skysight-inc/HackerNews huggingface dataset:
This article does not get off to a promising start. It begins right off by mixing in completely orthogonal concepts, like privacy. It then has a random unsubstantiated and unsupported side swipe at a single specific semi-obscure joint US-Canada program with some conspiracy mixed in. Author then screws up how false positives/negatives work in the context of authentication, perhaps partly because their mind has already jumped the tracks here and switched to some panopticon thing rather then, you know, authentication. Author writes:

>"If you have a giant database of fingerprints or retinas or DNA samples or voiceprints or faces, and you have an algorithm for searching the database, and you have one sample you want to look up in the database to find the right match"

Sure that'd be the case for mass surveillance, but not for auth, be it on a phone or in the NEXUS program author cites. The individual is registered (in person) in the database and are asking that they, specifically, be authenticated, and obviously their biometrics are linked with their other info (like name). It's not "we see some random person, try to find them in the db" it's "This person states that they are John Doe, and are asking to be authenticated as such by presenting the following factors", so their specific entry is being pulled up and the factors compared just to that, which generates a result of some level of confidence which either meets the target threshold or fails. False positive would be somebody who isn't John Doe being successfully authenticated as John Doe, and false negative would be the real John Doe failing to be authenticated as John Doe. More factors, higher quality of individual factors, and more powerful comparison systems can raise the confidence level. Better ones do so at a more efficient time&cost ratio for the defender vs attackers.

There is some interesting stuff in this, and it touches on the important enrollment problem, but it also seems like a lot of unrelated tangents and wild goose chases mixed in. There also seems to be repeated instances of the classic screw up so common in security discussions (like those who cite that garbage xkcd) of failing to always remember that all security is an economic equation. Always have to keep that in mind or one can naturally fall down an endless hole and completely forget what the point of it all is.
Those 'kerb grips' aren't for traction. They are to help blind people.
Titea:A Distributed Redis Compatible Database Base on TiKV
How do you get your customers?
Apple reportedly replaced 10 times as many batteries as expected in 2018
The article was ok, but check out HookTheory’s chord progression visualizer:

https://www.hooktheory.com/trends

It’s fun to play with and has helped me find songs to hear how the same progressions can be different across different songs. Personal favorite progression is I-IV-VI-V...which is shared by “Whatya Want from Me” by Adam Lambert and “Concerning Hobbits”.
I wrote a blog post on how to implement secondary indexes using an ordered key-value store a couple of years ago: https://misfra.me/2017/01/18/how-to-implement-secondary-inde...

It would work with FoundationDB, RocksDB, etc. I actually learned these techniques when I interned at FoundationDB but have used them the most with other K-V systems.
uBlock Origin + Nano Defender lets me read the article just fine. You may have to turn some additional lists on in uBlock though.
First off, apologies. I mean more of a rigid, defensiveness in general among British people? Do you know what I mean? No offense meant and I withdraw that.

> Are missed appointments such a issue for GPs?

"Patients who miss GP appointments are costing NHS England £216m a year, officials have said." - https://www.bbc.co.uk/news/health-46732626

And the incident I described what started due to one of the girls, a receptionist in a GP, bemoaning how many missed appointments they have and what a backlog it begets. People agreed. Just now I checked my doctor's online portal and I can't get an appointment for over two weeks (they advise to ring up at 8 on the morning if it#s an emergency and they'll try to fit you in). Unfortunately recently I had cause to have 6 appointments over a two week period, I saw a lot of names being called and no-one attending.

> If someone doesn't show they move onto the next person.

This presumes that people without an appointment, just hang around the waiting area... As said the backlog grows.
In the spirit of making the best argument for an opposing viewpoint, I think the better argument that would be made is that climate science is the only scientific discipline that seems predisposed to a certain, predicted outcome.

The argument is made that facts are selected or engineered to support a negative outcome because those producing the science already deeply believe in a particular truth and inject that bias into their work. Any scientist seeking to prove otherwise is silenced or ridiculed by the majority, who happen to be true believers. It only takes a few dissenting voices or a few cases of statistics being "manipulated" to add credibility to it.

