skysight-inc/HackerNews huggingface dataset:
> The argument that "you trusted this server enough to connect to it and download a file, therefore you clearly should trust it enough to permit it to execute arbitrary executables on your machine" is false in both cases.

Great point. Also, imagine that you control the server and you know that it was compromised. Surely you want to be able to download logs and other files from it for inspection without having your own machine compromised.
I'd argue that at this point you can still hire the self motivated people that you only need to lead not manage.
'Managing' programmers in general is hard enough, managing remote team in nigh iimpossible so don't do it, just remove the obvious roadblock, be aware of what everyone is up to (roughly) and don't interrupt, if not needed.
I dare say the daily standups are not needed - just read the commits to see what's already happened and send an email or a wiki page to edit plan for next week, no need for a meeting involving everyone's full hour.
Embrace async and don't manage things that you don't need to.
Or not being able to handle being slashdotted/hackernews-ed.
IMO, the Spark should come with them- DJI encourages users to launch and land directly on their hand.
Airtable was really bad for me compared to Notion. The rich text support is the primary but not only problem. I can't speak to the others, but Airtable is a really bad alternative.
> The USA basically won the space race... then decided to chill out for 50 years.

The USA military got what it needed under the cover of a civilian space race.

The US didn't chill after that. It put even more money into rockets but those were funded through the military for ICBMs.
Having read Moonwalking with Einstein (which is fascinating and worth the read), I think of these skills as similar to studying chess - effective for the discipline but probably not generally helpful.

Memory experts sold their discipline as if it would radically transform an average person’s daily life, which has not been my experience.
Makes me think of Buckminster Fuller's World Game: https://en.wikipedia.org/wiki/World_Game

I guess the problem is that similar to indicators of climate change there would likely be massive methodological argument, some of it legitimate, some of it mendacious, bogging the thing down so much as to destroy its usefulness.
because it is factually incorrect?

The system is not "serverless", it is just the opposite -- it is a "personal server", an application you have to run. To quote the primer,

> Most people park their ship in the cloud. If you prefer to host yourself, your ship can live on a laptop, a phone, even a USB stick.

(yes, "park your ship" means "store and run your file" in urbit)
How does not being able to force someone to decrypt their hard drive overlap with innocent men being imprisoned?
I'm sad that I had to read so far down the thread to find this comment, which beautifully cuts right through the argument. The problem is the idea of absolute knowledge -- knowledge is probabilistic and contextual. If I'm driving by the field in a car, I may be duped by the cow, but my perception that I'm surrounded by pasture land is more than adequate to support the activity of driving. If on the other hand, I'm Farmer Jones and I'm searching my pasture for Susie the cow, well, I'm not going to be taken in by a statue of a cow for more than a split second anyway.
I think Lennon summed it up with "Elvis died the day he went in to the army" (when asked about Elvis' death).

Col Parker was a shady character, and I think he really hosed up Elvis' career in a lot of ways, and Elvis wasn't capable of pushing back.
Something like a sudden coffee shortage would get people involved for sure.
Do we not want more people to be privacy conscious? Does every facebook user already know all this information? Did Jesus tell his disciples to recede into a private community of solitude and never interact with the unwashed masses of sinners and keep the good news to themselves?
I live next to a fairly busy road AND under the approach to Dulles Airport (not the final, but what is effectively the "right pattern").

To my ears, drones are far more annoying than either the constant whoosh-whrrr of the road, or the occasional rumble of a heavy airliner (narrow bodies and GA planes make way less noise - it's the A380s and 747s that make enough noise to make me look up). The pitch of the quad rotors is higher, which to most people, is a more invasive sound.
It's an amazing opportunity for guerrilla typographers though.
Thank you for your comment. Unfortunately I made a mistake. I have removed misleading information from the article.
Maybe it's just me, but it takes a lot of effort to read stuff I disagree with than, say, a novel or a book whose major line of thinking matches mine.
FDB itself is written in Flow, which is 98% C++ with a few extra keywords thrown on top that gets compiled to actual C++. This gives them actor model concurrency in C++ that is completely deterministic by generating very ugly code that uses callbacks instead of threads or coroutines.

