skysight-inc/HackerNews huggingface dataset:
One trick I'm interested in trying: use external CSS if the referer is coming from the same site, otherwise include CSS inline. That way people who only view one page (a large percentage of visitors) get it inline, and people who view multiple pages get it cached.
Ask HN: Why do you trust vendors with the ReadOnlyAccess policy?
In the process of trying to find a managed SIEM service provider, I have found big name vendors asking for excessive AWS permissions. One vendor asked me to install a CloudFormation template granting them the ability to assume any role in our account(i.e. admin access). I was the first person to audit and challenge this. Two subsequent vendors have asked for the ReadOnlyAccess policy to be applied to an IAM user they can access. This would give them access to all S3 objects in any bucket, potentially sensitive CloudFormation stack outputs, and many other things they don't need. I was again the first person to audit and challenge this according to both these vendors.

In all cases my request for a supported and documented list of required permissions has been met with something along the lines of "Well we are vendor X, we are super secure, we'd never get hacked, no one else has asked for this".

Given that the 3 vendors i've spoken to so far all reacted this way, I can only conclude that everyone is simply granting them more access than is needed. My question is, why?

Edit: I just noticed that I copy pasted the S3 read only policy name instead of the global ReadOnlyAccess policy covering all services.
>"~20% more people, ~300% more people exposed to heatwaves."

One interpretation: 90% of people born in the last 20 years or so are not being exposed to an increased number of heatwaves.

They only tell us an increase of 157 million people since 2000, not sure what the baseline is and don't feel like signing up for the lancet article. If you want to check it please share the baseline percentage of people? I just know its a rabbit hole... I'd start asking stuff like: is this people exposed at least once in their life to a heatwave, what is the definition of heatwave and how has the definition changed, in general how is this measured?

>"This change is clearly not due to population growth."

This is wild speculation, it all depends where the population growth has occurred.
In Canada now, but it isn't much better. As the article says, we get the worst of both worlds: lower wages and shitty work conditions. Seriously considering Europe in the near future. Not sure every EU country is equal on that front though, the UK (although not technically EU anymore) seems to have the same unhealthy relationship to work as North America does.
Cold War propaganda spread the myth that science isn’t political
Especially with editing styles in general being much more frenetic than they once were, 2001 is tough for a modern audience. And, if don’t basically know the background plot, it’s pretty inscrutable as it was at the time.

Don’t get me wrong. It’s on my best movies list. But it’s going to be a bit tough for a first time, non movie buff audience today.
Methadone is a legal opioid.
This Week in Healthcare – Trending Healthcare News
Wasn’t YC company Standard Treasury trying to help banks become more API accessible? If the banks have an API an offering, I can see how a standard would need to exist to support the primary use cases (auth, balance, transaction), and perhaps Plaid is showing what they could look like (reducing the complexity of interfacing disparate banks’ approaches to managing bank data). [NB: if there is a standard or info I am clearly not knowledgeable of based upon this comment, please educate me!]
In the process of finishing Masters of Doom, definitely worth the read.
El-P is not nearly the biggest name in hip hop. Maybe in the online world him and RTJ are big, but amongst the general population of hip hop listeners I don’t think he’s very big.
My "despicable" side business is (was) making Android apps with Admob ads. I needed to update my app to allow EU users to opt out of targeted ads. Why Admob doesn't just add this functionality to their widget they place in my app is beyond me. In order to update my apps, I need to target a newer version of Android. It's not that it's very outdated, they were targeting Android 5.0, and get updated every 6 months or so. But a change in the Android API has made this very difficult for me. Being a side business, I had to make the choice - let go of the $600/mo I was making from ad revenue, or continue with the constant barrage of code updates required from Google for my apps to work. I decided to let it go. My app would still be on Google Play, even though I couldn't update it, if it weren't for GDPR. They pulled it due to non-GDPR compliance. So, yeah, GDPR has costed me $600/mo. I'm sure there are a lot of others with complex stories about how these regulations affect them. BTW I support GDPR and privacy as a whole, and wish my native USA would take privacy more seriously. It is the details of the implementation that are lacking. I also suspect that Google uses policies (such as putting the burden of Admob GDPR compliance on the publishers) to try to push out small developers.
Because the functional units are utilizing microcode? Or do you mean something else?
> Even though the Dreamcast had similar or better specs than the PS2 it wasn’t considered a real 3D platform by a lot of the game magazine critics.

