skysight-inc/HackerNews huggingface dataset:
>The point of the Librem 5 is not to make the most popular possible phone

That's a strawman of GP's words. "The most popular" is absurd, but "minimally viable" is not particularly since security in a major Librem selling point and security is an active process, not a one-off. In turn sustainability matters, and for a hardware project that requires significantly more capital then a pure software project. It's not at all unreasonable to question that or attacking the company, Librem should have good answers there regardless.

>Markets only matter to capitalists. Real hackers share with each other to make things happen that markets do not comprehend.

What a ridiculous load of bunk. The Librem is not powered by good intentions and hacker ethos it's powered by silicon manufactured in an expensive capitalist fabricator, battery which is the same, etc. Ongoing development will need some capital, as will repairs and replacements and infrastructure. Nothing like a huge company but it's there, and it's rightfully utilizing the wider world.

"Real hackers" are hacking, they're doing cool stuff utilizing things for purposes beyond what was intended, pushing the limits in ways not imagined perhaps even by the original designers. Sometimes this has no wider effect beyond a subsect, sometimes it subverts markets, sometimes it creates entire new markets. It's symbiotic with the wider world not cutoff from it! This can be true of not just tech but even law. When RMS and co worked out copyleft, they didn't just rage against the sheer existence of IP and seek to destroy it all or somehow fruitlessly deny that it existed, they hacked it to their own ends instead.
This is the thing I also always wonder about. Consider that about 60% of a banana's DNA is shared with us. And for cats it's 90%. That's just really stupefying to think about. But the more important point here is that I think it is literally impossible for us to even imagine what life that had no genetic similarity to us would even begin to be like. We just have no basis for comparison whatsoever since we are all so closely related.

Though yeah, genetic similarity implying exogenesis would also be an equally interesting result. Would that similarity be organic/natural in nature, or might we just be some species' lab experiment? Perhaps they seeded us with their same genetic origins to discover more about their own evolution and development. This is an experiment I'm certain we'll eventually carry out ourselves. So many interesting possibilities.
The downvotes are because you keep making a non-sequitur strawmen instead of contributing anything of value to the discussion. Why wouldn't I be talking about it at parties?

What's your point exactly? Do you think that Master and Margarita is overrated or do you think people like it for the wrong reasons?
Most prescribed drugs are reimbursed 100%.

Glasses, complicated dental procedures, insoles, ... are very little reimbursed.

The overall total (drugs+glasses and such) is 62% reimbursed by social security according to the article by vie-publique.fr
Cmon the meme is kinda funny.
The watery moons are really interesting. Consider this - if we dumped a few tons of (earth originated) diverse bio-matter inside and on these moons, I would be shocked if not some of the earthen critters couldn't if not thrive, at least gain a foothold in these moons. I mean, considering we find microbes in the weirdest places here on Earth.

So - given that they could live in these moons:

if there is life there already, is it related to Earth life? If not, why not?

If there is no life there, but we could seed these moons, how come they are not seeded already? (From meteorite ejecta etc.)
Guys I found the grammer nazi. Geez chill out man.
The second example looks terrible on my Note 8. The bullets are in the curved screen edge and actually touch the black bezel, making it look like the bezel has little protrusions encroaching into the screen.
> I’d say that leaving kids in a an environment of addictive substances (say, cigarettes?) is a great way to get them addicted.

Just as with social media, my general impression/experience is that people who were kept away from addictive substances (cigarettes/alcohol/coffee/...) growing up tend to be more likely to have problems with them in later life than people who had them around when they were growing up.

(There are specific health reasons to keep particular substances away from young children, but that's a distinct thing).
The speed at which the media have rounded against this meme is breathtaking. Are some memes inherently powerful and just need to be controlled? Why are they powerful? How much longer can 30 year old boomers be let sip Monsters outdoors? It's not right.
You don't have independent redundant internet connections and reliable backup power at your home?
The url is incorrect above, it should be https://history.adversary.io/missions/facebook, the above url includes the "/birthday" which causes the 400
Keep in mind that this isn't true for every system they've detected, it's just more likely than not given current examples - 909 planets in 355 systems according to the abstract: http://iopscience.iop.org/article/10.3847/1538-3881/aa9ff6/m...

