skysight-inc/HackerNews huggingface dataset:
By the same token, there's no reason to think they'll fall anywhere near or under 5% in the near future. They have 1.5 billion people with a higher average IQ than the US with a strong educational culture, increasing economic opportunity with a lot of i's to dot in various industries, their per capita is still a fraction of that of a developed company, and there are another 1000 reasons to paint a fuller picture beyond my small sampling. In contrast, for example, Japan had less than half our population, didn't manage to steal all of our trade secrets, reached a high stage of development, and really didn't have anything revolutionary to offer.

I'm aware of what you're saying about the potential issues they're facing, but we really don't know how that will play out - it strikes me as western optimism.

That is true, but China is already setting the stage to assert itself as an imperial power.

I don't mean to come across as a sinophile - I don't want a hologram of Xi Jinping standing over me in 10 years, but, there is plenty of reason to worry and to not draw conclusions on whether or not they'll pull ahead or how quickly - that remains to be seen.
Citizens are not their government. I think that should be clear to anyone that isn't trying to stoke nationalist ideologies.
I'm not talking about the security of the machine that holds the data. I'm saying any online password managers (without 2fa) can be unlocked with a single login, where offline password managers don't have such a severe problem.
Doctors hate this!
EOS Shows Its Centralization, Reverses Stolen Account Ownership
Oh, this did seem familiar!

The AES-CBC thing is tied to the key, right? So the downgrade attack isn't possible.
Is there an app like 1^4 where you can simply set the DNS server of your choice in IOS? It would be awesome to have I could point it to my PiHole.
Is GCP under-reporting their downtimes on https://status.cloud.google.com/ ? I thought the Kube issue went on for 2-3 days, as well...
Yeah, this one seems intuitive.

I've got several friends (on Facebook) who have posted memes about mental health, then they take a hiatus from FB for a while.

It really does seem unhealthy. Everybody is comparing their own life to everyone else's best facade.
As I understand it - the T2 chip is also the storage controller for the Flash storage used in these new machines, so if it were disabled you'd have to use external storage.
>your work place provides you food or you get "food tickets" that you can use in stores to buy only food.

That doesn't make sense to me, different people have dietary preferences of different levels of expense. What's the reasoning behind this?
Interesting. Does this handle SSO at all, and if so how? Semi-relatedly, does it support multiple users?
This is literally just a text document.

Why do I see a blank page unless I enable JavaScript? :(
>When Firefox switched to the webextension format, LastPass started using the Chrome version as the foundation for Firefox.

The backward change started after logmein bought lastpass.
Some related tools: https://github.com/yudai/gotty#alternatives
> It is rare to be used when the subject is a human, but rather when the subject is an object.

Thank you for that. That really adds to the humanity of the poem that the translation just couldn't possibly.
Another Day, Another Extortion Phishing Email
I prefer a = w * h. I actually wish I didn't, but I studied a mathematics undergrad, and when I see the token 'area' it means, to me, the concept of area, whereas 'a' is a variable which represents the quantity in context.

Indeed, it's more common to write 'let the area be a, the width be w and the height h; then a = w * h' than it is to write 'area = with * height' when expositing in a maths textbook. This is a really hard habit for me to get out of, even when writing code.
The Frederick, Maryland campus of the National Cancer Institute used to be the site of biological weapons research in the 1950s and 1960s and until 2003 there was a building that was off limits because it was contaminated with anthrax spores. https://en.wikipedia.org/wiki/Building_470
I just DDG and have found !bang shortcuts that are broken or 404 for weeks. I've tried reporting the problems on their feedback forms or Reddit, but never got any responses. If it was open source, I could have submitted a pull request to fix them. I'm surprised they don't have automatic heartbeat queries with expected results for every bang shortcut, at least.
Looking at the long view, Warren Buffet says the Dow will reach 1,000,000 in a hundred years.