The reason for Java being used here, if I had to guess, is they have experience running Java in production and the Java bindings are the most mature (in my opinion). Writing the record layer in C++ would probably be overkill. The reason the Java bindings are the most mature is probably because they needed to be to write this :)
I think it is hurting Angular in the marketplace, too.
> I mean, this guy cites:

Well...you seem to know a lot about artists whose music you abhor...I'm curious to see what artists/genres you'd recommend :-)
The biggest "what if" is, what if he actually did forget the password? I have an encrypted backup of an old computer that I actually have forgotten the password for. The only reason I keep it is because I think there's a small amount of LTC on there. I wonder if I should delete it in case police ever get their hands on my drive.
Nix and Guix both excite me a lot. Guix as a Guile scheme API is a very exciting, but what I like more is, as a result of that, Guix & it's derivations are all part of the same repo. Because they are one in the same I can be sure I'm not going to build a package that hasn't been tested against the version of guix I am running. It simplifies integration testing if I decide to create a new branch of Guix packages.
What prevents us from cooperating?
Turns out creating a static binary distribution can be done in Python without containers [0].

[0] http://www.pyinstaller.org/
Kubernetes native Jenkins Operator
How to Focus on What You're Doing
It is my main online music service, mostly for the fast / minimal UI that seems to work quite well even on slower machines and navigates well back and forth between items.

It's one of the best streaming service experiences I've encountered.
Having spent ~6 years studying nonlinear laser dynamics, it always amuses me to see bifurcation theory pop up on HN.

https://neuronaldynamics.epfl.ch/online/Ch4.S4.html

A fantastic resource on a lot of this material (basically a peer reviewed wikipedia):
http://www.scholarpedia.org/article/Bifurcation
Yes, it is probably in /etc/ssh/. What type of key depends on your distro and version, but here is a helpful explanation for Ubuntu: https://askubuntu.com/a/76388
Thats what drug addicts do when they cycle out of a drug for few months so they can enjoi it again.
Not always - have heard those views from people back in the UK from their tax-exiles as well.

Mind you - I'm only talking about a handful of people but the ones I did meet who thought that way were at such a level of foaming at the mouth lunacy I can't really forget them. I did memorably try and explain to one crowd why I was quite happy with not being able to shoot trespassers on my lawn but I think I was regarded as a dangerous communist after that.

NB Not had any conversations like that for 10+ years...
the video was great - still seems to hold up ok, maybe because it was showing something which already looked dated at the time. the voicework got me - even just a few words in a wrong accent bugs me with beatles stuff :)
Maybe you are not in the United States, but for those that are, the answer is pretty simple.

It is reasonable to trust a VPN provider more than an ISP because you have a choice of VPN provider, you can vet them and choose the one that you feel provides the best safeguards to your privacy and security. Most Americans have between zero and one choices for high speed internet. Even in major metropolitan areas it is common to live in a cable monopoly, with a phone company providing sub-par "competition". You cannot vet your choice and choose the one that provides the best experience because you have no options. Even those that do have a choice may still connect to coffee shop or hotel WiFi on occasion, losing choice again.

In short, VPN providers are a) competitive and b) portable.

You're not wrong that you're putting the same amount of trust in them, but these properties mean you would not be wrong to do so.
Some Ideas About Collateralized Multi-Asset Security Tokens: Part I
No problem at all! So put tigers at the top of your list and work slowly but surely down the the list of 'nasty' animals and plants. Doubtless we can eliminate the whole damn lot if we really try. You'll be a hero! Or maybe not.
I'll just add two more systemctl aliases I got

alias scs='systemctl status'
alias jc='journalctl --unit'
Looks to me like Guix is Nix with a Scheme based language (Guile) instead of the Nix specific DSL.
> Sometimes I think that is what philosophers are doing - feeling clever - perhaps as a defense against some negative inner problem (psychology is an outgrowth of philosophy after all).

