skysight-inc/HackerNews huggingface dataset:
But those were one-time breaches related to patchable software flaws, and nobody knew for sure if a national-backed entity did it (maybe except Stuxnet https://en.wikipedia.org/wiki/Stuxnet). They were not hardware and not directly linked to the Chinese government.
Uh, the cover did not move me. Especially at $150
I'm releasing my diary from 2008, if anyone is interested. It comes out in November 1 on paperback and Kindle format. You can pre-order. It's from my Princeton dorm room, and has interesting stories and stuff from the time. Many smart people did not see the crisis unfolding.

There's a lot of interesting investment lessons from the book, and it's the first time a crisis has been covered in real time.

https://www.amazon.com/When-Decades-Became-Days-Princeton-eb...
> Azure is something I’ve avoided since using it for a few months last year. I was working as a Microsoft partner so it was unavoidable back then. Parts of it are alright but the user experience coming from an Amazon background is worlds apart.

Wat? IMO, the Azure portal is amazing to work with, especially compared to the old-fangled, inconsistent UI that AWS provides.

> Show them how some things on Azure need to be done in a clunky web UI

Years ago, this was true, but it hasn't been for a long time - the Azure web UI of today is fast, consistent and looks great.

> some things on Azure need to be done in a clunky web UI, other things need Powershell and other random stuff uses the CLI

I've been using Azure for years, and I'm not aware of anything that can only be done in the UI. I also don't believe there is anything that only works with Powershell, or only works with the CLI.

> how that effects the design of DevOps pipelines and automation in general. Yes, you can make it work, but why make life hard for yourself

Eh? Azure DevOps pipelines are great to work with, and there's a huge library of tasks available.

After reading this, it doesn't sound like the author has actually worked with Azure recently, so I'm really not sure why he bothered including it in this article.
All-Time Stats of Your Favourite Champions League Clubs
The math here doesn't seem to make much sense to me (ignoring your own labor costs and imputed rent), but i suppose it makes sense on a super simple cash basis.

The back of the envelope math would seem to imply that it costs $17k/person ($6.4k cash + $10.6k Labor (27hrs/week * 7.85/hr * 50 weeks)) PLUS Imputed Rent for their 1,200 acre property (and all the associated infrastructure which could easily be another few thousand dollars a person)
Yes! I don't like games that grind. I have more important things to do with my time. I'll put _some_ time into some grind-y games. I like hearthstone, but don't grind. I play ~5-10 minutes a day. I like diablo, but I get maybe an hour or two a month in usually. I never keep up with everyone.
If the game is more adventure and skill based, it grabs me longer, but if I feel the grind, I lose interest fast.
The original source is Joe Fitzpatrick's interview with the Risky Business infosec podcast. Apple Insider is just summarizing some of the points from that interview:

https://risky.biz/RB517_feature/
If you read over the rest of this thread, you can find opinions ranging from "GOPATH is horrible" to "It's wonderful". And I just want to point out this is pretty good example of how important the marginal improvements can be. Abstractly, you might have a hard time sitting there imagining how for a thousand of your users, improving $ONE_SMALL_FEATURE might flip them from not paying you to paying you, but at scale, yes, such margin-based thinking really is important. Just like you may find it hard to really intuit that going from .75s page rendering to .5s page rendering can have a significant impact on the bottom line for an e-retailer, but, yeah, it does.

Just wanted to point this out as a clear example of such an issue, since it doesn't come up very often so cleanly.
Interesting post. I'm a Linux guy but i'm in a new job so having to ramp up on Azure DevOps. Looked good at first, I actually praised Microsoft but:

1. Creating a project timed out after 5 minutes or so. This was in the gui, but had no adblocker or anything similar. Refreshed page = no project.
2. Went to a different machine, logged in, no project still.
3. Went to original machine - refreshed - no project. Logged out and back in again - project was there.

Azure DevOps was awesome at first but I can not trust something like this when I work with it all day.
Thank you for the mention. My quantum-of-one [0] was my late 94-year-old grandfather [1]. My brother and I gave NanaGram to him for his birthday. (Well, really it was a quantum of two because my grandmother also loves getting photos in the mail.)