I wouldn't bet against him.
Just checked, for individuals the "All Products Pack" is $250/yr. and for Organizations/Corporate use is $650/yr./user
source study minus the reblog regurgitation, which doesn't even include the source link

https://guilfordjournals.com/doi/10.1521/jscp.2018.37.10.751
Why must war be about gain? Many conflicts in the Middle East seek to reduce standards of living to feed radicalism.
Somehow this article makes it sound as if this study is somehow more “official” and real than other studies on the same topic.
Not making a statement here about the quality of the research. But it’s probably not the best article to highlight about the study.
And then all these ugly outbrain ads...

New user, first submission, low quality source — yet frontpage right away. Really shows how much the HN community wants it to be true.
Getting this as well in SF. transtelecom.net WHOIS says they're Moscow-based
When I start doing anything in C, it is always refreshingly simple.

Then my project grows to the point where I need to do some simple string operations.

At which point I remember the wonderful simplicity of garbage collected, high level languages...
Is there any support for MacOS. I'd like to replace my magicmouse2 with something more ergonomic.
Ha, that bit about Nature is spot-on.
I think the idea here is that you'd whitelist files/folders on your actual filesystem for use with the app. This sounds fantastic for me. There's so many useful web based tools that are a pain to work with because you have to manually sync files to and from them.
I assumed that was intentional to push everyone to use https.
Yes, new account keys are identified (presence of a mac key) and block the downgrade (see code link above).
Austin's Fix for Homelessness: Tiny Houses, and Lots of Neighbors
> neither of them could stomach laying down their arms, because so much blood had been spilt.

Lets hope sunk cost fallacy doesn't doom our global civilization. =/
Stan Lee dies
I think constexpr is a great feature. But without templates (or meta programming in general) I feel like it's severely limited in it's uses (although you cite a great use case). Adding templates is another whole can of worms (for templates to be really useful, add operator overloading too? so on..)
When I first started in programming over 28 years ago, a wise mentor gave me 2 pieces of advice about estimates:

- It takes 4 hours to change a single line of COBOL, once you take compilation, testing, documentation, etc. into account.

- The best way to estimate is to gather as much information as you can, estimate each piece and sum them. Then take that number and multiply it by two. Then take that sum and double it.

Both turned out to be pretty good advice.
What the paper describes isn't really a shell; it's just a launcher for running capsicum-naive programs in the capsicum sandbox:

> In its current implementation, the program is hardly a shell at all: it has no interactive mode, only executing a single program per invocation.

I don't know how you could meaningfully sandbox a shell without losing some functionality intrinsic to it being a shell.
The article strongly suggests that is what is happening though. If 7-11 was really worried about it, they'd send them to every 7-11. They don't want to do that because it would make everyone mad, and I bet they don't do it to the franchises they own.
I don't really get what you're trying to prove here, I mean yes we can see the algorithm as a form of curation but the point here's different, newspapers have a set amount of pages and articles whereas YouTube has 400 hours of content uploaded every minute. Hence it's not fair to compare the two of them, in my opinion.
I mean, they could already do that with say, the webcam permission.
Hi all - Seth from Google here. Our team is aware and we are working on mitigation. In short, a third party telco provider is advertising on one of our IP blocks. Unfortunately that's all the information I can share at this time.
Pretty sure I am being affected by this:

From Europe/GER:

; traceroute circonus.com
# 2018-11-12 22:19:35
traceroute to circonus-ops.circonus.com (35.201.69.199), 64 hops max, 52 byte packets
1 192.168.2.1 (192.168.2.1) 0.893 ms 0.805 ms 0.535 ms
2 * * *
3 217.237.147.13 (217.237.147.13) 26.224 ms 27.167 ms 47.799 ms
4 80.156.162.149 (80.156.162.149) 55.073 ms 26.105 ms 56.213 ms
5 217.239.46.18 (217.239.46.18) 59.675 ms 33.253 ms 31.868 ms
6 62.157.249.186 (62.157.249.186) 32.316 ms 45.960 ms 31.911 ms
7 ae-4.r25.frnkge08.de.bb.gin.ntt.net (129.250.5.144) 33.013 ms 32.810 ms 34.089 ms
8 ae-10.r02.frnkge04.de.bb.gin.ntt.net (129.250.5.40) 32.695 ms 32.853 ms 31.922 ms
9 netvision-1.r02.frnkge04.de.bb.gin.ntt.net (213.198.82.158) 34.075 ms 32.365 ms 32.759 ms
10 mskn17ra-lo1.transtelecom.net (217.150.55.21) 66.848 ms * 68.924 ms
11 chinatelecom-gw.transtelecom.net (217.150.59.249) 81.996 ms * 79.685 ms
12 * 59.43.183.113 (59.43.183.113) 82.234 ms
...
Stan Lee, creator of superheroes, dies at 95
If you are looking for a similar project based on Debian Stable, you can check out DebOps: https://debops.org/ (disclaimier, I'm the author and main contributor).