All science is an outgrowth of philosophy.

It's very frustrating when people look the obviously trivial and sometimes silly examples that philosophers use to elucidate a problem, and take it to mean that they are interested in trivial and silly things. Being right for the wrong reasons is a common and difficult problem, and some if the solutions to it a really insightful and powerful ideas.

> Aside from that, it doesn't matter if your model is "grounded in reality" until it fails to work for you, at which time it can be helpful to realize your knowledge (model) needs adjustment.

It might matter a great deal if your model is not grounded in reality - there are situations where that can kill you. It also seems like one of the fundamental aims of science, to have theories fail less often.
Python 2.7 to Golang translator
Reminds me of my favorite demotivational poster:

Responsibility: no single raindrop feels it is responsible for the flood.
There are brokers. I used FEInternational.
Previous discussion: https://news.ycombinator.com/item?id=13319904
Sure it could translate seamlessly to the problem solving domain generally
Not sure how this supports or refutes GP claim ...

EDIT I mean - we’re talking about convection right? Which I understand to involve circulation of air currents ... does your link have anything on this topic? I guess with a large enough centrifuge there might be no difference but it was unclear whether what was being referred to was large habitable centrifuges or the type more commonly found in labs ...
haha, this made my day! small world :)
I actually found a lot of it insightful. Maybe I'm not as priviledged as you are to be exposed to this stuff on a regular basis. Maybe 99% of the population isn't living in this bubble either.

It wasn't what you need for your paticular situation, and that's fine. But the general hostility towards this is strange. Why did you feel the need to attack it instead of moving on with your day? Genuinely asking.
My scepticism isn't against the act of sharing this information. The "share on facebook" button just reminds me of the actual facebook button, which, as included inside the source code, makes facebook collecting data. This is against the idea of "improved privacy" of the checklist.

Yeah, there is no "real" facebook button. Nevertheless one can find a Google Analytics Script inside the source code. IMO this is really sarcastic.
Actually I think buying a new car every three years is much worse.
Startups are racing to commercialise Quantum Key Distribution communication
all i read was:
And it's worth reiterating that there are already nearly 100 bags of human waste on the Moon left behind by the Apollo astronauts

and thought.... what a won-der-ful world :D
How remote work has changed over 20 years
The article is about the warrant. The warrant was for forcing unspecified non-suspects to be forced to unlock their phones so they could be searched for evidence. The judge judges to be "overbroad".
Also adding my +1 here. I've been managing upper 5 figures for a few years on some of the most competitive keywords. My process is pretty similar except I basically swear by BMM (broad-match-modified: +car +accident +lawsuit) keywords only and then the ones that perform exceptionally well I might convert or add an exact match but I can typically fly solely by an entire mix of BMM + negative keywords. This keeps it much tighter and less likely to trip up on wasted spend as all search terms will be close.

Bidding strategy is also incredibly important, as good as Google is getting their recommendation on overall strategy isn't great. Manual CPC (enhanced) has yielded much better conversions and cost per conversion compared to any other strategy. Manually adjusting each keyword, admittingly this does take some time but you set an overall max CPC and then increment where needed. Of course, this can be industry-specific and dependent on your goals. There are also a few scripts I run to automate some tedious things but that's less important.

Like ericabiz I also tried hiring on a few consultants hourly and it's been hit or miss but there were some insights I missed, so potentially worth it. Do not outsource to an agency, they are not worth the money. You need to groom your campaigns over-time and be dedicated. Use that extra cash on bidding for the ads themselves not the overhead of an agency.