I got married this past June and at the wedding shower my Mom gave my wife lingerie while chanting "4 kids! 4 kids! 4 kids!" As you can probably tell, my Mom has 4 kids. My initial use case was "I want to send curated 4x6 prints from my 3 siblings and I to my grandparents." Most people using NanaGram send photos to their loved ones but we do have some folks sending photos to themselves.

@trykondev FYI your title tag is "Mysite." This is a super fun space to be in. Good luck with your launch. I think grandparents and moms are some the best of quantums.

[0] https://www.youtube.com/watch?time_continue=3075&v=4WO5kJChg...
[1] https://nanagram.co/blog/on-happiness-from-tirrell-cook
You should note specific issues, rather than a general complaint.
There's not much to be gained by not flinging poo online when everyone else is doing it. It's not like there's any reward for exceeding the lowest common denominator.
Building a speech recognition system for amateur radio communication
Voltage won't tell you anything. You need to measure current. If a 50ma part is consuming 75ma you would want to investigate why.
But you're claiming the opposite of what happened.
Aren't ear-plugs noise cancelling?

What if they just put tiny speakers inside ear-plugs and bypassed the whole active noise cancelling component?
Who reads Ancient Greek, and why use two characters? Just use ∟ or ⦜ (Unicode “Right Angle” (U+221F), respectively “Right Angle Variant With Square” (U+299C). Don’t confuse either with ⌞, “Bottom Left Corner” (U+231E))
Homophobia.js: Detecting countries with anti-lgbt laws for censoring
Are you a manager now?
It's only a 'potential' because they failed to keep any auditable logs of the behavior of unvetted third parties, AND failed to vet them in any meaningful fashion.

The amount and type of data exposed isn't as bad but this is pretty similar to the Cambridge Analytica scandal, except in this case Google literally didn't even notice. Facebook at least noticed.
Today, I was going through the ffmpeg tutorial on http://dranger.com/ffmpeg/tutorial01.html. C ecosystem has lots of warts, especially with linking, however I settled on some "sane" defaults with all the warning flags, C11 version and clang-format (now I probably still need to use Valgrind at some point).

On the physical plane, I've been practising my longboard carving skills.

Projects that I currently have on my backlog:

- Upgrading my BarrelDB Elixir client (https://gitlab.com/barrel-db/Clients/barrel_ex) to support the new version of the underlying Erlang distributed database.

- Fixing translation from Elixir to Erlang on a function body level of Doppelganger (https://github.com/jxub/doppelganger), an automated Elixir to Erlang code translator working with pattern-matching on the AST level.

Also, reading about ways to limit global warming. I hope the recent IPCC findings make people and corporations change their habits, or at least make governments impose bans on non-electric cars, modern farming practices, etc...
Tika doesn’t do OCR, it only extracts text content from binary files. For an image it’ll only give you metadata and such.

A better comparison would be against Tesseract or ABBYY FineReader.

EDIT: I wasn't aware that Tika now embeds Tesseract.[1] Still, it's a simple wrapper so the real comparison is against Tesseract.

[1] https://wiki.apache.org/tika/TikaOCR
> What exactly is the value of privacy besides the satisfaction that big tech companies aren't making as much money from me?

How about knowing that someone is not being deported from a port of entry based on what they posted on Facebook 6 months ago?
I refuse to work with Azure because of issues like this.
Why can't they put those drivers at the top instead of bottom?
I know. I read the reply posted two hours after mine above.
Good post, Steven. Keep going..
Perhaps it’s how it is phrased, but the $GOPATH thing seems odd.

EVERY piece of software requires a root path to function from. $GOPATH could be /go or /tmp/go or /projects/go/

All software has a file system structure internal to its needs.

Like a lot of things in Go, it makes this implicit status quo plain up and up front.
Agree completely.

AWS portal is bizarre, it's like each portion is written by a different company. In ECR for example, clicking into a repo is fine, but then going back doesn't do anything. Why? Even simple favicons don't look like they're from the same company. When you've got 40 tabs open you want an idea that that particular tab is from AWS or not.

