small.
Well, I came to Google via an acquisition in 2010, I worked for years on the GWT (Google Web Toolkit) compiler, and related web compilation tooling. Then I switched to the Apps team (Inbox and Gmail) for a few years. Now I work in Research and Machine Intelligence.

I'm not on the Chrome audio team, but I have had experience with Chrome Audio, as I implemented an OpenAL layer for GwtQuake and the web version of Angry Birds for Chrome using it. See https://www.youtube.com/watch?v=F_sbusEUz5w for example PlayN, a cross-platform (Web, Android, iOS, Flash) library I worked on in 20% time, and https://www.youtube.com/watch?v=aW--Wlf9EFs which details some early experiments with image processing, and the porting of Quake to Chrome in 2010.
The people who own streaming rights would go from having something that is worth money to something that is completely worthless.

Netflix is one of those companies so even they wouldn’t fight for it.
Pretty cool comment overall, though I'd like to offer one correction: Iran doesn't force women to be veiled.

They say women should wear head scarves, yes, but not a veil that covers their faces.

In fact, if you go to their capital city many of the women have just as much of their head covered as the nomadic women you saw in these pictures. (Note, in other, more religious areas women will tend to cover all of their hair, but that's the only real difference)
> There is an SELinux policy that attempts to confine snapd itself, which was contributed by the guy working on the Fedora/CentOS package for snapd (though it looks like the policy would also work for openSUSE and Debian SELinux setups, too).

Snappy packager for Fedora here! :)

Yes, it's true there's an SELinux policy that confines snapd, but it does do some limited enforcement of limitations on snaps, too. It's just not as nice as I'd like, but that requires snapd to learn how to work SELinux, which I can't really do...

And yeah, I tested the policy on Debian too, it works! It should work on openSUSE too, though it might need a slight tweak.

> In addition, the majority of snaps are not sandboxed at all anyway, as they operate in "classic" confinement.

I don't think it's the majority _per se_ (since Ubuntu Core can't run those), but most of the popular ones likely do.
> "If you did it you must have felt like doing it"

That's exactly correct. Every action you took voluntarily was your choice.

You are always doing whatever you want to do. You may tell yourself many stories in your head, and we can dispute free will, but as long as we assume it for the purpose of this discussion, what you do is your choice.

So to me the biggest step in fighting procrastination seems to be deciding what do you really want to be doing with your life and eliminating wishful thinking (i.e. thinking that you can get foo without doing bar in case where that is not possible)
It should be terrifying! You’re handing your hard earned money to a company in exchange for access to something narrowly defined in a 100 page Terms of Service document, written by company lawyers, giving them tons of escape clauses, with no input from you. You’re smart to avoid the trap, but unless other people do also, in large numbers, nothing will change.
The piracy stuff is inviting trouble.
There is a pretty large chasm between a log cabin that is up to code and a pioneer home. And the cost to build reflects that.

Desirable areas are expensive because regulation has allowed some people to make vast fortunes, allowing them to spend almost limitlessly on living in those desirable area.

Tech is the prime example of that. Without regulation like that which surrounds intellectual property, software would be quite literally worthless.
How often have you known a (non-diploma mill) college or university to just pick up and move? Or, how else would they “remove all their tax paying “?
Indeed.
I saw a brilliant presentation in 2012 by Michael Mitzenmacher from Harvard on verifiable computing in the cloud.
It was based on this paper:

https://arxiv.org/pdf/1202.1350v3.pdf
As for Google, considering everything that's come out in the last year, they've gone from a company I always wanted to work at to a company I cannot imagine working at.

I can well imagine what it would be like, and I would be frightened to work there.
Ok, I’ll bite. Why would a person be interested in your views of the crisis as a college student?

This is an honest question, I’m not tying to be critical.

I couldn’t figure it out from the amazon description.
How to reshape and grow a design team
AWS is total crap? We received great support and advice for just $30month extra with AWS. It wasn't emergency support granted but helped us with various cloudwatch setup detailsm
> Applications that only store user data on end-user devices will not need to complete the full assessment but will need to be verified as non-malicious software. More information about the assessment will be posted here in January 2019. Existing Applications (as of this publication date) will have until the end of 2019 to complete the assessment.

Not clear what "verified as non-malicious" means in this case, w.r.t. cost.
Fedora and Red Hat are not the same thing. Sure, there is a relation between the two, but inclusion in Fedora is not an endorsement or guaranteed inclusion in RHEL.

I just wonder why the author of this page does not disclose his name... And even hides this from the whois info. This could have been written by a person with a grudge for all I am concerned.

Sure, improvements might be needed, but haa the author tried to get this happen in a different way, like a discussion? Creating a webpage and scream fire is not the best approach in my opinion.

The issue raised about security updates for packaged apps is the same as for container images and packages like .deb or .rpm in general. Generating a runtime is a possible solution? Something like an automated way to regenrate packages is needed, like flathub?!?
> the only alternative to dropping close errors would be panicking

I think it could take a callback, so it could note the failure somewhere if I care about it.
I'll just make a file link to .bashrc and call it /tmp/foo.png, what are you going to do? Not open links? Check if the file links to .bashrc?