You don't know what you don't know. Always be A/B testing.
Not a very informative article. All it manages to say is that deep packet inspection does not work with encrypted traffic. I think author is not aware of transparent deep packet inspection of SSL traffic. Here is one such product doing it.

https://www.sonicwall.com/en-us/products/firewalls/security-...
Breaking TLS so you can do deep packet inspection is like a lifeguard throwing people in the water during winter so he can save them.
I did animation in college before switching to programming in grad school, so once I get everything running smoothly I plan to make new templates for fun.

Most of the competitors are SAAS and geared at agencies. I’m basically the low end of the market, but YouTubers just starting out don’t need multiple videos for $30/month.
Yes, that is how we do it now. But what if you only need 3000 ball bearings a month, would other process be more feasible, since the fact it is not economical at scale can be ignored?
Dotenv for Java/Kotlin: Store configuration in the environment
Honestly I wasn't even aware of --watch or I had forgotten about it. It doesn't do what I need though.

Updates to both .ts and .css files trigger the build. The build step compiles the Typescript files into JavaScript and then merges certain JavaScript files together and makes minor modifications on the fly. I prefer to do testing in the browser as its easier for me to read the code output there, so once the code is properly packaged web sockets fires a notification to the browser to refresh the page which brings in the freshly built code.

My raw TS and CSS code exists in several different files for management, but the final packaged code provides the browser 1 CSS file and 2 JavaScript files, which decreases the HTML load time.
My favorite example:

>In one case, West claimed to have matched the bite marks in a half-eaten bologna sandwich to the defendant. The jury convicted. (The conviction was overturned on appeal when defense lawyers discovered that the autopsy report recorded a partial bologna sandwich in the stomach of the victim.)

https://www.washingtonpost.com/news/the-watch/wp/2015/02/17/...
The Thames Path runs from the Thames Barrier (London's flood protection barrier, a few miles downstream from the centre but still within the city proper) to Thames Head, the (traditional) source of the river in the Cotswolds. Through much of London it's actually two paths, one on either bank.
People always go on about covering up your camera, but what should I do about my hardwired microphone? I'm vastly more likely to say sensitive data out loud than I am to mime it out or write it down and hold it up on a sign.
The way around that complicates things - validation of circumstances and parties outside the sphere of power can avoid it. Anyone trying to force a withdrawal from someone's account at gunpoint at a bank itself would just be robbing the bank itself. Which being federally insured means robbing the federal government by force of arms. Which draws a heavy response from any sort of government.

I have noted that spiteful to lethal anti coercion measures seem surprisingly rare given the premium paid for security and even when a lesser value to human life is assigned. They would use ink bombs for robbers and not time delayed or remote triggered fragmentation bombs with the loot. I assume relative rarity and baseline risks (even military bases in hostile regions tend to restrict arms to the armory except for MPs, on duty soldiers, and maybe personal side arms for ranking officers who keep it holstered most of the time as opposed to readied) and margins are why even in places where security is tenuous enough that foreign businesses travel arrangements include at least one mercenary with an AK47 or its descendant as a guide, driver and bodyguard due to their guest being a relative king's ransom.

Theoretically ATMs could be fortress panopticons watched 24-7 and with a SWAT team readied to deal with compelled withdrawals but that just plain wouldn't be a sensible use of resources - cameras, willingness to write off or insure losses and policing makes far more sense.
Harassment of Microsoft developer advocate backfires
The article describes such products, so the author clearly is aware of their existence.
Fantastic. It’s only 15 days old too.
While I generally prefer optimism to pessimism, this comment seems horrifyingly accurate. We may escape to new planets, we may learn to live under the sea. Humans will likely persist for a longer time than you suggest here because we're feisty motherfuckers who are programmed to survive.

BUT when you consider how long the lizard kings owned the planet, we are but a drop in the bucket now. The thin veil of oxygen on this planet will shake us like a cold when we use it up. And like an abusive husband, we'll be stuck holding a sad empty hull of defensive behavior and anger that wont bring back ecological balance.
The author suggests towards the end to analyze DNS queries, but that's on the best way [1] to be encrypted as well (finally).