There's plenty of differences from our own solar system out there that also don't fit that pattern. Gas Dwarfs are a planetary type that we don't have in our own solar system, for example:
https://en.wikipedia.org/wiki/Gas_dwarf
> The other driver was undocumented and he also preferred not to report.

I don't live in the US, so I don't know - but is that common? To me, it sounds like a significant accident, and I fail to understand why it wouldn't be reported.
For the US, it looks like community college and the different military approaches are covered well. As are some foreign options (minus details of getting in from outside the country). You can also take your time, co-op a bunch, and end up with little out of pocket.

If you are still a high school student, and have a knack for tests, then the PSAT might still the most important test you'll ever take.

20 years ago I was a national merit scholar as a result of the PSAT, and that provided me multiple full-ride scholarship options for engineering.

And yes, it is ridiculous that a computer test you take at 17 can have such a disproportionate outcome, but that was the case, and very well may still be.
I created an account HN just to say that this is the worst example of gate keeping I've read. The original poster has legitimate questions regarding the security of a purchase in this device. Do "real hackers" have unlimited funds and don't have to worry about $800 purchases on still-virtual products?
The strange, sad history of the lobotomy (2011)
The One reason you should learn Python, Java is too old
Memes are propaganda on steroids.
K12 was officially killed.
Yeah but how many of them are modern and elegant?
The hardware looks slick, but are my emails going to bounce when my not commercial comcast/spectrum/at&t/whoever has a maintenance outage? I'm not sure it's too useful to bring that out of the datacenter and into my house...
There are very good open source projects, namely rspamd etc.
> Could you elaborate what you're talking about? Stealing passwords/sensitive info from Chrome temporary files?

Yes. Your browser stores passwords in a reversible format locally. If it's done well it may require root/ring0 privileges to abuse, but I'm unclear on how well local secret stores actually work for application-level secrets. However, if chrome temporary data becomes 100% secure I'll just steal all your documents, ssh keys and other application metadata - thus code exec is game over.

> How can one mitigate this threat?

Don't give me code exec on your box (eg don't run malware).

On a more actionable level, sandboxing every application should mitigate lots of malicious behaviors - iOS and (I've heard) chromebooks do this well, I think MacOS has some degree of sandboxing too. That being said, I don't think it'd be a practical solution for a 'power user' such as a web developer etc given the permissions power tools require are the same ones that are damaging in the hands of an attacker.
I'm a UX developer who has tried and failed every time to get vertical rhythm working. It doesn't.

Vertical rhythm is great in theory. You can even program it in if you use SASS or something like that.

The problem is every example of vertical rhythm is a blog post on a blank page with a school paper ruler underneath.

Even if you add multiple columns it will look great, but the moment you add any sort of visual offset it will break things.

Cards are all the rage right now in UI design. Usually you want card headers to abutt the top of the card by some padding offset (padding on the card). Now you need to make that heading work without padding and still obey vertical rhythm. Good luck.

Borders? Haha sorry, you've now introduced an off by one error (or two if you put them on top and bottom of your object). You probably thought of that already for tables, but you didn't think of that for your buttons or any of your form elements (who also have labels that you don't want to be oddly distant from their form elements).

I could go on, but outside of a mimnimalist page I've yet to see it be more of a benefit than a PITA
Hah! I'm not a Russian speaker and I had the same thought upon seeing the headline. The Master and Margarita is good, but deeply depressing and pessimistic about human society and the world. This obviously reflects the conditions in which it was written, but I wouldn't recommend it as a pick-me-up!
You should check out the sequel to The Name of the Wind, A Wise Man's Fear.
There's a little more detail in https://www.maa.org/sites/default/files/images/upload_librar...
I found the article very interesting (and depressing) but agree with the direction of your sentiment. The article even starts with the Seals being upset about an airstike being called on the wedding party convoy as they thought it was going to cause a larger loss of life than a targeted operation (it did).