The conspiratorial nature of it makes it even more compelling to untrusting, unsophisticated outsiders.

I'm also suddenly reminded of Umberto Eco's book 'Foucault's Pendulum', which deals with belief and conspiracy. While a fun, satirical work of fiction, I found it to be very constructive in understanding how people can come to believe things that are completely wrong.
Probably means an indoor toilet.

Edit: that went way over my head... sigh
What did work in your experience?
I'm one of the Guix co-maintainers and a Guix user, but I'm not a computer scientist.

The biggest thing that might be annoying for someone who is not comfortable with Lisp is probably the operating system configuration, which is done with Scheme. For installing packages, however, you can use the command line interface, or the convenient Emacs user interface --- neither of those require any programming knowledge.
It doesn't have to be this way. We utilize automation and slave-like labor to produce disposal junk.

It would be much better if via policy we encourage repairs, and levy a cost on packaging of any kind.

Then the market will sort itself out and there will be work in form of a robust secondary market.
I think in your specific case it would be up to the officer's discretion if you were pulled over for it. About 20 years ago I worked the night shift at a warehouse and my car's passenger side headlight went out on my way to work. I had time to stop at a parts dealer before they closed and picked up a new headlight, but I didn't have time to install it so I chucked it in the back seat and drove on to my job. I was pulled over right before pulling into work, and the trooper was reading me the riot act over the light. When I could get a word in I explained to him that it went out on me while driving, and I stopped to get one and planned to install it on my lunch break. I pointed to it in the back seat and showed him my receipt. He seemed pissed that his ranting was not necessary, but he didn't write me a ticket and instructed me to definitely install it that night because he'd be waiting for me on my trip home.

Perhaps I was lucky to get a cop who wasn't so much of an asshole that he'd write me a ticket despite seeing my best intentions to deal with a situation that could happen to anyone. Then again, I could have been pulled over by a guy who would have started off nice and thanked me for being conscientious enough to stop for the part that night.
Can't you buy the half fare card on the spot and then use it?
The client may have also been compromised, you may have, you might be in the Truman show ... /s

If I'm reading the OP right, whilst directory permissions can be modified, traversal is not possible, so it can't overwrite outside the directory you're writing to. But if you wrote to your home directly then your .bashrc could be modified ... and it sounds like other vulnerabilities allow the actual processing to be hidden (spoofed console output).

Seems like the sort of thing that could be used in a spear-fishing scenario.

I wonder if you could write a StackExchange answer with instructions to scp files from such-and-such server ...
Why?/How does that relate to my answer? It'd make it harder to just accept a changed key instead of leaving the decision to the user, and would make use cases where the user doesn't want/need to authenticate the server harder (one can probably debate each scenario for that if the decision to not authenticate was "right"). Although I find it a bit weird there's not even an option to pass a host key to SSH instead of editing the KnownHosts file.
We have the technologies now. We're just failing at the political and societal organization.
The Headlight of the Future Is a Laser
That giant corporation runs the biggest reason for SEO. AMP affects SEO.
So I just checked this out and you are a bitoff
Here is what Uber lists as requirements:
https://www.uber.com/en-SE/drive/requirements/

Meaning that you can either:

1. Get taxi driver license and driver for a fleet for a certain % to take home. This basically means that Uber is just one of the systems you use to get customers.

2. Get a taxi driver license, a sole trader company (1 person company) and a taxi operating license. This means you are a contractor for Uber, and pay the 25% comission.
--> You do not need a meter
--> You do need a specific insurance for taxi business.

So basically if Uber runs a fleet of contractors, it's massively more important than having taxi companies that operate phone-based (as well as app-based) ordering systems. They have massively more overhead than the tiny operations office that Uber needs to operate in any certain city.
My own opinion is that knowledge is always relative to a perspective.
It is only valid in a context.

Nothing is absolute.