Azure is nicer, but it's not reliable (see my other post on this thread). It's almost like Azure have done too much lazy-loading which persists through login sessions, you can't rely on a refresh to give you the truth - for all the problems with AWS, you can.

And yes I know this isn't CLI stuff, but it's important. Even on fully automated / scripted deployments it's sometimes nice to go into the UI and see what's going on. If it doesn't represent reality, there is a problem.

FWIW GC doesn't have any of these problems, but it is slow.
Because now the NSA has a strategic foothold. If they acknowledge the hack, then the adversary will move on to something else. If they don't acknowledge it, they can secretly mitigate it, by feeding false data, for example, and waste the adversary's time.
Then, send him an email with details, and I would bet if he's interested he will respond and ask for more details.

You might have an opportunity to get funded by him. Don't rely on this comment on HN to hope he asks for details; go get him :)
Phoenix 1.4.0-rc.0 Released
The Missing Hello World for OpenNLP
Nope. Airpods are admittedly a great product and very impressive, but the functionality and stability is going to be an Apple exclusive. They work on Android devices, but not nearly as seamlessly.
Yes, they do by default if I’m not mistaken. The output “cells” are saved alongside the code.
In 2009, when my wife was 20 weeks pregnant, we were told that our little girl in the womb had spina bifida. We had never heard of it. The next day we traveled to Atlanta to see a specialist and get some more information and a second opinion.

One of our options was to move to Philadelphia for probably 6-8 months to be a part of a trial one of the in-utero surgeries referenced here. We declined for several reasons:

* All the daunting decisions that might come with relocation

* Possibility of her being in the control group

* Additional risk to her from in-utero surgery

* Unknown benefit compared to post-natal surgery

Maybe some others. For us, relocation would have been a huge disruption of our life and goals at the time. If not for that we might have been more interested.

I sometimes wonder if I should regret that decision, now that studies are showing outcomes to be better overall, but I don't. We are happy. Our child is not without issues, but she's OK, and we obviously have no insight on how making the opposite decision would have changed her life or ours.

My wife was also able to have VBAC for both of our other children. I'm not sure this would have been possible, had we gone through with this. A small thing, but not insignificant to us.
As described in the above PCWorld link, the problem is that the standard is open ended and the ecosystem didn't all agree on how to deal with analog vs digital audio signals and devices. Some USB-C headphones or adapters will be happy with whatever. Others will not.

Since some phones can output an analog audio signal over the USB-C connector (and ship dongles without a DAC), while others output digital only and rely on the dongle including its own DAC, the argument absolutely does not go the other way. Any lightning headphones or lighting to 3.5mm dongle will work on any phone with a lightning port.

EDIT: Here's a separate complaint - if you want to charge an iPhone while you have headphones plugged in, there are at least splitter/dongle accessories for that. USB-C Android phone? Good luck.

https://www.theverge.com/circuitbreaker/2018/5/18/17369236/a...

>Android Police reported that Google quietly pulled the listing for the one adapter it had in its online store without ever selling it. The product is also unavailable on the manufacturer’s website. According to Android Police, a few units did ship from Amazon, but the reviews were so bad that the product was quickly pulled.
A slew of ads or just a small part of that one ad?
I think her point was a lot of things could kill you but are rather trivial to deal with now with medical care. Not that every sort of infection or illness is a death sentence without modern medicine.

>I am a bit bothered by such statements. Bodies actually can go a long long way before dying.

Yeah, they can. And yet at the same time life is fragile.

https://en.wikipedia.org/wiki/Phineas_Gage survived a railroad spike in the head at a time where that pretty much would have killed 999 out of 1,000 people.

And perfectly healthy people died by the truckload from the Spanish flu, and influenzas that hit healthy people the hardest because of cytokine storms.

People survived horrific illnesses and injuries throughout the ages and soldiered on. And plenty of people died along the way from those same hardships.
Buy it used, it's been the same edition for twenty or thirty years.
"Nobel Peace Prize" is selected by Norwegian government.

