skysight-inc/HackerNews huggingface dataset:
Broadly, student loan debt is an economic supply/demand issue. The government keeps supplying loans and (of course!!) schools continue to raise "tuition" as the supply of monies is nearly endless.

A good first step would be to reduce the supply of loan dollars, which would lower the number of students who can pay for college (however, no politician would sign up for that) and theoretically lower prices.

There's also a stigma in the US about "blue collar" jobs, which is absolutely pathetic. Plenty of people in America support their families (quite well) working in blue collar industries.

As an example, plumbers in my area (New England) can essentially demand their own rate and take on work as they desire. Don't want to pay their quote hourly rate? Well then, you can fuck right off and good luck finding another plumber in the next 2 weeks.

We need to do away with the mentality that you HAVE to go to college, because you don't and the majority of those who do are attending are doing so because they are naive and don't know any better.
I like the design. Its cool. But i cannot see the price to be reasonable. Personally if someone wants local server - mail with be not enough of a selling point for 499usd. So why not buy ds218+ (300usd) from synology and two 4tb NAS hard disks (200usd)- 500 usd? The setup is dead simple. It has mail server backup and media software.
Even after working with it for 15 years I still find new and interesting things about it.
> What's to stop law enforcement circumventing the phone and just going this route to get user data for court cases?

This is data which Apple has/had already, nothing has changed there and law enforcement could already request it.

This is them starting to roll out GDPR-related tools globally (it's been available since May for EU accounts).

> Or, is there stuff on the phone that won't be included here?

Anything which is not sent to Apple, or is only sent device-encrypted (as in, encrypted with a key which does not leave the device) or E2E encrypted.

According to the section titles, the data here mostly contains account data (appstore, retail, appleid), public/shared data (gamecenter stuff) and cloud-synched stuff (bookmarks, reading list, notes, contacts, …) as well as ancillary data ("Marketing subscriptions, downloads and other activity").
Northern Ireland has unionist-associated and nationalist-associated names [1] - using one of them without knowing you're doing so might make people think you've got strong opinions on something you actually don't know much about.

So if you hear someone using a country name you've never heard before, I can understand being cautious about adopting it :)

[1] https://en.wikipedia.org/wiki/Alternative_names_for_Northern...
This cut-down version boots straight to BBC Basic:
https://www.riscosopen.org/content/sales/risc-os-pico
Probably not if you eat it, though.
This is what I love about programming - it is never boring! If it is boring, you can automate the boring parts, which becomes interesting as a goal.
I take it your webservers have no csrf protection, run on unencrypted http, pass passwords in plaintext over basic auth, run with root-level permissions on hardware, and haven't been updated ever.
Not in the US, at least. Reverse-engineering may be prohibited by EULA. Protocols may or may not be copywritten (there have been rulings recently that conflict with each other)

But as long as the content is not encrypted, it is a perfectly legal activity to engage in--and perfectly legal for a company to say you're violating their terms. Legal as in "not criminal."

If the content is encrypted, then circumventing or breaking the encryption is a violation of DMCA and a criminal activity.

Edit: IANAL
Will it be terribly different than how US states that have legalized marijuana interface with federal governmental entities? Plenty of folks in Colorado, Oregon, Washington, some of the New England States, and California work for the federal government and have to tell them that they do not use marijuana. Similar with airline pilots, etc based out of these States.
I'm from the UK with an Apple account registered here and it let me request a copy of all my data, so not just limited to U.S. users it seems.
I'm just a random, anonymous, internet person, but I hope that you feel better Pete. Remember that the way you feel now is just a snapshot in time, and that things will almost certainly get better from here.
Thanks for that - appreciate the response.
How negatively would that impact the environment? More importantly how will you deal with people who will read such a fact sheet as how to "own the libs" and buy the worst environmental products?
Announcing Domino 3.0 and Launchpad
If anyone is looking to test out their own impl or a third party, this web based JS impl allow you to set up and test with a secret and a 6 digit OTP.

https://github.com/inversoft/prime-two-factor/tree/master/we...
I don't think that idea is realistic. While I agree that it would be great if we could find a fast, secure replacement for email, that's not happening.