I'm sure some psychopaths manage to get into the special forces but I think the majority of these people are just trying to cope with the job they're doing. I read this as a lot of myth making on the part of the Seals to justify what could very easily be seen as straight up murder. By disassociating with reality and instead living a borrowed Native American persona, they're in a way protecting their mental health from the horrible acts they're committing and witnessing.

In the end though I think you're right. Hearing about the details of this stuff on a human level is horrifying but it's more humane to do targeted actions like this then wipe out whole city blocks with bombs or cut off food supplies.
Redundant internet connections? Oh, come on!
If using typescript requires 400 dependencies, it’s a non-starter, and learning it is off the table until your boss forces you to.
So very similar to a Markov text generator, then.

Makes sense, really, since music can convey much more than is evident merely by looking at the sequence of notes.
I confess this campaign is a puzzlement to me. There are a bunch of people all repeating the same idea as a way of critiquing people they believe are... all repeating the same ideas?
Training is about delivering with consistency and compliance. Some training does benefit the employees but that’s not the “primary” purpose.
"if you're aren't a citizen of the state in question you have no right of entry."

There's a huge racial component. Essentially all of this "you're not allowed to" talk is strictly for white people only.
The Ideator's Dilemma
No engineering track though... Also you need to pass a highly competitive exam to get in and it's really somewhat a graduate programme, since you're supposed to get in one year before the master starts, not right after high school.
Yet Another Star Wars API Explorer
As an exercise I created yet another Star Wars API explorer utilizing React, TypeScript, Webpack 4, route based code splitting, Karma, and TDD. The demo is here https://swapi-explorer.joefallon.net/ and the Github repo is here https://github.com/joefallon/star-wars.js

Please feel free to critique it.
> then throw money at lobbyists and lawyers to change the policy.

But when they changed the local taxi laws/policies, they opened the doors to all ride sharing competitors as well, didn't they? If so that wouldn't necessarily count as a competitive advantage, more of a cost of entry to the market.
You just described how insurance works.
Rockstar Worked 100 Hour Weeks to Get Red Dead Redemption 2 Done
Qt Widgets vs. Qt Quick, part 6 in the Qt crash course series
Not even just money.

Part of why I originally used the term "non-amateur" instead of "professional" when I described people who shouldn't work under that definition is that, while students and maintainers of open source projects might not be getting paid for what they're doing, they still have compelling reasons to be more careful about licensing.

One worst-case scenario for a student might be that some software licensing snafu threatens their academic work, and, by extension, their whole career. And open source project maintainers have an ethical responsibility not to get users of their work into legal hot water.

For those people, falling in line with OSI offers a huge advantage: You can't avoid crossing the software licensing legal tightrope. But, by sticking to working with OSI-approved licenses, you can at least ensure that you're working with a net.
Just curious: where are you from?
This is confusing. The only difference between if this were a web component vs a React component is that the consumer would not capitalize the name. Instead of `<Button appearance="primary">` they would do `<evergreen-button appearance="primary">`. That's it.
Most SMTP hosts will automatically retry a few times at spaced intervals if they can’t reach their destination host in first attempt.
The website is not responsive . Why ?
I spent a few months in Darmstadt. Agree about all the positives you mentioned. One negative I want to add is that relatively few people speak English.
I'm unable to build from cargo install pijul

the first error is error[E0277]: the trait bound `T: rand_core::RngCore` is not satisfied
..
this could be related but doesn't help https://nest.pijul.com/pijul_org/pijul/discussions/291
Because not all of us are so selfishly narcissistic and are rather able to consider the effect upon the lives, extant and not yet born, of our current decisions. Your apparent lack of empathy, and similarly our cultural worship of selfishness and self-deception, are foul clues as to our eventual doom. If choices today are critical in determining the viability of human life over the next several decades, but those choices conflict with the selfish wants of children in the present, and those present-day children choose to disregard future generations, then what hope do we have?