Example:

1=1 is something i know is true cause i know the rules of mathematics. There is no absolute truth to that.
I don't get it. The word "whitelist" doesn't appear anywhere on the page, for me. Has the content changed? Or are you sincerely suggesting that nobody should ever load a webpage from a non-trusted domain?
It's a red herring because the total quantity of ice in the Antarctic is irrelevant, both to how the loss rate is measured and the climate significance.

It's like looking at someone who's hair is falling out and saying "look, they're barely losing any weight at all!"
I use, and am very happy with, FastMail.
The first example is exactly the reason why I hate rebases and prefer merges and complicated history instead. It may be more complicated, but it doesn't swipe problems under the rug.
Does that not assume that the mitochondrial from both parents are treated equally in terms of inheritance? It seems to me that biological systems do not tend to use random chance most of the times if there is a evolutionary benefit, thus if there is such benefit I would predict that those "tens" would be treated differently from those hundreds of thousands.
Using TLS with Rust – Getting OpenSSL to Work
Most of my colleagues used zsh and oh-my-zsh, and as far as I can remember, oh-my-zsh has a mechanism to check for updates every 14 days.

I would then set their .zshrc or whatever to end with

echo "sleep 0.1" >> ~/.zshrc

so that every time they opened as hell, it would take 100ms longer to run. It would usually take them up to 1-2 second of startup time to figure out what was wrong.

Now my favourite part was that I edited the oh-my-zsh update script to actually echo the original echo line into their ~/.zshrc file, so that even if they figured out what was happening and were very vigilant with locking their laptop, it would happen again within the next 14 days. Loved that.
> To be not defective, the software has to explicitly reject input that it was not designed to handle.

In some cases that breaks forward capability. e.g. the case where there is an unknown XML tag. You could reject the tag or message. You'll end up rejecting all future change inputs.

If the whitelist of acceptable items is large, it may be acceptable to have a black list however if the above holds, you don't know what you don't know.
At least some features, yes, and also some optimizations.

José Valim was the one who added "Add {continue, Term} and handle_continue/2 to gen_server" - https://github.com/erlang/otp/commit/69e009e3e1ad899a4609ff3...

José's contributions are at https://github.com/erlang/otp/commits?author=josevalim and Michał Muskała's at https://github.com/erlang/otp/commits?author=michalmuskala - there may be other Elixir devs in https://github.com/erlang/otp/graphs/contributors. (I even got in a tiny optimization myself once: https://github.com/erlang/otp/commit/07b0f4315b079cce7aeef7b...)
I used to feel this way and I found that it wasn't productive. What can you do? If you can do something, do it. If you think you can't change the future possible destruction of our ecosystem or millions of people, then you also need to make peace with it.

I think you can either do or not do things without the negativity. I found that the negativity made me think emotionally and not rationally or productively, and also sometimes came off in my conversations with people which was also not helpful-because I was clearly very emotional about the issue.

My thought process is whatever happens, happens. I can't do much to prevent whatever systemic collapse that might happen or not happen. But whatever I can do, I will. When I first learned about this, I thought it meant the future that I took for granted could be nonexistent - the dying happily carefree of systemic collapse part after having a family and growing old. It made me bitter and resentful. What's the point of doing anything if the world's going to go to shit by 2030? I decided to be more optimistic or maybe stoic. Make sure I can do what I can or all I can and not let some potential apocalyptic future darken my life. Sorry if this is a trash comment.
Why should we suppose a normal distribution? Ideology is pretty clearly not formed by summing independent events--people's interpretations of things seem influenced by their existing beliefs all the time.
10+3 = 13 when talking about coconuts, but 10+3 = 1 when talking about time[1]

[1] In America anyways.
But even today, the field of "Elvis impersonators" is a thing, many of them people who weren't even alive when Elvis died. People may respect the Beatles more as artists, and I know some of the Elvis craze is meant ironically, but Elvis-fandom basically created cosplay before cosplay.
I actually think TS team is much closer to the community than Flow's. Just look at the number of open and closed Issues on GitHub.

To me, Flow feels like something they needed in Facebook and they happened to open source. Their main focus is still FB's internal use and the direction is set by it.