Signal isn't federated and doesn't allow me to selfhost.

If you wanna start a messaging platform that can become a defacto standard you need to allow anyone to implement it, you also need to prove a value-add aside from security and privacy (which 99% of consumers don't care about) which builds momentum, it also shouldn't piggyback or rely on email in anyway. Much the same way that email didn't require a snail mail letter to create an account.

email is a solution to a communication problem which happens when two people aren't in the room together. It replaced memos, quick phone calls, long form letters, etc.

Instant messaging UX really only addresses the quick phone call and possibly short memos. The UX strongly discourages anything longer than 3-4 lines.
What's wrong with the tray of peaches :P
I wish TempleOS was in more of a state to be usable by kids and the like, but it is about the gold standard for this kind of stuff I feel.
> Doesn't this already exist from other countries where it's been legal for decades?

There is no other country in the world where marijuana has been legal for decades.

However, that doesn't mean that research into the effects of marijuana doesn't happen, including in the U.S. Marijuana is actually one of the most well-studied drugs in existence - we have a much clearer understanding of the short- and long-term effects of marijuana than we do of almost every commercially-produced pharmaceutical on the market.
Unfortunately, this is a reality. I am part of a small team where we moved pretty fast.

We used to write our own stories in Jira and they were mostly one liners. They have now implemented so many required fields to fill out. Filing out one story might take 30 minutes.

And the management has implemented a mix of waterfall and agile methodology.

It is combination of worst of both worlds. We are asked to plan our next 10 or more sprints. Assign points to each story. And then we are asked to justify points to management. It is a big mess. In a week, we might spend 20+ hours on planning and planning to plan bullshit.

I fought this as much as I could. But in the end, I realized that this is losing battle. All we can do is work with them and help them justify their jobs and our jobs.

We have stories for planning stories. We have stories for reading documentation. We have stories for breaks. Oh I want to cry.

But good thing is if you work with system and make your team look super busy, you will get big bonuses and pay raises. Kind of like in real world, you can write the cleanest code but if you don't write features that customer want and brag about your product, you will not get paid for it.
What Does Any of This Have to Do with Physics? (2016)
I knew that if I waited long enough, Trump would accidentally do something I approve of. China isn't the poor, little developing nation it was in 1969, and no longer require our subsidies. Along with that, the treaty also subsidizes the pollution of cargo ships to send us our cheap shit, as well as subsidizing the export of our manufacturing pollution.

Subsidy abstractions aside, were I an owner of a business that ships domestic, I'd be asking, "where's my cheap shipping?" In summary, I'm really surprised the treaty has lasted this long.
I don't think this is correct for most uses of SMS currently. 2FA (MFA) is on top of password authentication, not to the side of it. If you forget your password, 2FA does nothing to help you out.

I think what you are talking about is "SMS password reset", which is a different beast. And it also sounds like you are talking about SMS based identity verification for customer service representatives. If you are only using SMS for identity verification in your CSR workflow, that is a broken workflow.

In FusionAuth (https://fusionauth.io), we implemented SMS MFA that only works after the user has successfully put in their password. Therefore, the attacker would need their password and a clone of their phone. While this is still possible, the threat surface is quite small.
Probably because Gmail isn't the only email provider that lets you search. I run my own email server and can search them just fine.
It's not going to be pretty, for sure, but we can still make a difference. Not emitting greenhouse gasses, as hard as it is, is still far cheaper than cleaning the mess afterwards.

It's hard to see how things can change right now, but if we can get the majority on board, I think we can see radical change happening quite quickly. The key point is that people must realize radical changes are required, now. Buying organic and recycling a few things isn't going to cut it.
I think you're best off doing some bootstrapping or prototyping first before deciding on what business to pursue, keeping startup costs in mind.

