skysight-inc/HackerNews huggingface dataset:
Yeesh, as someone who has had to troubleshoot more than a few times HTTP payloads that were mangled by shitty ISP software to inject ads or notifications I would love HTTPS as a default to prevent tampering. I get the arguments against it, but I have 100% seen Rogers in Canada fuck up HTTP payloads regardless of MIME types while rolling out "helpful" bandwidth notifications. Signatures will tell you yes this is corrupt but end-to-end encryption means that the person in the middle can't even try.
thats pretty much converting javascript into html and vice versa
Martin Luther King Jr. Interviews and Transcripts
I’ve been told my desk setup looks silly, but I use two 34” ultra-wides (LG 34UM95) rotated vertically flanking two 27” Apple Cinema Displays stacked horizontally. It’s absolutely perfect for my coding needs.
On the Power of Diversity to Solve Problems
To bring this point to the extreme, after some time we may have two races of humans, one "higher" race, that would be more intelligent, educated, cultural, and would rule over a much more numbered "lower" race that would be physically stronger, has better mass-reproduction ability, but lower intellect, becoming less and less intelligent over time.

In even more far distant future, those two races may even split so much, that they become separate species, without ability of cross-breeding. Higher species would continue to call themselves humans, and the lower species will quickly drop to the status of animals in the eyes of the higher species.

Then someone will learn that there was once Home Sapiens, which was an ancestors of Home Modernus, and Home Animalis, which is an evolutionary dead end.
> "the logic of capital"

There is no logic of capital. The context "of capital" disambiguates the phrase
and makes it clear that the discussion is about a politics, and has
about as much to do with logic as the holy roman empire was holy,
roman, or an empire.

> Hacker News are only able to understand a very limited definition of "logic"

Why underestimate HN? Why not ask: how is using a word in non-standard meaning helping people's understanding?

As an aside, there's quite a few working logicians on HN, including
two how have published on features of Hegel's conception of (what he
called) logic, albeit filtered through Sellars and Brandom's Hegel
reading.
I had no idea APT supports Tor, very cool! I don't think the OP knows that either.
> The real discussion is not "blindly use HTTPS, or leave it like it is", for me the real interesting question is: can we design a package distribution system that preserves privacy against nation state level actors?

That is certainly an intersting theoretical question, but in practice there is also the question of the costs of something that requires you to change and complicate the whole distributed infrastructure vs. the benefits - are there actually real people who need privacy against "nation state level actors" specifically concerning the Linux packages they install?
I agree with that argument 100%.
Saudi Arabia has a 35% obesity rate and rising, so I don't expect their baby boom population to grow old relatively healthy.
You sounded like one of the few sane voices in https://news.ycombinator.com/item?id=18953040

I have no other way of discussing this further since that comment is too down the page for me to expect you to see replies to- but what would be a good "front-end framework" according to you? And if I may ask- what do you use?
The New York Times is definitely run by racists.

It’s just a constant flood of race baiting from them, on a daily basis at this point, and they just don’t know how to control themselves.
Brazil is Latin America’s most unequal country in terms of income distribution
So the neighboring city should make it free too?
> A network with positive effects might be feasible, we've literally never tried.

I'd argue that Hacker News and Stack Exchange are two clear examples of relevant social networks with overwhelmingly positive effects (neither is without flaws of course). Github might very reasonably make the list as well.

I think the line is functional networks vs general networks. Not all functional networks are net positive, LinkedIn for example went negative in my opinion after initially being a positive. However I think functional networks tend to rapidly fail (competition) or erode if they go negative (eg Experts Exchange), rather than persist (with LinkedIn being one of the few exceptions).

HN does very little to ensure max engagement or retention. To the extent HN self promotes Y Combinator, it's quite modest compared to the number of stories passing through the front page. The type of content that might drive a huge spike in engagement via comments (overt senationalism, anger-baiting articles, political flaming), is frequently kept off the site because it's fundamentally anti what HN is about. And of course you can use HN mostly anonymously.
On the Downside of Spreadsheets and the Illusions They Create
Sure they are.
The CNIL is independent regulatory body, I'm doubt Google's tax situation was a big factor in the decision. Or are you arguing that they were unjustly fined for purely political reasons?
Ask HN: Is it possible to work for a US startup without a degree?
If not, is it possible to work for them remotely?
RAM Saver Professional 19.0 Crack Latest Version
At least the "Cookies Management" panel is displayed promemently at the top of the page for pretty much every page of the site.
It’s both liability and labor thing. When a tenant moves out, large apartment buildings change the lock. With an electronic lock any member of staff can ‘rekey’ the lock in a few seconds.