TypeScript, on the other hand, does not feel like this at all. They truly put the community first, or so I - and many others - feel like.
> Older houses have interesting wiring. I've even seen a 5A circuit (once) in a really old place, varnished cotton clad copper wire and other interesting stuff.

I've lived in a few older homes, and have experienced some of this firsthand. My current home has some of that wire with porcelain wire nuts in the older circuits. Previously we lived in an earlier place that still had a small amount of legacy knob-and-tube wiring. (Bare copper wire kept off joists with porcelain insulators of various sorts.)

Never had to deal with fuses, or sub-10A circuits. (But the utility of a 5A household circuit seems evident in an older world where the whole-house service might be 30 or 60A.)
Password manager should include Password Store [1], it is open source & well maintained.

Perhaps the authors felt, storing passwords in their own infrastructure is beyond many users (or) unavailability of iOS app is a downer.

[1]: https://play.google.com/store/apps/details?id=com.zeapo.pwds...
Lol. He’s about as well informed on politics and philosophy as he is with computer science.
Moon sees first cotton-seed sprout
All these avenues already exist and are in play. To take away the drug black market is to reduce the total cash potential for organized crime.
Show HN: Doge Seed – Dank mnemonic seed phrases
Propeller efficiency takes a nose dive when the tips go supersonic. Most props therefore do not operate in this range.
I think the main question is what kind of alternatives are you looking for. Calendar service is provided by most of these companies already. Anyway I'm not sure who qualifies as privacy-first provider. E.g. Zoho has a quite good privacy policy at first glance: https://www.zoho.com/privacy.html

Is there even a difference between main Google PP and G-Suite PP? Is Office365 PP privacy first?
Those developers roll their own search libraries.
Because LED headlights aren’t blinding enough?
This is precisely why i use firejail as a precaution against zero-days on ssh and other executable running from my Home account.

https://wiki.archlinux.org/index.php/firejail
Writing a library that supports multiple platforms in Kotlin
> Intel has already skimmed off the cream from that chip run. ... It seems kind of scummy,

This is just Intel identifying a market and a way to serve it, in order to make some money. They're a business. It's what they do.
Show HN: Lurrker – Another way to browse Reddit
There is a DNS SSHFP record type that the history can publish the host keys.

I wrote about them some time back: https://ayesh.me/sshfp-verification

For servers without a domain pointed to it, I suppose you can still verify them by comparing the history key fingerprint by logging into said server with the console provided by server vendor.
I also work with FPGAs since 2010. I love especially the minimalism that an FPGA can offer despite the verification effort.

I would also like to meet FPGA developers with the hacking and open source culture in mind.

Even I had the luck of being involved mostly in FPGA-related projects in my career, I also see the trend of using more standardized hardware platforms for embedded systems. This means that Linux-based systems are preferred over bare-metal solutions, which can decrease development time but in the same time increase fault and attack surface. What do you think?
A troubled SAP S/4HANA migration caused a gummy bear shortage in Germany
Or they automatically distribute the host key fingerprints onto employees machines via some organization-wide internal method (ldap, orchestration/configuration management tool of the month, ssh_config pointing to a global known_hosts on a share, etc.).
I don't despise, but it does get annoying in the workplace when someone next to you is smacking MX Blues all day. I have had many mechanical boards, some ergonomic and some regular layout, but I keep going back to chiclet style. I feel like I can type much faster with chiclet style boards.
Dependency Injection Strategies in Swift
> Tip 4: Think About the Form and Not About Symmetry

er.. no. Symmetry isn't a be-all and end-all, but any half-decent designer will be flipping or mirroring horizontally and vertically their logos and pieces to check they look 'ok' the 'other way around'. The human brain's a funny thing, and some people's perception differs from others ('No!'), so it's worth ensuring that what you think looks ok doesn't look completely borked to other people. Flipping's a handy tip here.
Sure, but many basic bank accounts (those available to people with extremely poor credit history and no income) don't have a contactless debit card anyway, such as the one Bank of Scotland does: https://www.bankofscotland.co.uk/bankaccounts/compare-curren...
I have few on my MBP that I use a lot

