skysight-inc/HackerNews huggingface dataset:
I certainly resonate with your message but I also see a bit of nuance. It hinges on the question of what others are trying to do to you as well right? Military weapons exist, and there are people who will use those weapons to assert control over you (you can the people of Crimea, Syria, Kuwait, Yemen, Myanmar, etc). So if you are ok with submitting to the whims of anyone who has weapons, then not having weapons of your own is a viable option. I don't see that as a very common point of view however.
Thanks, that's quite interesting.

Still, you do need very specific input materials for both processes.

In the case of the latter, you basically need a spool of explosive string. You're not so much printing an explosive as you are shaping an explosive into a desired form. I'm sure it's still very useful, but I don't think it's a particularly big game changer in the "smuggling things into a country" field.
The “Aha” Moments of Becoming an Engineering Manager
I disagree.

In the book society was already collapsing. Plenty of regular people in the novel realized something was wrong and removed themselves from the looters' economy to roam the country.

Galt simply refused to be the one to prop up the looters failing economy.

Interesting that you see Galt as the one collapsing society. Rand's point was that the looters collapsed society and that they were too ignorant to understand why or how.
Look, I know you are going to get hammered here, but on the off chance you'll see this, can I make a recommendation? You all need to read up on war; because, let's face it, y'all are in one. Here are good starting texts for the cyberwar:

https://www.amazon.com/Art-War-Sun-Tzu/dp/1599869772 (the parts on the type of ground are very good and should be instructive to y'all)

https://www.artofmanliness.com/articles/ooda-loop/ (It seems you guys have been 'looped' pretty badly, this will start the process of fixing that)

https://www.amazon.com/War-Carl-von-Clausewitz/dp/1469947021 (the sections on 'fog of war' should help you all out, the text in general is informative)
I am of the opinion that our ruling class is simply too old to comprehend the importance of this issue.

This is ageism, but I can't think my way around it. The questions the Legislative body were asking the tech companies were so bad, and that's presumably after they'd been briefed by whatever experts worked for them.

Executive branch: "As far as the cyber, I agree to parts of what Secretary Clinton said."

FCC: "The thousands of dead people responding to our public request for comment is fake news. Also, it was a hack. But we weren't hacked."

Justice Samuel Alito on how cell phones can have huge storage capacity: "What if the person had on his person a compact disk?"

Justice Anthony Kennedy on what happens when you get a text, while sending one: "Does it say: 'Your call is important to us, and we will get back to you?'"
Exactly this. Please forgive me reposting an old comment[0]:

This sort of victim blaming is all too common in the mainstream press:

IRS Says More Taxpayers May Have Been Hacked http://time.com/4000659/irs-taxpayer-hacked-cybercrime/

It wasn't the taxpayers that were hacked - it was the IRS.

Hackers stole personal information from 104,000 taxpayers, IRS says https://www.washingtonpost.com/news/federal-eye/wp/2015/05/2...

Hackers did not steal personal information from 104,000 taxpayers - they stole it from the IRS.

Smaller media outlets often get it right:

Over 700,000 People Got Screwed in Last Year's IRS Data Breach http://gizmodo.com/over-700-000-people-got-screwed-in-last-y...

[0] https://news.ycombinator.com/item?id=13681544
There is a RISC-V section as we (I work on CHERI) are interested in making sure it's a portable model. There's no point creating this if we can only ever use it on MIPS.
wholeheartedly agree.

I'm not an Ayn Rand sycophant by any means, but there _is_ some merit to her literature that doesn't discredit it entirely.
When you respond like this, you discourage comments like the parent from being posted to HN.

It would be fine if your point was reasonable. But it's not. It's little more than an excuse to hate on Facebook.
Getting started with Unit Tests
Relative to usage? Because only 0.01% of Firefox users have ever used Live Bookmarks.

I don't know how many use Pocket but I would be shocked it it wasn't far higher.
Thank you for sharing, will keep an eye out for that thread.