The Great Filter for our species is capitalism.
Great honest accurate article. NPC meme is the funniest thing since Ugandan knuckles
Don't most ISPs ban residential accounts from running something like this?

Comcast terms:

> use or run dedicated, stand-alone equipment or servers from the Premises that provide network content or any other services to anyone outside of your Premises local area network (“Premises LAN”), also commonly referred to as public services or servers. Examples of prohibited equipment and servers include, but are not limited to, email, web hosting, file sharing, and proxy services and servers

Verizon terms:

> You also may not exceed the bandwidth usage limitations that Verizon may establish from time to time for the Service, or use the Service to host any type of server.

AT&T terms:

> using such account for the purpose of operating a server of any type;

Sources:

https://www.xfinity.com/corporate/customers/policies/highspe...

https://www.verizon.com/about/terms-conditions/verizon-onlin...

https://www.att.com/legal/terms.aup.html
I suspect everyone here has at least multiple redundant internet connections if they have a cell phone.
Chinese, american, korean, what does it matter to european? Not a bit. Nobody has some high moral ground we so desperately wish for. If you don't want to be spied on, don't get a phone. Otherwise, you're screwed like rest of us.

Better be smart with what you actually do with the phone and what kind of data/apps you use it for.
No. Still stuck to Java 8. We still didn't decide what to do. Probably move straight to Java 11
Crowley defines magick as the execution of Will upon the world. Programming is actually a better fit for this particular definition than most of the western-occult-tradition ritual stuff Crowley himself was doing (including the enochian stuff).

Somebody with only a shallow pop-culture understanding of occult tradition is bound to associate it with fuzzy thinking & children's media. The use of alchemical metaphors in SICP indicates that the authors have at least some familiarity with the history of magick, though.

The most important figures in the western occult tradition were mathematicians (like Dee) or invented early computational or permutational devices (like Llul). Magick is very firmly bound up in this kind of mathematical thinking. On the other side, the mathematical foundations of computing come out of mathematicians who had occult justifications: Godel (and Cantor before him) was a mathematical platonist who dabbled in gematria, and his work on computability was part of the ars magna for him. (In case you're not up on the history, Turing's work on universal turing machines was an attempt to rephrase Godel's incompleteness in a way that was accessible to non-mathematicians, and his later work with Church proving the equivalence between Godel's model and lambda calculus was built upon this work. While computing machines predated this formal basis, the formal basis is pretty important -- we all learned it in college, after all!)
Does this affect other users of NSURL too?
Most email servers are set up to resend automatically for a while, potentially for a couple of days.
Here are a few points by the CBC.
https://www.cbc.ca/news/canada/kitchener-waterloo/cannabis-5...

Basically don't cross an international border with weed.

From the above article "This is the case even if you are travelling to places like The Netherlands or Uruguay that have decriminalized or legalized cannabis."
Netflix ditches freeloaders from subscriber forecasts after volatile stock moves
Yes but the solar system is a biased sample: life evolved in it. Maybe it was helped by Jupiter shielding us from asteroids that could wipe out life on the planet? If it's statistically more likely that intelligent life evolves in a system with large planets then we would expect to see a difference between our solar system and others that we observe.
Adding a security measure knowing that it is insufficient or is relatively easily circumvented, just because, 'hey, it can't hurt!' is really dangerous.

You MUST ensure that ALL involved parties are aware that the secondary measure is a 'bonus' and CANNOT be used to consider the entire system safe.