[1] https://wiki.mozilla.org/Trusted_Recursive_Resolver
Or maybe a Pratt parser dsl?

What I think is how provide a common parser layer yet allow to get the same benefits of a hand-made one. For some reason, this look like is impossible?
Actually, that's kind of what the whole of the second half of the article is about.
At the end of the day if you're buying apple for the hardware you were doing something wrong to begin with. MacOS is one of the few good reasons to get apple products, otherwise it should be a given that you get an alternative device. Combine this with the fact that Apple has made it impossible to get stuff repaired, and what you've just said, I don't see why anyone would buy an apple laptop for the hardware alone.
Not that I'm advocating against police transparency, but just imagine what it would be like to livestream your work computer screen to the entire world. It sounds quite stressful.
I think there were some trials with negative results trying to link just TMB to immune response or outcome. It's really about problems with MMR genes.
Fargate is ready for prime time, and we share our CloudFormation templates
That’s just a run-of-the-mill MITM privacy violator
That can be used to fertilize the sprout!
Everything is wrong with this blog post.
Hammersmith has a lovely path along the Thames, with pubs and restaurants. It is truly great, especially in summer. Definitely not the most touristy area but it's a gem for locals like me.
This certainly wasn't a popular opinion 10 years ago. The history lesson here is that popular is a subjective quality that does not provide objective benefits, which is clear in a future time.
True. Was thinking more about the G - again, another common pianoish base (in my experience, anyway).

D/E/A - again, ime - were always "guitarish" songs. GCF always seemed to be more "pianoish". Just my own observation/experience - it may not be true of everything, but seems to be true about much of the stuff I've listened to (and tried to play).
Well, even if we were talking about how to build scalable servers (we aren't), I feel like that's some sad, judgy gatekeeping to suggest that one needs to apply those same principles to their own blog else they need to receive such condescension in the comments.

It's like saying a real engineer builds their own blog. I wouldn't waste a single second of my life doing so, and the money I'm willing to spend on it reflects that as well. It comes off as petty, to me, to judge someone on this.

For example, I'm paid $100k/year to build scalable servers, not my cheap Wordpress blog.
Agreed – with remote teams you have to embrace async. Don't force meetings that everyone has to be apart of unless it's a critical planning session or something in that realm.
Exactly. If additional security is needed it can be applied in layers e.g., container sandboxing. If updates are forced old/infrequently used content will simply be broken/not accessible.
Zimbabwe Shutdown: Government accused of blocking WhatsApp and Facebook
I heard that pollen are more aggressive in areas with high emissions - on a reputable German radio show.
This could be one reason for worse allergies, especially when you add in lifestyle changes such as moving to a city.

Personally, I could not remember a situation where I felt this could be true.
Zimbabwean internet shutdown after violent protests
I don't see anything on this phrase on Google Search
German train-delay scarf sells for €7,550 on eBay
Wendell Berry once wrote that we are at war with nature, and I think the metaphor is quite appropriate.

This war, like most wars, has turned out
to be a trickier business than we
expected. We must now face two shocking
surprises. The first surprise is that if
we say and believe that we are at war
with nature, then we are in the fullest
sense at war: that is, we are both
opposing and being opposed, and the
costs to both sides are extremely high.

The second surprise is that we are not
winning. [...] Even in our most grievous
offenses against her, as in the present
epidemic of habitat destruction and
species extinction we are being
defeated, for in the long run we can
less afford the losses than nature can.
What you are asking for is the ideal culture. I now work with a team which share these values and working here has been very fulfilling but it was not always like that for me. I have worked with teams with worse cultures and never really understood the importance of these soft skills, but once I got a chance to work with a good team, I acquired these soft skills.
Gaming the lottery: How one winner used math to overcome the odds
$1000 per month what the actual fuck
I'm a millennial and my food costs are around $30 per week, not per day. That's fucking insane.
What are you saying the difference is?