# CD to the root of the current git project

alias ,,='git rev-parse --git-dir >/dev/null 2>&1 && cd `git rev-parse --show-toplevel` || echo "Not in git repo"'

# Put my MBP to sleep in X minutes

sleep-in() {echo "Sleeping laptop in $1 minutes..." && sleep $((60 * $1)) && pmset sleepnow}

# Check CI status nicely using hub (hub.github.com)

function ci {
unbuffer hub ci-status -v $1 | sed 's/https:.*//'
}

# Rerun the last git command with the suggestion it had

alias yup='eval $(fc -ln -1 | sed "s/git/git -c \"help.autocorrect=-1\"/")'

# Look up directories for a Makefile and run it - I couldn't find a way to actually search up directories, so `detect` is my own binary that does that

function make {
if detect Makefile > /dev/null 2>&1 ; then
LOCATION=$(detect Makefile)
echo "Makefile found at $LOCATION"
cd $LOCATION && /usr/bin/make $* && cd - >/dev/null
else
echo "Makefile not found"
fi
}
It would be nice if OP briefly covered for a new audience what Habr is about.

So, Habrahabr[1] is arguably the largest Russian IT community blog platform, operating since 2006. Today they have launched the English version of the website. International audience might find another source of decent quality IT-related content, in case the best articles of the Habrahabr will be translated into English.

[1] https://en.wikipedia.org/wiki/Habrahabr
You can sabotage, initiate preemptive collapse
Need tech teams to be my first users
I created a side project over Christmas break and I need some users to give me some feedback for my product. My product is called GetPost (www.getpostapp.com). It allows teams to do their daily standup through emails. You simply defined the message you want to send and the schedule interval to send them and our platform will take care of the rest.

It's a very simple concept but I think there is utility in it; especially, for remote teams. It allows every to share their progress with other team members and take away the hassle to create an email thread yourself everyday.

I am giving my first users free access to my product. I normally charge $5 per month per 5 team members. But its all free if you are willing to be my first users!

If anyone is interested, simply email at support@getpost.app and mention this post.
"to let" != "toilet"
I suspect if the US had done it, it would be plastered everywhere.
This seems like a way to force users into using Sync. I refuse to use that for privacy reasons. Do not want.
From the features list:

> Ranked search (so the most relevant documents are more likely to come near the top of the results list) with built-in support for multiple models from the Probabilistic, Divergence from Randomness, and Language Modelling families of weighting models. Custom user-supplied weighting models are also supported.

Could someone explain in a little more detail what these terms mean?
CUDA is problematic. There is no package for CUDA in the official Guix channels, because it is non-free software.

There is a patch for a Tensorflow package, which is built without GPU support (because that requires CUDA), but it hasn't been merged yet, because it isn't really pretty. (I didn't use Bazel to build Tensorflow, because Bazel depends on dozens of Java archives that cannot easily be built exclusively from source.)

You can use Nix as an additional package manager on top of a Guix system, of course, but this might not be as satisfying as using one package manager exclusively.
Bitwarden is far better than every password manager I've tried. Open source and free of charge.
Another Elvis contemporary that blew my mind was Johnny Cash, mainly because my main interest in Johnny Cash to that point was his cover of Nine Inch Nails' "Hurt". That's a bit of a leap of musical generations.
Nate Silver is widely seen as having forecast the election "wrong" because he said Trump had a 20% chance of winning. AIUI his position is that his model was right and 20% was an accurate probability.
This is silly. The economy has been booming for a while now and technology is more advanced that it's ever been. The situation is accelerating the wrong way. More of the same won't help.

Plant trees and revive massive amount of land loss that most countries have caused due to poor stewardship (overgrazing).

Better capture negative externalities. Or at the very least, stop subsidizing them. (aka, tax beef production, water consumption and plastic use).

This is a social, not technology problem.
How do you put 2FA codes on 1password?