Wat? That sounds like you confused the Saturn and DC. The Saturn had iffy hardware choices for 3D (because nobody saw the PlayStation coming), but the DC was a 3D system through and through. I don't recall anyone at the time claiming otherwise.
Strength in Numbers: Measuring Diversity in the Tor Network
GoDaddy is a scam
> On the other hand these startups are voluntary organizations. You choose to work there or not.

I think this sounds good in theory and is very shaky in practice.

For example, look at indentured servitude [1], where people can sell themselves into time-limited slavery. Once common, it has been banned. You will find people suggesting we bring it back while waving the banner of "freedom".

It's especially erroneous here. This whole article is about how he thought he was getting into one thing based on the hype, but that the reality was deeply different. He talks about it as cult-like, cults being organizations that take advantage of flaws in human cognition to manipulate people.

If free choice is to mean anything, it must be a choice that was honestly informed and unmanipulated. To use it as an excuse in a situation like this is just victim-blaming.

[1] https://en.wikipedia.org/wiki/Indentured_servitude
Writing applications or tools in GNU Emacs is kind of nice, but the programming paradigm is something like “textual buffers manipulated by imperative routines backed by some global dynamically scoped variables” which has its beauty and charm but is also quite tedious...
Verizon Takes $4.5B Charge Related to Digital Media Business
Ask HN: Why Signal Requires Google Services for Notifications?
Telegram notifications work GREAT without Google Services, so why Signal insists on using it?
Yes! Oh the memories. If blow through my monthly allotment of hours in a weekend
It forbids letting users exchange their information for access to a service. (Because you can't disallow access if they don't agree to data collection). You can say any such deal is inherently bad and users shouldn't have that option, and you might even be correct, but it's still a restriction of freedom.
Nothing. I was downvoted to oblivion less than a week when I said Bloomberg is over and Hackernews should embargo them and people shouldn't click them. Edit: and the downvote brigade is here again, downvoting and not giving a word of explanation. Are you paid by Bloomberg?
Humans Need Not Apply [video]
Another thing I don't see anyone talking about is that some people (users) hoard scooters so they definitely have one available to ride the next morning without having to hunt for one (and hope they find one close enough). I've seen this where someone will ride a scooter somewhere and bring it inside behind a locked door so that it will be available in an hour or two when they are leaving. I would expect this same behavior to happen overnight when scooters have a high enough charge left on them to still be useful.
Is there an incentive structure that will fix this? Or one that can fix it? I suspect you’d need some sophisticated machine learning that can adjust the incentive model to each users’ specific antisocial behavior. Even then, it’s not clear to me you’d have a net profit, there might be classes of users you just have to ban.

I wonder how much of the antisocial behavior is subconscious
https://www.youtube.com/watch?v=t7tA3NNKF0Q&t=1s

This does a very good job of explaining how small content creators are practically powerless now on the web in terms of protecting their content being stolen.
We are working on a cross-platform solution at Chartly. We are still early but can already create dashboards more quickly than what I've seen Tableau do. See https://chart.ly/ for details! :-)
Verizon takes a $4.6B charge on Yahoo and AOL
Ah, you're saying it matters during design. Sure. I am talking about after passed, the intent matters very little. Too often on the GDPR and other legislation in effect, the intent is used to judge effectiveness which is invalid. When a law on the books is not working right, what it was trying to do is not an argument in favor of it working right.
Are they debunked? Oh that's fantastic.
Where can I read more?
I would expect newspapers to be more knowledgable about politics and international relations than scientific topics like physics. The latter is too broad a category, the former is usually the paper's primary focus.
There has to be more to this story that we don't know. Bloomberg has a lot to lose by publishing such a harsh claim that's not extremely fact-checked. Reliable newspapers generally don't throw around anonymous government sources without doing background checks on these people. I have little doubt that they got the information from who they say they did.