As others have said, don't expect much luck looking for a risk-free loan that let's you have your cake and eat it too unless it's from close friends or family.

If it's closer to the $10k range, start it yourself. If it's closer to the $100k range, you could try presenting to some local business organizations that offer favorable loans or apply for grants, but no logical VC is going to put out $100k for a $250k return.
The objection is due process related including preventing them from using their funds to hire an attorney whilst teams of attorneys are brought to bear against them. It stinks of a capricious attempt to deny the right to legal council to those who offend those at the top. Even Enron masterminds were allowed to use their assets which certainly came from their misdeeds which crippled the state and likely killed people via their outages. This mockery of justice is what makes it inhumane.
Until you realize the govt being involved in school and healthcare with all that free flowing money is the reason costs are inflated.
Ross Ulbricht's arrest: How the FBI handled evidence and destroyed the laptop
This is new information the FreeRoss team released yesterday. Everything is backed up with a source.

For anyone interested in knowing how the evidence used against Ulbricht was produced and handled by the FBI, read or watch at https://freeross.org/railroaded

The whole scene reads like a joke.
Why JMAP over something universal like JSON?
I will tell you why whatever you find won't feel like the old C= 64 no matter how good the properties are emulated.

It is the culture, and the music. You will never find an equivalent, so might as well consider yourself lucky, move on and let the kids beat their keyboards typing JavaScript into their browser in debug mode. If you want to give them something they can program as soon as it boots up, just install any Linux on any pc.
Gmail Creator Paul Buchheit on Joining Google and Becoming a Great Engineer
Totally agree about the forecast graph... I honestly wish somebody would rip it off so I can look at it on a site that performs well.
Was life on the early Earth purple?
Ask HN: What tools do you use to make programming/editing code on VMs easier?
It's definitely our media not on the side of citizens. How many lies do your hear about your health care system?
The arrest scene is in Episode 3 chapter 11.
> if you don't have a consistent rule about whether to apply it to the top or bottom and by how much.

I recommend to use only top margins and to apply them to every element which isn't the first child (`whatever:not(:first-child)`).

This way there is no extraneous spacing at the very top or very bottom, which means the only spacing around the content is the padding of the container.

It's the same idea as the "lobotomized owl" selector (`* + *`). It's just more explicit.
The guy yelling mentions at the video that has not slept for 3 days...
> hey jawns, great question. I'm Giri Sreenivas, co-founder and CEO of Helm. To answer your question, ISPs block port 25 and email service providers typically reject emails coming from residential IP blocks.

> To build a plug and play solution, we knew that our server could not require listening for inbound connections on a residential internet connection. So we set about looking into how we could route traffic to and from a home server but we needed to do this in a way that prevented us from being able to spy on traffic. We investigated solutions like sshuttle and eventually settled on the combination of a simple iptables configuration combined with a VPN connection. Helm establishes an outbound VPN connection to a dedicated EC2 instance with an iptables configuration that routes packets to and from the connected Helm server. The EC2 instance also has a static IP address associated with it.

> It's important to stop here and explain that the only way this architecture is viable while adhering to our design tenet of knowing as little about our customers as possible is because of the Let's Encrypt project. Every Helm server has a unique domain associated with it and trusted certificates for that domain are fetched from Let's Encrypt. We strive to ensure that all inbound and outbound traffic routed through the EC2 instance is using TLS with these certificates from Let's Encrypt. This way, our EC2 instance is effectively just an extra hop on the Internet.

> I hope that answers your question, let me know!

This doesn't seme to address the question of whether this violates the ToS, regardless of whether this is technically feasible.
I’m a supporter of FLOSS. FLOSS succeded where it did precisely because it made sense, economically. It was a novel approach, but it made sense.

This whole hacker - economist/businessman dichotomy is harfmul to the evolution of open solutions, be them software or hardware or both.
I frequently hear teenagers and young adults say things like 'Cannabis is harmless', 'not as bad as alcohol', etc.