Technically by an independent committee appointed by the Norwegian government.
Thanks, I’ll def check it out.

Also, with regard to some folks who are replying to you, it seems that FAA does not seem to think drones or hobby weather balloons below 500 grams is a risk to planes. At least my preliminary search hasn’t found anything.

I’m guessing that even if 100 gram drone gets sucked into a turbine, the plane will hardly notice. I’ll keep looking into it and see if my local airfield has an opinion on 100 g drones, as well.
I thought I was probably the only person who read PNLA book, but it's absolutely fantastic!
All of your characterization here is correct, but does it really make sense to classify it as an internally discovered security problem instead of a potential-or-real-breach when it was present for years, trivially exploitable by third parties, and is impossible to vet? There's no way to know whether or not it was used because there was no logging in place for third-party use of user data, and apparently no audits (manual or automated) were ever performed of these APIs. Google more or less admitted that all they had to go on here was an examination of the third parties who potentially had access to the data, because they have no way to know what they actually did with it and apparently can't contact them to find out.

The reporting is definitely exaggerating the significance of the data that was exposed and making it sound like it's known that the data was collected by third parties, but it's absolutely the case that the ball was dropped here and it's inappropriate to pretend nothing happened. There's simply no way to know, which is itself a breach of user trust.

It's kind of a no-win situation here given the way the media reports on these matters, but attempting to keep it quiet was incredibly foolish - everything remotely bad that happens at Google is going to get leaked by internal troublemakers now, and legal/pr should know that and should have gotten ahead of this.
I am not the author and haven't had time to fully review the spreadsheet they provided.

After an initial look I think he is referring not to the kubernetes specific networking support but the GCP networking.

From the spreadsheet alone GKE has support for cross region load balancers. The author also points out cross region networking.

I don't know the exact advantage the author sees with cross region load balancers since you can only deploy a GKE cluster to a single given region. The GCP LB's are really nice though in that traffic enters Google's network at the closest location to the user and then travel within Google's network, which is wicked fast.

I have not played around with federated clusters in multiple zones so don't know how that would play out either.

They may also just be referring to just general networking from the providers. With the first two points they at least make mention in the spreadsheet of it though.

tl;dr: not sure what the author meant but here here is some food for thought on it.
https://mitpress.mit.edu/books/art-prolog-second-edition

That's the book they meant (referred to as having a "beautiful cover").
How KC Holiday Built QALO, a $100M Silicone Ring Business
That sounds like the original product has morphed into something more invasive than it was in Google's early years.

Could Google have kept making enough profit if they had stuck to the original plan?
People have already recommended it, but "Programming in Prolog" by Clocksin and Mellish was the text book for the Prolog course that SWI-Prolog offered back in June.

I'd recommend the class if it were offered again.
Interesting, thanks for the info on that. I was on an international Air Canada flight last week and they specifically announced that nothing wireless at all was to be used during the flight, including all headphones.

EDIT to add the official policy: "Air Canada is happy to announce that, beginning on April 1, 2018, passengers on our flights will be able to use their personal headphones (of any kind) on our in-flight entertainment system or their personal mobile devices. This service is available from gate to gate at any time, except, of course, while the safety video is being played. Please note that wireless or Bluetooth headphones may be used only on flights with WiFi, because of their technology."

https://www.aircanada.com/ca/en/aco/home/book/travel-news-an...

My flight was definitely a non-wifi flight, so I guess that was the issue?
Using Microcontrollers to save water on farms
>Today’s belated announcement of a security breach related to Google+,

People keep calling it a breach, but I thought it was merely an unexploited vulnerability? I may have missed it, but did it come out that there was a breach as well?
I have a pair of Grado earbuds that create a seal similar to Etymotics, but not as deep. Often times people will stand next to me and speak to me and I won't hear them (music at a moderate volume). I imagine your Etymotics are even better. The only reason I didn't get Etymotics is because my ears are super waxy and I didn't want to clean them every usage.