If an image manipulation software wants to open .bashrc, allow it. If it has permission to write to one, so be it. If .bashrc is such a security nightmare, then perhaps the issue is that programs can write to it. Remove the write permission. Perhaps a security model where restoring permission asks for password.
Factories do this all the time. The paper companies are all lining up for state subsidies in Wisconsin.
I like the idea. But, since hardware attacks like the one proposed are usually fairly labor intensive and they really want them to remain undetected, chances are good that the altered boards were only shipped to specific high value targets.

If it's true that Amazon and Apple discovered flawed ones, all of those would have been returned to Supermicro and likely destroyed for the most part. If Supermicro was aware of the problem and ethical, they likely would have contacted other customers who they suspect could have received altered boards and replaced those boards too. I'm not saying it would be impossible to get your hands on one, but if there's any truth to this hack, I think you'd have to buy a ton of boards before you ever came across an altered one.
The chances of those things happening are rather low for the average user a prompt would solve those and would be a way better solution that just allowing full access to ~ and any dotfiles.
A good number of faculty at smalltown private colleges are adjuncts, with a salary of USD 600 per month and course, or thereabouts. They aren't going to spread the wealth. New faculty are often hired at non-tenure-track level, with a salary around 40-50 kUSD.

Higher education is in crisis. The State University of New York is talking layoffs. They are reasonably sound, if they feel the stress, what is it like at the Catholic College of Our Lady of the High Desert in northeastern New Mexico?

Many small colleges are going to go down in the next 5 - 10 years, and good riddance. They aren't providing a better education than the state school nearby, and they are more expensive. What's the point of Paine College when you can attend Augusta State University for less?
Let's say three drives have failed.

Each server with a working drive reads a contiguous run of 117MB off its hard drive. It then sends the first MB to server 1, the second MB to server 2, the third MB to server 3... the last MB to server 117.

Each of those servers receives 117 chunks of a single 1MB stripe.

It then does a parity calculation to figure out the missing 3 1MB chunks, and sends them to the rebuilding servers.

We have now recovered 117MB of the disk. Our network data sent was 120MB per server. Every lost chunk was recovered via sibling chunks from 100+ different devices.

You can then optimize this by having the servers only send 100 chunks of each stripe across the network.

Once you repeat this operation 85470 times, sending 100+3MB each time, you have recovered 3 10TB disks with a network use of 8.8TB per server. (The efficiency is slightly worse than the 8.5TB for recovering one disk)

So you're still sending over a petabyte through your switch, but that's what good switches are built for, handling cross-traffic from every single port at the same time. A gigabit per server is acceptable, and 10gig approaches overkill.
It's true, but I'm not sure how e.g. VS Code would even work on a truly sandboxes environment. There'd be no file browser.
> How is it more secure when you're still accessing an API?

It only accesses the API with a read-only token during the build process.

> it's not really a dynamic site in the first place and can also be done with HTML or markdown in the same repo

This is definitely true and was an option we considered, however colocating hundreds+ posts with code made the repo unnecessarily heavy and slowed our build time drastically. Our content creators also didn't want to use git to edit their content (they would have to learn git / or use the web UI which is a suboptimal editing experience), nor did I want content creators in our repos.

> The fine control seems the be the only real advantage, at the cost of more moving pieces.

Lots of other advantages that I won't outline here, but our data is completely decoupled from our frontend now, so we can do cool stuff like crossposting to different properties via webhook, data cleanup via API (I ran all the blog posts from WP through some remark tools so we have a more standard look and feel), etc... Might not be the right setup for you, but it works really well for us!
Memory Allocators 101 – Write a simple memory allocator (2016)
He, not she.
There is no reason to make it complicated. Sandboxed programs have their own $HOME. You can drag & drop files into their $HOME. Full stop.

I have been using a directory-per-program sandboxing setup for several years (and still do). It is very convenient, and does not require any additional effort to adapt. In fact, I now have less clutter in my actual $HOME than ever before.

Programmers like to come up with clever ways to solve nonexisting problems. I say — give user a way to bootstrap a sandboxed environment into a directory of their choice (no, using auto-generated directory names is NOT allowed!), and the "problem" would no longer exist.
SELinux and AppArmor would allow you to specify that your text editor is allowed to edit .bashrc, but some random other program isn't.

But I agree with you that this is not really a useful security feature -- you'd want something where a program has to be explicitly granted permission rather than some programs being able to do things that others can't (because then any attacker will just spawn "vi -c 'bad payload'" to get around the restriction).
What we lose when we move from social to market exchange
long after edit: I guess it's not technically one character!
MSFT was caught buying services of some PR company to make negative waves about Google. The "general hackers" discontent is pretty recent. We can't really tell who is paid to talk bad about Google and who does really mean it due to ethical concerns, so she has a point.
This is part of why I bought my own NAS. All my movies and TV are downloaded to the NAS before I view them. Once Lidarr has support for Spotify imports I’ll be hosting all of my own music too.

I can stream all this content too - the experience is not much different from Netflix or Spotify and the content is usually much higher quality (lossless audio and higher bitrate video). The experience is more private too - no analytics on what you watch, no one harvesting you for ads.

I feel so much secure truly “owning” my content than having it bound to some service that can disappear at any time, along with the content on it. I’ve lost countless songs and videos due to Netflix or a music service’a contract ending.

For data resilience and redundancy, just perform encrypted backups to your cloud service of choice.
Twitter – Night Mode