This is also a set of Ansible playbooks and roles that use a Debian Stable net install as a base and let you pick and choose the services you want to configure. It supports multi-host deployments, provides an internal CA by default and is designed to be used as a base for your own applications - you are encouraged to use DebOps roles in your own playbooks to integrate with existing service configuration like firewall, web server, etc.

You can check out the list of Ansible roles available in the project [1], there's also a Getting Started guide [2]. Project has its own IRC channel, #debops on FreeNode, as well as a mailing list [3], if you need support.

[1]: https://docs.debops.org/en/master/ansible/role-index.html

[2]: https://docs.debops.org/en/master/debops-playbooks/guides/ge...

[3]: https://lists.debops.org/mailman/listinfo
This is true of Lastpass, too. Just click the down arrow next to the generate pw field.
How Adobe is changing its culture around open source
143 subjects and 1 study at UPenn equates to official?
Despite the subdomain, the IP for ChinaTelecom-gw.transtelecom.net (217.150.59.249) seems to be based in Russia, as does the carrier: https://en.wikipedia.org/wiki/TransTelekom
There's a word for this type of article: “obituary”.
unlikely, IMO. this is a routing problem, either a deliberate attack or else a gigantic screwup
It is weird watching US tv shows when they seem to take them seriously. I could never work out if the they are a reflection of real US government practice or if the writers in Hollywood liked the pseudoscience. They are one of those weird things like fan death that doesn't seem to translate out of a particular culture.
Yes, and I hinted at this, but it's more compact.
Agree that PWAs have a lot of potential on Desktop. But they're also really good on mobile. Both Facebook and Tinder have PWAs that I prefer to their native apps...
The functional equivalence isn't with curation, but ordering. Newspapers order what goes on the front page, YouTube orders what goes on the home page. The statistic on how many newspaper readers get past the front page, and first few pages, probably follows a similar power law distribution. I don't think that articles near the back are "functionally not published" just because a large % of readers never look at them, so I don't think the similar argument applies to YouTube. YouTube's advantages on this equivalence are also clear, since the newspaper's front page is the same for everyone, YouTube's isn't, and I much prefer YouTube's searching capabilities over trying to search newspapers to see if they have anything on my interest.
Problem with PWA:
Native access, Browser versioning and seperation of processes.

1. If when you ran a .net application all .net applications shared the same parent process that'd be a significant problem.

2. Many electron clients control their versions because there are bugs, quirks, removal of features, or other changes in chromium versions. Discord last time I checked is still on 56.

3. PWA's do not have native access. Discord requires that to spawn IPC communications with game overalys, which are another native process.

PWA's are meant more for mobile, but even there you are of course, limited.

Firefox and Safari would change the world if they actually cared about doing that. They're about market share, not about the technology anymore. Firefox was in a position of making it possible to simply ship the firefox binary, and you could add your js and css changes, effectively having the full firefox browser as your 'app'. Which means it could be triggered to auto-update like normal firefox, but still have your UI and act as a browser.

Firefox abandoned that route and instead is focusing upon whatever Chrome impliments, like Custom Components. Safari also doesn't care about anything but linux and mac.
The hacks you have listed have the advantage to be visible. Reading the code, you know whether they are called or not.

The issue with cleanup on scope exit is that this introduces ambiguous code-flows. You would need to demonstrate a strong advantage, beyond making life easier for the writer of the code.
I used telescopes for some times, indeed Venus or ISS are often interpreted as UFO.
Venus is visible in daylight and ISS has truly something alien with its apparent magnitude and majestic speed.