If you have the models I think you do, they're as expensive as the Bose QC35 headphones. However, Etys are easier to pack, have a better sound quality, and don't need batteries.
There is already a non-targeted precedent for this. How I Met Your Mother inserted new ads into reruns a few years ago.

https://ew.com/article/2011/07/07/how-i-met-your-mother-reru...
This claim seems like a big dilemma for US white-hat security researchers:

1. As a white-hat security researcher, you have an ethical responsibility to publicly disclose vulnerabilities after doing the necessary due diligence (informing the affected parties privately, and giving them the necessary time to respond, investigate, and come up with an acceptable solution).

2. As a US citizen, you can't report attacks carried out by US intelligence agencies.

I can definitely see the responsibility that patriotic duty would entail, but a citizen with no links to their country's intelligence agency being held responsible for the said agency's failure in maintaining operational discretion doesn't seem sensible to me.

Edit: update formatting.
I did say "what an employee would pay at a Silicon Valley company." I pay no monthly premiums, but if I added my wife, it's about $100/month. So you verified what I said above.

And your point about being "fooled" is disingenuous. Canadians pay for their health care through their taxes, so the amount is much higher as well than the health care tax which is nominal.
I really don't mind small notches. My current phone has one about the same height as the notification bar. This Pixel 3 notch is absolutely hideous compared.
I bet they're trying all kinds of crazy stuff to make their phones look newer than 5 years old while not copying the notch they have been mocking in their own commercials.

The only thing I can think of is a pop-up camera (done already) or a through-pixel camera (not done yet). If Samsung pulls off the latter the whole smartphone evolution is just done, over, finished.
But that's the thing, by definition, you can't always move up, and in a lot of cases, it's harmful trying to move up when you're really not ready to spend the effort it takes to give there.

It's statistically unlikely that you and your offspring going to perform at world leading levels of being in the 1%. It's the equivalent of buying the best carpentry tools in the industry and then complaining that they're too expensive for your hobby use. If you're going to pay for Harvard/MIT, you're going to get a lot out of them, but the ROI for going to a such expensive school and living in a highly competitive area only works if you can take full advantage by really maximizing connections and getting high grades. If you can't, which is ok, you're just wasting time and money where spending 60% to go to a decent state school and living in a place that isn't next to FAANG office is going to get you 95% of the return in purchasing power.

Sooner people realize you don't have to be the best, richest, smartest, etc to be happy is when people will stop mortgaging their future to try to achieve something they don't actually want.
GitHub feature request issue (+1) botting?
I don't have a choice unfortunately.

BTW never had a problem bringing up an instance quickly on GC. AWS sometimes just sat there for a while, depending on the instance type and region. Azure just stops because it feels like it. I'm sure GC isn't any better than the other two, it's just less utilised.

The UI is my biggest issue. Yes, we don't depend on it because we all script our stuff. But after spending an hour fapping at an SSH terminal it's nice to look at the UI and see stuff happen. Azure is the worst at this, with AWS a close second.

That reminded me of my favourite bug with AWS UI / Container Registry - you can order the list of container images any way you like, but it'll only order those it's loaded. So i'm looking for a new image called 'zzzzz' but it'll never appear, I need to search for it. Did anybody involved ever use this?
> Based on prior experience with investigative journalism there's no way they would go all in with a story like this if they weren't standing on firm ground. Every single sentence would've been vetted.

And based on my prior experience I would make the exact opposite conclusion. Technical writers are rarely technical, and they seem to be happy to make stuff up and mislead - even if unintentionally - so long as they make their deadlines.

Every tech article written about a subject I was directly involved in has not even gotten the spirit of the topic remotely accurate, much less minute technical details such as what chip is used where.

That said - I fully believe supply chains are entirely compromised. I just don't think in this case I'd really put much stock into this specific reporting - they've already been caught blatantly misleading their readers by putting up a photo of a stock Mouser part and not denoting it as such.
me, too.
Personal projects:

~/projects/USER/NAMESPACE/PROJECT

Company projects:

~/projects/COMPANY_SLUG/NAMESPACE/PROJECT