At this point I wonder if they should stop protecting their sources on this story and see if that shakes out any truth.

The problem with that is of course that it erodes trust for future sources, and potentially puts these sources at personal risk. But if not doing so starts putting the entire publication into question, that might be a risk they have to take.
Ask HN: Any exciting under-the-radar discoveries/gems from NeurIPS?
So I’m now at a startup and somewhat removed from cutting-edge academic machine learning, but fondly remember the times I attended NIPS, and how many amazing and promising papers/posters introducing brand new techniques and areas of inquiry that were incredibly inspirational, but without the backing of big players and thus not really publicized unless you happened to see them. For those who attended, did any of these stand out? Any good notes people have taken and published?
Android Trojan steals money from PayPal accounts even with 2FA on
But you leave parent's flamebait? Not a good look.
This kind of parking restriction gets me incensed as well.

It applies in rich parts of town in general.

I'm paying MY tax money for these roads but only people with a residential permit can use them.
Piracy and the great game catalog!
Is the text on that website the legally binding or not? If not then it has no real value.
Keys to effectivly coaching your team
You use Red? Not just play with it? Could you share some details?

As for posix subsystems on windows, they're indeed painful. But the new Linux emulation layer is quite good - in some cases it might be a viable option.
I wrote a book about Angular Schematics
Hey HackerNews,

While wanting to learn Angular Schematics, I struggled to find any sort of good documentation/learning material.

SO... I wrote a book about it.

Here's the link ->

https://leanpub.com/angular-schematics-cookbook

It's around 60 pages of "deep-diving" into the available types and walking through a couple of example schematics. I hope that this book helps spread awareness about how useful Angular Schematics really is and also that it helps others to learn it faster.

Please give me mean/nice feedback! I love it all.
In my (startup) office people go home whenever they want. It's in Seattle but our SF office is similar. It's not impossible to find reasonable situations.
> I haven't seen anything that explains how scrambling and descrambling work; but it's important to understand that, at a certain level, all encryption is "security by obscurity." It just comes down to how easy or hard it is to figure out how to bypass. In this case, hacking to get ahold of the scrambler is no different than getting ahold of the private part of a key pair.

This isn’t true at all. There is a very significant fundamental difference between obscure information and secret information. Obscure information is by its nature known to many people. There are likely hundreds (if not thousands) of engineers who had access to the code or design documents that describe the scrambler. Information about it was probably given to sales people and representatives at other companies, and transmitted insecurely over a variety of communication mediums. Compare that to secret information, which is known only to the parties using it to authenticate.

Perhaps you could argue that in this case, security by obscurity was not the reason that the system failed, but that isn’t the same as saying all encryption isn’t security by obscurity.
All about JavaScript async patterns
I don't think such an argument would hold water. The original PlayStation's success came from being the first system really designed for 3D, having a very competitive price, being incredibly open to third parties, and having Sony's marketing power behind it. Piracy was, as always, an overstated factor.
That actually came up in a now-deleted comment. Incidentally, the audio is back now, though I made no request for review. I wonder if they periodically rescan content when they make changes to the algorithm.