I did some research a year ago (https://aquigorka.net/post/how-to-find-peers-in-the-decentra...) and going back to it I found this repo that uses the DHT to connect peers: https://github.com/mafintosh/peer-network

The author is one of the main contributors to the Dat project so I'll do some catching up to see what they've come up with.
I use KeePass for password management and the way I handle this is I generate a random string for each security question answer, then just include it in the Notes field of the entry.
The people who built and maintain it refer to 1.x as Angularjs, and >2 as Angular. I do agree it’s silly semantics, but google does treat them as different, the community treats them as different, they are different in all terms.
Yep, I was referring to that. You are correct, you won't be affected, since you run a different OS. I personally just couldn't stomach that a manufacturer would engage in such sneaky practices.

So, maybe you're fine for now (I envy you slightly for enjoying such a well designed piece of non-Apple hardware) but will you trust the X7, X8, etc? Especially with the escalating US-China trade war.
Incarcerated Pennsylvanians now have to pay $150 to read
Of course! If he is innocent of specific allegations, he should defend himself and win. But will specific ones emerge?

I based that statement upon Lyzzie Lenz (the twitter link) saying that she heard from many other women about alleged harassment from this guy.
What about their stake is trivial?

As of this week, the lowest paid Amazon employee is less that 2,000$ away from being part of the global 1%

We all consume like the world is going to leave us tomorrow but complain about the system that lets us?

I’m from a 3rd world country, and even there, with all the exploitation and government mismanagement I wouldn’t buy that argument easily.

But in the West? Even the poorest gain too much to wash their hands and say “this system doesn’t do anything for me”

Maybe it doesn’t do as much for you as you’d like, but if it collapsed tomorrow morning and we “ate the rich”, their quality of living would be strictly worse than it is today.

That’s not propaganda, that’s simple logic.

Ironically I think if the entire world “ate the rich”, most Americans saying “eat the rich” would be eaten.

PS, I hate when things are written off as propaganda. It’s too tautological: “Why is that false” “Because it’s propaganda”; “Why is it propaganda” “Because it’s false”. At least show the fault in the “propaganda”.
How can you deal with the huge risk of failure without compensating with huge wins?
Is it economically rational, or irrational, to pass costs on to someone else if one can? It seems a little odd to pass costs to one's grandchildren, but hey, then it's "not my problem!" and they can vote to pass the costs to their grandchildren!
I just brought up the CRCs as an example of due diligence. This attack, as I understand it, hinges on a design and BOM change to the board. So my question is how did that change manage to make it past both Supermicro and Elemental?
> doesn't shutdown() and then close() have to be called on the socket by the programmer explicitly in the destructor for the class?

yes, the class has to be written only once - and I have personnally never had to write it except in that one group project in school, since I use libraries that handle it - e.g. boost.asio or Qt Network.

If you are in C, even if you use an abstraction layer, you have to remember to call a _free / _destroy-like function every time you write some code that uses sockets.
I'm not on Facebook at all, and my spam call rate has shot up too. I think it's just an increase in spam calls, not a result of Facebook hackery. Phone numbers are dense enough that if you know area codes and exchanges (readily available information), you can just dial through the remaining 10000 numbers pretty easily and get enough hits to be worth it, plus you only have to do that once per phone # to have a good idea of whether that's a hit.

For me, it's mostly been about student loans, which I have not had for several years now. It's not even targeted. It's just spam. Though anecdotally I've heard other people say they tend to get different calls, none of which seem particularly well targeted, so perhaps it's merely very very poorly targeted.
I used this for a lot of Codepen stuff - sad to see it go.
Yeah, it is a bit of a rube's game to opt for top-of-the-line replaceable parts from an OEM. Hard disks, RAM, sometimes graphics cards, you can do a lot better going for the cheapest possible option and popping in better stuff yourself. Besides, if you optimize for this scenario, you filter out soldered in crap, and get a chassis that has the potential to be a ship of Theseus down the line.
It's a novelty there. But I think the point is that in Japan, healthy and local but fast food is something you can get at a train station, while that's rare in the U.S. I'm in and out of Union Station (DC) and Penn Station (NYC) all the time. What can you get to go in those places? Besides McDonalds, Pizza, Chipotle, etc., you've got deli sandwiches. Which are just awful in comparison to the options you have in Japan. (And even the deli sandwiches are better in Japan--the random place at the airport is comparable to what you can get at the specialty Italian market near my house.)
Google does not have (or claims not to have) that kind of logging beyond the short term; not enough to cover even a small fraction of the vulnerability period.
Apple Rebukes Australia's 'Dangerously Ambiguous' Anti-Encryption Bill
Hey Craig thanks for the feedback! The examples are not representative of actual website design/layouts, but we wanted to show off the roots of grid design (which originated in print media) and demonstrate that you can build equally expressive designs on the web. With CSS grid there is no limit!