The issue here is the initial research consistently shows us the opposite - frequent cannabis use appears to cause developmental delay and may cause _irreversible_ mental illness in adolescents that is in at least one case worse than alcohol.

Let's take Schizophrenia as an example:

Increased Risk of Schizophrenia from Alcohol and drugs:

Cannabis: 5.2 times
Alcohol: 3.4 times
Hallucinogenic drugs: 1.9 times
Sedatives: 1.7 times
Amphetamines: 1.24 times
Other substances: 2.8 times

source: http://schizophrenia.com/?p=793

Direct link to study - https://www.cambridge.org/core/journals/psychological-medici...

Since the brain doesn't fully develop until 25 I don't disagree that alcohol and other legal substances are dangerous for adolescents but from the initial research we are seeing Cannabis is in some cases more damaging than alcohol and requires further study.
There is an extra step: When the SEC sues him, ..

and trades in the dirt they have on him for his supervoting rights in a settlement, then ...
The secret no one tells anyone: the name on the piece of paper at the end is all that matters, and even then, 98% of employers really don't give a damn about the school you went to, especially after you get that first post-graduation job.
Not selling data (see other FAQ). Probably the first two (at a later stage). Currently, Coffee Chat is completely free.
> At the same time, it's doing its best to destroy the pristine environment it inherited, and the Great Barrier Reef is rapidly dying.

Isn't this more generally everyone in the entire world's fault, and not specifically the Australia government?

Ocean warming, pH decreasing, pollution, etc.
> not just limited to U.S. users it seems.

'course not, it's GDPR stuff, it was rolled out in the EU back in May (https://9to5mac.com/2018/05/23/download-all-apple-id-icloud-...)

They're doing what they originally pledged: rolling it out globally instead of limiting it to where they're legally required to.
Is this so new? 25 years ago kids were addicted to cable/phone/Genesis/VHS and never "had" to do any programming to have any fun, either.

There was a phase where people expected that people starting on iPhones even younger than people started on Windows in 1993 would make them more technologically literate, but that was optimistic - they're iPhone-literate to the same level kids then were Windows-literate.

Actually understanding things at the machine level was very rare back then, too, though.
It boots to a loading screen from which you can select BASIC or a game
I've done quite a bit of angel investing and have a pretty good IRR. The key is to make sure you stay within your area of competence or within area of competence of those you trust.

Also, the numbers will necessarily look worse for a fund or accelerator like Y Combinator than for an individual angel. Y Combinator has to fund cohorts of companies, right? they can't just say one year, nope, I found nothing I want to invest in this year. But as an individual angel you can.
Does that mean that Helm knows when it's communicating with another Helm server and does an end-run-around email infrastructure to keep everything in-house? (like gmail and O365 appear to do)
Global warming isn't a black and white issue. Generally speaking each fraction of a degree the planet warms is worse than the last and even if we don't have much chance of actually containing warming at 2 degrees, let along 1.5, not letting warming go from 3.0 to 3.5 is still incredibly important.

We will certainly need to invest in cleanup. But how much we'll have to invest can be multiple orders of magnitude larger or smaller depending on the investments we make now.
With respect I think that those characteristics could equally apply to anyone - old, young or somewhere in the middle. I wouldn't say any of those are specific to people approaching their retirement age.

For example I interviewed someone in their early 20s a little while ago who knew Angular 1 inside-out and to the absolute finest detail, but that is obsolete now that we're on Angular 6/React etc - they had never used modern Angular, Typescript or React... just good old Angular1 + JS. Did they stay relevant? nope. Are they old? nope. The benefit of the doubt for the early-20s person could be to just assume they don't know Angular6+TS because they were working on legacy code and didn't get the chance, but should I treat the early-20s person any different from a 60s person all other things being equal? nope. I am sure they could both pick up the new skills just as easily.