Here's the video for the curious:

https://www.youtube.com/watch?v=wCEjJhm8qYM

There is someone with a financial interest in not having people watch it, but removing the audio won't help them.
I am legitimately intrigued by this analysis. I've always wondered why I found certain rap so much better than others. I stopped liking the kind of rap that was becoming popular around the time of Snoop Dogg, Dr. Dre, Tupac, etc. Looking at this data, it pretty obvious to me that the stuff on the right I tend to like a lot more than the stuff on the left. Sure enough, I just listened to Aesop Rock for the first time and it is exactly the kind of rap I enjoy.
Uhh, CDs were of high quality and burners were cheap, easy to use, fast and reliable.
Just because they only went after a subset of companies, doesn't mean that everyone isn't still non-compliant with that mess.
Nope! Willful misunderstanding of what I've written makes him a dishonest actor, as it also does you!
There really are some publications where you can read an article on a topic you're familiar with and they get it right. For instance I have a subscription to The Economist and sometimes their coverage is a bit shallow. And sometimes it repeats an expert consensus I disagree with. But most of the time the coverage is as good as it can be in the number of paragraphs allotted and sometimes it's downright excellent[1]. You probably have to actually pay money for high quality reporting.

[1]https://www.economist.com/briefing/2018/12/01/the-semiconduc...
Mail is very often encrypted in transit. There is a lack of authentication, so a man-in-middle attack is often possible. But passively listening doesn't work.

It is not clear how mail should be stored at rest. A mail server at your own home is one solution. Encrypting all mail with pgp another.

Neither solution is likely to scale in the coming years.

Maybe it is better to say truely private things only over encrypted chat at the moment.
First release of dav1d, the AV1 decoder
I know about `ls -l` (and have for about 25 years now, thanks). You're still scraping.
And still another is the Rolling Stone campus rape story. It does happen but when major media outlets are found to have published a major story that’s flat out untrue there does tend to be a pretty loud mea culpa.
Those of us running Zandronum use a mix of WAD and PK3 now days. Try Complex Doom Invasion.
> GDPR is good by intent, but is bad by implementation.

What is so bad about the implementation? Genuinely asking, I went through making a few companies compliant - and companies that were treating their data and security responsibly, had only little or even no issues at all to get their things in order.

One of the great things about the GDPR is that it clearly defines WHO is responsible if something goes wrong. The generic mindset seems to be that accidents and incidents happen, but as long as you did reasonable effort to prevent this from happening, there's little to fear.
Vanishing Nutrients
"Legally binding" is the wrong phrasing but this can be used to prove what they call Legislative Intent: https://en.wikipedia.org/wiki/Legislative_intent
Things are changing with PSD2 regulations. Banks in the EU starting in 2019 will have to provide open (and secure) APIs to third parties.
If newspapers were in it for the money they wouldn't be newspapers. It's not an incredibly lucrative business.
Part of it is anonymity: I would like to have an alias that may have nothing to do with my name (and having a unique domain would prohibit that). Even for email addresses that have my name, I'd prefer not to stand out. A custom domain is too traceable for my liking (even with whois protection).
You should probably still be using a full module init path (eg. myrepos.example.com/mymodule) to make it go get compatible, and regardless of whether it will only be a dep for a single project or not, the name should be descriptive of what's in the module or package. Having a module that's "specifically for deps" sounds wrong to me in general, but without knowing what you're actually doing that is harder to give advise on.
It’s a Briefcase It’s a Pizza Box No, It’s a Mini Satellite
Sega closed DC because publishers abandoned the platform. The incredibly easy and plentiful pirating was absolutely the primary reason for this. It was widely known and said at the time, when publishers were actively dropping the platform. Sad because it was a really nice platform.
Take a close look at the controllers. The similarities are eerie.
You would know if you're being asked for your banks username and password by a third party and can decide if you want to share that information; it's not something that you really need to know anything about ahead of time to be able to avoid.

The apps I know who use Plaid are Drop and Venmo. Some banks use it to instantly link external accounts without having to do trial deposits.
>Computer hardware maker Super Micro Computer Inc told customers

of course they will
I didn't hear about Erlang as much as I did since Elixir came out and showed me the power of the VM and its ecosystem. As a ruby developer it's easy to pick up Elixir and I'm learning so much more about functional programming and systems than I did ever before.
Yeah, the pricing tiers make me think they're/you're not trying to get CPM-type residuals (ad-based revenue).