But when someone looks through a telescope, she sees less than half a degree wide, often only a few dozens of arc minutes, so her field of view is less than 1/10,000 of the sky.
It is unlikely she will recognize a fast moving object, plane or whatever.

I also seen something strange in mid-day with naked eyes, I thought it was an Iridium flare, but when I checked there was no flare possible at that place and time.
Except the problem with that story is that immigrantion is apparently lower now than ever, and the biggest problem is that many americans strongly prefer not to do that kind of work.
Seeing the same China routes as mentioned on this thread
Related? https://news.ycombinator.com/item?id=18385920
If anyone from DDG is watching this thread, thank you for your product and your commitment to privacy. As a privacy-conscious individual, I greatly appreciate your work. Is there a way to donate? I know you already monetize your product through ads, but I use an ad-blocker (among other things) because, well, most of the internet does not operate with the same values that you do. Since you aren't making any money off of me, I am willing to donate/pay for your service but cannot find any place on your site to do so.
I frequently run into this limitation. I really wish there were 3, 6, 9, and 12-month options in the limit dropdown.
Six months or so ago, I switched from KeePassX with manual file synchronisation, to using bitwarden_rs on my own server, which runs Arch Linux, via a package on AUR. I haven’t had any trouble with it so far. The current version has been running for almost a month, and its resident memory is currently just over 11MB, viz. low and stable. That’s also roughly the size of the package and its data on disk.

I do also have the optional web interface, which isn’t Rust; it uses inordinately much memory while building (https://github.com/bitwarden/web/issues/250) but is fine after that.
Not just GCP - looks to be a big BGP hijack of large sets of prefixes.
All pointing to ChinaTelecom .... fishy
I suppose those "ton of dependencies" are usually handled via package managers in a single line usually mentioned in their doc. I've run servers for 15 years but if something asks me to install tons of stuff manually, I won't even look at it.

Initial config surely varies from wall of text config to a simple web based config but popular apps usually have decent doc or googleability to keep you out of maze easily.
Not a bad idea in general, but very risky as an independent business because web hosts can just offer it as a freebie or add-on the moment it starts catching steam with customers. They often already do, although they don't say so or commit to it.
I want to share some things that I noticed over the years of doing estimations for work related to my small side project.

- Discuss business problem that client is trying to solve. Often you can convince him to change requirements to make it cheaper for him, easier for you and better from technical point of view.

- Know your client's expectations and attention to detail. Some clients want to solve some business problem as cheap as possible. They don't really care about aesthetics and technical nuances of the solution. Others want very specific UI or technical design and won't compromise on any little detail.

- Listen to your gut. Sometimes I feel like something is complicated, but I can't really justify why and end up giving lower estimate. Almost always it was a mistake.

- Always add some buffer for unexpected complications. Bigger the project - bigger the buffer (even in percentage terms).

- I would also recommend to add some buffer for change requests. Almost always client would want to change some small things. It's easier to give bigger estimate upfront than try to charge for every small change later on. Client is never happy with additional charges, even if he knows that he hasn't asked it at the beginning of the project.

- This last one might not be possible in every situation, but I personally always ask for full payment upfront. For really big projects - 50/50. It's not a part of estimation, but this requirement goes along with the estimate. Another option, if the project is big, is to estimate and implement features one by one.
There's a current BGP prefix hijacking issue currently being mitigated.
ODF is a bit more than a few hundred pages. Here's the page counts for ODF 1.2:

102 pages, OpenDocument-v1.2-os.pdf
846 pages, OpenDocument-v1.2-os-part1.pdf
234 pages, OpenDocument-v1.2-os-part2.pdf
35 pages, OpenDocument-v1.2-os-part3.pdf

That's 1217 pages.

It is quite a bit smaller than OOXML. OOXML is about 5-6 times the size of ODF. There are three reasons for this.

1. ODF has cleaner and leaner markup. OOXML is uglier and more verbose, leading to more things that the spec has to document..