I know a lot of retired people socially (parents/friends of friends, neighbors etc - alas not that many from work) who are still 100% as sharp as a tack - quick-witted, intelligent, energetic etc. It would be unfair to use their age as a filter based on assumptions of how they would perform in an interview based on how other entirely different individuals have behaved in previous interviews.
Are you saying that most students are critically evaluating their options differently? Because I think the article pretty clearly demonstrates that this problem should be known by any competent adult by now.
Sieve of Eratosthenes, visualized here:

http://xrd.github.io/angular-algorithms/web/index.html#/algo...

Spelling eratosthenes is harder than this elegant little algorithm.
It doesn't work that way anymore, so I'm not sure what world you live in; there are banks that provide indefinite mortgages which leave you literally paying nothing but interest and never principal.
I'm not sure how calling an intern hot (even if subsequently followed by stating that one wouldn't pursue the intern romantically) is supposed to be used as a positive example of socially acceptable workplace interaction.
It is not. There are indeed exactly 8 ways to pick three elements from the set [1,9] such that their sum equals 15. But for 4x4, there are 86 (!) ways to pick four elements from [1, 15] so that their sum is 34 (the magic constant for 4x4), whereas only ten of the combinations are used in construction of the square.

Some Python:

from collections import Counter
from itertools import combinations

def number_of_sums(n, M):
combs = combinations(range(1,n**2+1), n)
sums = (sum(c) for c in combs)
return Counter(sums)[M]

print(number_of_sums(3, 15))
print(number_of_sums(4, 34))
I believe the other two persons arguing with you here are simply saying that #metoo has a noble agenda but was quickly hijacked to push other people's agendas. Which is sadly a pretty classic scenario IMO.
Trust me, this was a good thing.

If you had been hired in those companies, you wouldn't have lasted long. Unless you have a supernatural talent on filtering out bullshit.
Potentially gives law enforcement an easier way to get the information? Instead of compelling Apple to give it out (they can afford lawyers), they can try compelling individuals instead.
Is there a term for using racism in a post online like hitler is to godwin ?

Not everything can solve or be attributed to race. We are all the human race and the sooner everyone starts thinking like that the better
I always thought it was weird that it was possible for someone to be both an executive at a company and have a seat on the board. I know this is a common thing in the tech industry, it just seems weird to me. In theory the board exists to provide oversight of the executives on behalf of the shareholders, so having the CEO on the board is a natural conflict of interest.
I think filtering out BS is pretty much every job, it's just what the bs is, where, and etc.
Imagine that you install some very useful, or even entertaining, $60 device in your home. For instance, a Fire TV Stick. Some hacker group then takes it upon themselves to hack 90 million of these devices. Whenever you turn the device on, the only thing you can watch is a heavily monetized stream of one of the hackers. A new device won't help because you can't get Prime, where some of your shows are, on a Chromecast.

90 million paying customers at $60 each, that's how much damage these vandals have done.
They aren't making a profit if that money is going to wages.
Are your cheats something that work in multiplayer? A cheat that works only in singleplayer is less of a big deal, because it's going to be harder to show damages, and harder to collect evidence against you, or even know you exist necessarily. I'm not sure I'd recommend it as a vocation, but it's a risk/reward you can judge.

Multiplayer cheating is another thing, as is horning in on what a company wants to use as a revenue stream. If you are doing either of those things, even accidentally (e.g., a cheat you intend to be used in single player but works in multiplayer), my non-lawyerly self advises you to cease immediately and turn those skills towards something more productive and lucrative without the risks, because the risk/reward payout matrix gets a lot more lopsided on the "risk" side, especially because of the opportunity costs of things that are as lucrative but much less risky.
I'm not usually one to theorize spying, but I'm gonna call it here: I'm betting that "remote administrative access" is found between the EC2 instance and the at-home box.

My first thought in seeing gsreenivas' discussion about the VPN/iptables/EC2 is that the physical box at home makes it feel more secure than an EC2 solution, but I'm not sure that is actually the case.