As for providing affordance for what each example should look like, we have a button in the top left corner that you can hover over. Unfortunately we only point it out in the very first example, like we do with the CSS export button. It would be better to show the notes that draws attention to these buttons until you actually interact with them. Thanks again for the feedback. :)
Flushing rewrite rules in WordPress multisite for fun and profit
Rock on Chris! Glad you're liking the product!
I got the impression the author would rather not deal with the headache anymore, and charging money is trading one set of headaches for another. Building things is fun. Operating things is stressful. I don't blame them.
Ivy will probably be a fully released in 8, with an optional flag enabled in 7.x
It would be hard to make a case that they're not one of the 3 best defensive security teams in the world, and that very much includes every world government. You could go back and forth about whether they're #1 or #2 or in 2- or 3-way tie.
How to Hire a Data Scientist: 7 Tips
Of course Linux is an implementation detail. When did I claim otherwise? That actually proves my point: Fuschia is another implementation detail as well.
I will work through this. Thanks for the help!
Trump Just Signed a Law That Changes Life Aboard Airlines
I think you have a point, but unfortunately I didn't get it from your first comment as well. It read as a pretty negative comment.

It sounds like the point that you are making is reasonable, though, and unfortunately one that I see play out with a lot of FOSS projects as well. I remember a talk one time where a project lead essentially made the point that every new talk is met with a lot of "I'll setup CI for you" and "I'll setup JIRA for you", but that none of the people who say those things end up contributing code or issues.

For some reason there is a natural desire among some to organize the organizing before the thing to be organized really exists.
I'm always skeptical of these kind of libraries. Whenever I try to use them, it ends up feeling like a broken promise.
I can attest that there was at least one such black hat in the 00's.

One of my IT guy's mom complained about her machine being slow and having "too many pop ups", so he planned to go to her place on the weekend and fix it. She called back a couple of days later and told him not to bother as it was "all fixed now".

o.O

I lent him one of our loaner laptops and he brought in her computer back and put it on our test DMZ to see what was up. Yep, somebody had scrubbed all the malware and "search bars" off the machine and installed a free anti-virus package. The exceptions on the anti-virus made it easy to track down what was happening; it was set to send spam every night between 1am and 7am but otherwise was pristine.

My colleague had to do some serious soul searching before he decided to wipe it instead of just returning it ...
Show HN: Ultimate Developer Newsletter
However, Wireshark can mislead you if you don't understand what you're looking at.

It's a bit like having a low-level debugger. If you're happy with low-level C, and you're looking at a debugger and it says variable 'k' which you know is a uint8_t which loops from 0 to 5, currently has the value 65 you should say to yourself. "Hmm, I bet that the compiler used the same place to store variable 'c' that's a single byte from a text string, so this is just the capital letter A and the compiler has realised it doesn't need to store the value of k even if it's technically in scope..." rather than "OMG my loop variable somehow massively exceeded its expected range, maybe cosmic rays have damaged the RAM".