2. The OOXML spec goes into more detail for a lot of things that the two have in common.

3. The OOXML spec seems to have a lot more introductory or primer material.

The impression I got from looking at both, but not actually trying to use either of them, is that if I had to implement a full featured office suite solely from the spec, with no reference implementations or example documents, it would be easier if I picked ODF, but would probably have better interoperability if I picked OOXML. The strongest impression I got, from both of them, though, is that there is no freaking way I want to implement an office suite!
FWIW, Authy has worked for me anywhere Google Authenticator has been asked for, and is better, it seems to me (multi device, online backups, etc.).
Must be nice to have all the money in the world to purchase any domain you want.
I'd suggest trying meditation if you haven't yet. It's amazing for learning to manage your thoughts and choose how to spend your energy and time.

I always feel great after spending time in groups doing something I'm interested in, like attending a concert, mechanical keyboard meetup, or makerspace class. It feels vindicating (not sure if that's the right word) to know that there are people out there like me, and there's always people who are even deeper into a hobby than I am.
Seems like its time to start or accelerate a working group on secure BGP.
Maintenance and updates as the software changes is arguably a bigger inconvenience than the initial setup.
It's helped me to always try and find the good in every situation. If someone is rude, then use it as a learning opportunity. If it's rainy, at least the plants are getting nourished. When it's cold, appreciate how warm it is at home.
Requiring a sufficiently smart screen reader seems a bad way to go. 30 years on from CLtL we still don’t have a sufficiently smart compiler and I would argue that that problem is easier. One thing is that this works “better” with one-argument functions. Consider:

(with-open-file (*standard-output* foo)
(print x))
(print y)

Vs

(with-open-file (*standard-output* foo)
(print x)
(print y))

How do you read the first? As “print x, now with-the-file foo-open-as-standard-output it; then print y”? Or maybe “with foo opened as standard output, print x; now print y”?

This seems more reasonable but how do you write the second example? Like “with foo opened as standard output, print x; also print y”?

There are reasonably large semantic differences in such cases and many programming languages, including lisp, express them with subtle hard-to-pronounce differences in indentation or parenthising of expressions.
As far as the US goes their own parties have poisoned the the public discourse with conspiracy theories, fake news and alternative medicine/science/history/morality. Those parties should restore values and trust to the public affairs.
Yep that's our bad. We accidentally started prefixing all of the urls with https we've fixed the bug but haven't shipped it yet cuz we're in code freeze
Depends how heavily you rely on the cloud. I certainly don't have everything there (and don't want everything there!). Plus, going via gdrive is slow compared to say saving the file directly from the browser, and then opening it on a native app instantly.
What are the disadvantages of Wufoo and Typeform? I've used both as a user before and I Wufoo as an admin. My needs were simple and they seemed to work for my use case. Just curious about your use case for which they don't work?
I agree that gitlab appears to be down at the moment.
In my admittedly conservative mind, here's how I see it:

- Weinstein continued his predatory ways by threatening the careers of anyone who might expose him.

- Weinstein was also a major Democratic donor. (Many Democrats denounced him after his downfall.) Tellingly, as he was suffering the first wave of accusations he tried to say he'd be back and battling against the gun industry-- he tried to cling a left-side pillar.
I find it easy to imagine that Weinstein would use his influence to tip the scales politically as he did with his sexual abuses. He would threaten the career of anyone who didn't follow his instructions.

As noted above, James Woods, Tim Allen, and other conservatives have noted that they believe the Hollywood environment is toxic to conservatives. I have no reason to doubt them, they know that world better than I do. All I can see is that the vast majority of Hollywood celebs speak out from the left side, not the right. I have to wonder: For what reason, if not what I have said above?
This is exactly why the FDA can and will inspect facilities in foreign countries.
These are the times when Opera's built-in VPN service comes in real handy.
Ah yeah that's something we want to fix. If you're signed in it keeps the report around but if you're signed-out it's stateless. It's definitely on our to-do list to fix.
This is part of it for me. I self-host a lot of services in my home and the maintenance is kind of part of the reason I do it. It's like a digital garden I can tend to and learn from.
Hah that did it. I'm sorry for criticizing BitWarden when it was my own fault
Can you name another project besides IOTA using Ternary? I don't think it's becoming a trend.
I'm getting the same thing. Servers are in us-east1 and tracert is ending at chinatelecom-gw.transtelecom.net [217.150.59.249]