Pretty cool product, considered using it for my property rental's payment portal.
I think track time matters more than word count. You could have two songs that are the same length and have the same lyrics except one song has the N-word at the end of every line, and this analysis would prefer the censored version as having more vocabulary.
In the case of email, the only way I can see a critical mass being reached is if both Google and Microsoft start encrypting. Does anyone else even compare to them in terms of volume of email accounts? I just find it very difficult to imagine the general public making this happen. I think it must come from the top down as most people don't understand or don't care.

For SSL to hit critical mass, it took the major browsers to start flagging pages as insecure coupled with the proliferation of let's encrypt. All the personal web pages in the world switching to SSL would not have forced the major players in the same way.
Troubleshooting obscure OpenSSH failures due to a broken firewall
Make it simpler. First this is theft, they should assign some folks to track and report this to police. Let that be known and people might start being more honest.

Second you could just add something to the terms and conditions which allows them to cancel people’s rewards in these obvious cases. “Oh you happened to have 20 scooters at your address for two days and then suddenly charged and returned them. We’re cancelling your account.” Assign someone again to find these obvious examples of people hoarding scooters then cancel their accounts or whatever is appropriate.

As this poster shows, the man power involved shouldn’t be all that much. Browsing on a map. Etc.
> I think part of the issue here is that a plain English reading of the GDPR implies such appalling totalitarian overreach that most people find it hard to believe that it can really be what's meant.

Do you think this level of hyperbole is necessary?
What an amazing language. I am working on a Elixir project, with a lot of Erlang peaces used directly. Integration is flawless and beautiful to observe. I do have many languages in my toolbox but only few of them were truly exciting for me, Haskell six or so years ago and Elixir/Erlang/OTP this year.
> If there is a blinking white light pointed at you it means the cyclist is on the other side of the road, traveling with traffic in the opposite direction.

Do drivers know this? Or do they think the flashing light is something else? Do they even see the flashing light? It's possible that eye movement across a scene means the eye travels over the cyclist in the off-time of the light.
What a crazy time when the first thing people wanted to do when they reached the moon was blow it up. I wonder, with the mass of the moon being so much less than Earth's, would the explosion have altered it's orbit?
Zoom actually does some neat things, like detecting audio problems and attempting to fix them automatically (on Mac it restarts CoreAudio I think).
Telegram's creating a blockchain platform for payment processing on the app. Telegram TON or something. Raised a few $B for the funding.
Been trying it out and agree. I like it a lot for simple, stand alone tools. For more complex ones it appears strangely ill-suited and "messy".
this guy is going to be riding Ethereum to zero I'm afraid
Show HN: Elixir/Unix style pipe operations in Ruby
I doubt that if HN website text isn't legally binding it doesn't have real value.
There is lots of opportunity still to innovate in this space. We are focusing on making it super easy to create great looking charts and dashboards really easily at Chartly [1].

Personally I am surprised by lots of the "state of the art" options out there where the result is EITHER ugly or HARD TO USE.

We still have a ways to go, but you can create good looking, interactive dashboards with our platform very easily.

Here is an example of a dashboard with NFL data: https://chart.ly/dashboards/nfl-stats-dashboard

[1] https://chart.ly
Python and Qt 3000 hours of developer insight
Nope, GD burners existed[1], and there are a couple of legitimate "MIL-CD" releases. It was a weird multimedia thing that went wrong, not a dev tool.

[1] https://segaretro.org/GD-Writer
This was described in "The Wire" as juking the stats: https://youtu.be/_ogxZxu6cjM
If the game used to limit maps to 8MB and it’s since been changed to allow up to 8GB, new maps can be incompatible due to their size.