With TLS for example if you give it a whole TLS 1.2 sesssion, Wireshark will say oh, this is TLS 1.2. Fine. But if you show it only a TLS 1.2 connection that failed, Wireshark will say "Oh, this is TLS 1.0". Why? Well, the low-level protocol has been bodged over the years because of crappy middleboxes, so Wireshark doesn't actually know for sure, and rather than say "I don't know yet, I need to see more of the connection" it says TLS 1.0

This can be a problem because you'll get amateurs saying "Our system can't talk to your server because you only do TLS 1.0" and you say "No. You are wrong" and they say "Look, here's a Wireshark trace" and sure enough Wireshark is telling them it's TLS 1.0 because their system has disconnected early (e.g. because they disabled all the crypto algorithms you allow), and so Wireshark wasn't sure and labels it TLS 1.0 rather than TLS 1.2

This is going to happen again with TLS 1.3. TLS 1.3 deliberately says "Hi I'm TLS 1.2" (middleboxes again) and so that's what Wireshark will report (until you get a newer version that knows to look inside the supported_versions extension field for the version) and so you can bet that amateurs are going to say "Your service only does TLS 1.2" when actually their connection failed for some reason and they don't understand how to read the Wireshark trace.
If you're for real I wonder whether your posting here obeys the company external communication policy :)
Agreed. If he didn't rape anyone then whatever facts some out in court will be better than being on "the list".
How do they block crawlers and scrapers? If I grab the page using headless chrome, how can it tell what I'm doing with the data on my end, especially if I have the script grab the pages at a rate that would be more consistent with a human?
Obesity on the rise as Japanese eat more Western-style food
https://www.japantimes.co.jp/news/2012/03/11/national/scienc...
That would explain why my local Sears location seems to have suffered a perpetual tornado-strike ... empty shelves and product strewn everywhere. Every time I go in. Nothing interesting is ever in stock. How that place is still open amazes me...
You just can’t tell, when your job is hosting user content, e.g. managed website hosting (cpanel) or static pages (Azure static website hosting). I mention these two companies because I received 2 phishing attempts this week, both pretending to be from Microsoft, with the payload hosted on cpanel and Azure respectively.

Both have an abuse / phishing declaration form online. I signaled both pages, and they are still up for the moment.
I'm not especially in the anti-Rand brigade. But the thing that especially annoyed me about The Fountainhead was that it put on a pedestal all the annoying features of egotistical architects. Guess what, it's not actually about your vision. There's a client paying the bills.

Now, if you persuade a client to come along for the ride with your vision, good for you. But the idea that a building is all about the architect's vision and no other consideration is egomaniac territory.
I doubt other payment or ecommerce platforms are any more secure. Given its size, I assume Facebook has a lot of smart people working on security. And they still screw it up. How are smaller platforms, who can't attract or pay for the very best talent, going to do any better (other than by being smaller targets, I guess)?
I haven’t read the paper yet — but from the summary the agent rewrites questions and learns to find “more rewarded” reformulations — but how does the environment derive a reward signal useful for observing the quality of a reformulation ...? That seems as hard as the original problem to me ...
How video games can evoke a sense of sublime awe
As someone with the authority and means to shut down domains for exactly this, the truth is, most people have either used email addresses they never check, or, just ignore all warnings.
I'd argue >75% of people contacted never reply. Their entire domain gets shut down, and then, probably 75% of those do finally contact asking why their domain is down.
It's probably most likely that since WHOIS data is public, people just don't put addresses they check often there.
مقطع فيديو طفلة تصبح امرأة عجوز في 5 دقائق فقط
> I've often wondered, instead of a filesystem, why not a database?

yeah, that's what a lot of people wondered in the 70s too and it failed spectacularly, and failed again spectacularly in the 2000s with microsoft's WinFS.
It seems we arrived at the same place with similar tactics. Not sure where I will stop thinking about going down, and stay at a particular weight yet.

I find eating produce that just gets rid of hunger to be more unsatisfying that just being hungry.

I really really enjoy my dinner when I am hungry most of the day. My food is incredibly appealing and I have no concerns about how much I eat or what it is (generally speaking). So I guess the comparison here is "be hungry + eating whatever you want at the end of the day" vs "graze on vegetables all day".

My experiment is coming to a close soon though, as I am with you on the exercise benefits. My body is starting to get aches that I used to get before I started exercising. I've run regularly for years, but it didn't shed any weight unless I was perfectly diligent, which isn't something I could maintain just for weight loss.