For liability, the large companies use big key control systems to try and track which staff is checking out keys to what, but it’s still possible for staff to make unauthorized copies. With an electronic lock they get a nice report that shows all the times the lock was used and when the door was opened.

And finally, many property managers are control-freaks and they love that tenants need to ask to make ‘copies’ of the electronic keys. Previously the only real option for key control was something like Medeco and most don’t want to pay for that.
I may be miss-characterizing your point but there have been many times that I’ve sat down at a terminal and not been able to remember how I did something a few months ago. On the job the important thing is knowing the high level goal and the fundamentals of what you’re doing. The syntax can be easily googled.

edit: yeah upon re-reading you’re talking about completely obvious lack of practical experience... fair point
Or if you want to write your own WM from scratch, try https://github.com/Hammerspoon/hammerspoon
>For some people having a child counts as producing "something truly outstanding."

Despite the fact that everyone's parents managed to do it.

Each to their own though.
I heard it this way once:

You open the paper and read an article about your field. “This thing is crap, they got all the details wrong and are drawing ridiculous conclusions!”

Then you click to the next article, about something else. “Wow, this is really fascinating. We need to do something about this!”

...

I think this idea has a name, though I don’t remember it.
Sharon Van Etten found the drive to make music again
The online disinhibition effect would argue the exact opposite.
Not everyone uses fast unlimited internet.
https://en.wikipedia.org/wiki/Gell-Mann_amnesia_effect
I haven't used RSS since Google pushed Reader into a volcano. It's sad and stupid, but I bet a lot of people were in a similar boat.
> Also, can we do it on top of the current Debian infrastructure (HTTP and everything)?

I'm pretty sure that is not possible, because the current infrastructure is just plain old HTTP file servers (anything that can sling bits will do) run by whoever fancies being a part of it.
Can you please elaborate? I've always been suggested to stay in good american chains- hilton et al
Even if it's free to use they should keep monitoring 'profitability' of every lines, e.g. by assigning a value to each passenger to pay for the upkeep of the line.
> I much prefer people who are delivery focused to those who are overly idealistic or want to change everything out of the gate

Do you have problems to solve or not? Often the problem isn't really a problem, except that your current 'solution' is making it so.

I've untied a lot of gordian knots in my career. It really is a thing.

And if you don't have big problems to solve, why do you want a senior developer then? Just hire a junior and keep on going as usual.

Delivery focus is good, till you realise that it's often just delivering status quo for years on end.
The "Date, Valid-Until" timestamp mitigates replay-attack, cool.
But what if a vulnerability is discovered in a package and an MITM attack prevent you from downloading the new patched version, making you believe your system is up to date although it's not ?
Zero with dotted center, I'd imagine.
A petition feature provided by a centralized proprietary system that has an history of censorship and selling political data doesn't seem like a good deal.

But again, most facebook users don't even think about that kund of issues, so it might work.
Yes! Our algorithm can analyze 12-lead resting ECGs, and detect 76 different pathologies. Here is an article that has been published recently:
https://www.sciencedirect.com/science/article/pii/S002207361...
I agree as a matter of "how is the law written now", I was talking more of a "how I hope as a user that it could/will be".

If we go with everything off by default by law and try to apply it, we will end up with a broken web, meaning websites will not follow the law because it makes a stupid and not be punished for it because it's become the norm, just like the (bad) cookie law.

I'm ok with how it is on their site (based on how easy it is to disable, myself I disable all on such sites); it's quick with only 2 clics total, and it's easy to figure out with a clear color scheme and wording.