For example, let's say someone calls the helpdesk and says: I forgot my password, but, I can answer the 2FA thing for you. Maybe the helpdesk operator makes a reasonable judgement here: That's pretty good, the party on the other end of the line sounds pretty convincing, okay, I'll reset their password for them. Whoops: Now JUST a SIM jack gets you in, whereas if there was no SIM based 2FA whatsoever, the helpdesker wouldn't have reset the password.

Another example: During a security audit, some pentester figures out that there is no rate limit on trying passwords, there are no logs or any other detection for figuring out that some system is trying a ton of passwords, and a password check is very fast (let's say no bcrypt or similar system in place either) and the server is hosted in a virtual datacenter, and it is not too difficult to spool up a (virtual) server in the same place: That would allow an attacker (because latency has now been reduced to next to nothing) to have guessed many billions of passwords over the past 6 months. The team analyses this potential leak and concludes that, due to the existence of the secondary system, there's really no need to go public or otherwise spend any further resources. However, you don't even need to be all that capable or motivated to do a targeted attack here; SIM jacking is easy enough, and getting a server under your control that is latency-wise extremely close to the target is pretty easy for, say, AWS ec2 servers. Had the 2FA not been there, this issue would have received more appropriate attention.

Generally, I advise to never add a security feature just because 'hey, can't hurt': It confuses the authentication pipeline and muddies discussion and understanding. Either a feature is adding real security, and any circumvention of said security is definitely something that should be escalated, or, it's useless and should not be added.

With that mindset, I'd prefer to just get rid of SMS based 2FA vs. keeping it around (I'd _strongly_ prefer to fix it and make it 2FA that isn't sim-jackable, for example by using TOTP protocol, but let's hypothetically posit that that's somehow not an option).
Basically, if you want a dorm here, you have to start reserving in May/June.
You can arguably learn more about the practice of EE from Dave Jones' YouTube channel, or local hardware Meetups, or "The Amp Hour" than college classes. And those are free.

And go spend a couple of hundred bucks on Horowitz and Hill (2nd or 3rd Ed.) if you want to learn about analog. That's a good bang for the buck.

In the traditional path, your best bet will be spending your last two years at an abet accredited state school that is teaching focused, not research focused.
What do "real hackers" eat and how do they pay for it?
To raise the other kerfuffle du jour, how is Huawei going to fare when these findings meet the GDPR? Where is the informed consent to shipping all of this PII to who knows where? And in cleartext, without even the slightest effort at protections?
> "spending time alone doing <x> is very different from <y>, ….". If spending time alone doing X is not very different from Y, then it follows that pairs of activities are roughly equally educational, roughly equally dangerous, roughly equally healthy, and so on, or at least roughly equal in sum of the qualities parents care about. Ie., if one activity is more educational than another, then the other must necessarily be less dangerous for the child, so as to conserve equilibrium. This is absurd.

"This is absurd" is pure assertion. The same argument would say that spending time alone playing with lego is very different from spending time alone playing with toy trains, or with dolls, or with crayons, or in a treehouse, or ... . If you're saying that all these things are "very different from" each other, then sure, youtube is different from lego in the same way that lego is different from crayons. But very few parents seem concerned that their child spends too long playing with crayons and not long enough with lego, or vice versa, or would want to ban one in favour of the other.

> I interpret you as saying that people are better at learning to cope with dark patterns as young children than as adults. Right? Please argue.

I gave an analogy to that effect already. More generally, people are better at learning anything (particularly things that are largely subconscious) as children than as adults - languages, riding a bike, performance arts...
Nothing to be proud of...
I always thought something so far away would appear to us as Pixels.

Its kind of mind blowing, we have techniques both theoretical and practical to only see pixels and yet come up with their exact dimensions.
But how quickly did they get started in that case?

I mean, the ago of the Earth is quite a nice chunk out of the timeline since the Universe got started.
DNA-based molecular computing will pave the way for programmable pills
How TiDB combines OLTP and OLAP in a distributed database