Hence, I found the source to weight loss/control without extra effort, don't eat much. If I gain weight, eat less until it's gone. Exercise then is purely for strength and health, (and happiness as you have also found out) but not weight loss.

Happy to hear you got this under control in your life.
Show HN: A CLI multiplatform java software to manage beauty saloons
Well... we're generally used to "adulterants" referring to inactive or even potentially (purely) harmful ingredients being added to things to make them cheaper. However, note that "adulterating" your sexual potency supplement with Viagra means that it will, you know... work. Same with putting steroids in your workout supplement... it makes it work, better than the competition that doesn't do it.

There are all kinds of other problems with that, of course. I'm not saying it's a good idea. But in terms of "why would people buy these?", well, I'd suggest part of the reason is that people want to lose weight, be sexually potent, or get swole, and these "adulterated" supplements actually work. Just at a cost you may not have realized you were paying, or intended to pay.
Although it uses Tor and is probably outdated, here is a PoC I wrote of bootstrapping a DHT network on the server side and using the client side to discover peers: https://github.com/cretz/tor-dht-poc
Lol, you think there's a click farm out there installing Firefox on thousands of VMs for the express purpose of throwing off Mozilla Telemetry?
If he wanted to gut the place to get the real estate he wouldn't have taken nearly 15 years to do it.
I looked at Hiya, but ended up picking nomorobo because Hiya uploads your contact information to the cloud (rather than comparing locally for neighborhood spoofing). Hiya was also 'free' and it was unclear how they're monetizing your data.
I'm surprised Gigabyte isn't on this list. From Hackintosh forums it seems like a lot of their motherboards are Gigabyte-made, or for some reason are incredibly similar to Gigabyte boards.
One underrated option is not to keep extensive personalized records on your entire user base in the first place.
The War on Drugs method then.

High penalties are irrelevant when people don't expect to get caught. They often make things worse by creating a "no snitching" culture because the disproportional penalties are seen as unfair by would-be informants who are then less inclined to cooperate.
OK, OK, you're just better than us mere humans. We still experience hunger. And we don't like it. And being dumb animals, our behavior is influenced by that.
Jim Cramer was self-admittedly very left-leaning while he was editor of the Crimson in college. His current philosophy is that whatever increases commercial activity is good - so he does comment on company values in terms of how it affects the company's brand and success.
If you have a competition where everyone flips coins, and you are eliminated as soon as you flip a tail, and you win, it's likely that you will also win the next time. This is not because the events are not independent, but because you are always unlikely to win.

Likewise, if you get a royal flush in a hand of poker, you probably won't get as good a hand next time. Again, this is not because the deals aren't independent events, but because it is always unlikely to get a royal flush.
Not sure where you are located but there was a documentary last night on bbc which demonstrated they can’t. Do you have examples where someone has been able to do this?
OpenMPTCProuter aggregates and encrypts multiple internet connections
I vaguely remember hearing (maybe ~2007) that Microsoft was starting to use an actual real database for their filesystem, and that they then abandoned the idea. Could this be related to the transaction API you mention, or a separate project? Either way, seeing none of the major OSes go in that direction in the past 10-20 years gives me confidence that it's probably just not practical.
I guess directly mentioning the user makes it sounds more personal, and click-worthy
Ask HN: Cryptocurrency naturally pegged to cost of hashing
Price volatility is a major obstacle to cryptocurrency adoption.

Here's a solution: set the mining reward equal to the expected hash count for mining a block. The value of the coin will naturally gravitate to the cost of computing one hash.

Why hasn't this been implemented yet? My best guess is that the Ponzi-scheme-like nature of most cryptocurrencies is a "feature." Most crypto enthusiasts are in it to make a quick buck, not for ideological reasons.

Where can I find a community of crypto-idealists to start building the decentralized utopia of the future?
Those Cheng Uei USB cables look exactly like the one Google shipped with the first Pixel, down to the blue plastic cable clip. They must be well-regarded.
I do believe there is an increasing demand for privacy, so hopefully in 4-5 years, if I need to upgrade my machine, I would still have a reasonable choice.