It's important to understand we make the law not for us tech users, but for everyone. Finding a solution that works for everyone and gives them what they want is important.
The thing that annoys me about this the most is the use of anonymous sources. If you are writing a scientific article, or generally hope to establish some scientific fact, I do not think it is appropriate to hide behind a veil of anonymity.
NPR Has Turned ‘Wait Wait… Don’t Tell Me’ into a Game for Smart Speakers
https://en.wikipedia.org/wiki/%C3%98

Interesting history, there's a couple of theories.
It's machine first, so human readability falls. Though there's the benefit that you will newer wonder what the letter is at all as they are so distinct.
How to Serve a Fully-Functional Web App 100% Free
Yeah, quite the opposite of "telling things as they are".
Would that be so bad that a fellow HackerNews user could get some revenue instead of having one of the richest person/corporation on Earth collect the full share of the sale instead?
Lots of reasons to use HTTPS most notable is defense-in-depth.

A good design always aims to have multiple othorgonal security mechanisms in place.
But that is exactly the bullshit that I was referring to! No, if you haven't mistreated your customers before, there is no need to change anything, and there are plenty of businesses that haven't. There was never any necessity to spy on your customers, and thus there obviously is also no necessity to get consent for the spying that you are not doing in the first place.
The Tech Industry Has a Drinking Problem and It Is Hurting Diversity
The author confuses buying/selling with supply/demand. There is no connection between them - the employer is always buying.
No, Facebook is not listening to your conversations
It's from the "Magazine", not the news section, nor is it opinion ala "This political party sucks and why". It is the magazine, which is long-form narrative storytelling. I don't think that should exempt them from leaving out or otherwise ignoring facts.
Still more than a 100 times the usual amount for the CNIL fines.

https://www.cnil.fr/en/tag/sanctions
8-Bit Unity
> proving equivalence between programs in such languages is feasible

Not in the sense of worst-case time complexity.

I'm quite aware of Coq, and Idris, and of Turner's work. They can be used productively if (1) the problem has an good and stable specification, and (2) is inherently sequential, and indeed functional, and (3) doesn't need performance. There are quite a few situations where this is the case, but (1) is almost always a problem in industry. See also the agile/waterfall distinction.
No, it also adds security.

If someone steals a signing key then they also need to steal the HTTPS cert. Or control the DNS records and generate a new one or switch to HTTP.

Adding an extra layer of encryption is like adding more characters on a password. Sometimes it saves your bacon, sometimes it was useless and came with performance drawbacks.

If you still disagree with me, that's fine. But I want to hear why you continue to hold this opinion when worked for 1Password during Cloudbleed.

https://blog.1password.com/three-layers-of-encryption-keeps-...
Ah I’ve thought about this exact thing before! Glad to see a coined term for it.
> the percentage of revenues that they charge in fees is a lot but it won't erase their margin.

I don't see how; the GDPR allows member states to fine up to 4% of worldwide revenue. If just five states fine that amount, that's 20% of revenue. Even for Google, that's practically all of their profit, and way more than what they make in the EU. And there are complaints filed with seven regulatory agencies already.
Many Muslims, particularly those outside the Gulf, are looking towards KSA less for religious guidance. Islamic scholars that are allowed to operate by KSA have been shown time and again to be hypocritical and have little to no dignity. Their judgements and positions change with the whims of the king and crown prince, which lends little to their credibility. The remaining scholars that decide to stick to their principles end up in prison.

For me personally, the only unique thing that KSA has that you can’t find elsewhere is Mecca.
Out of curiosity, from your perspective, is there anything that the bad teams share that the well run teams don't and vice versa?
You can block based on a name because you see the name before the package is sent.

You can't block based on package length, because you need to let the entire update through before you know the length. At that point, it's too late to block. Buffering the entire message doesn't work because TCP expects ACKs.
That would be reason #122132098 to get rid of the mortgage interest deduction.
Don't forget, laptops are supposed to be closer to your eyes, monitors sit farther back, the bigger the farther I suggest
… or by using goods and services found through the web. Which makes it worthwhile for folks to put up web sites.
It'd be good to have details of unicode coverage on this site, i.e how many glyphs in various major blocks are covered (e.g greek, cyrillic, box drawing, mathematical symbols etc).
I have no idea what you are talking about.

This has nothing to do with spying or misreading customers.

As a customer, I want to know what data a service stores and how it is used, without digging through pages of cryptic terms and services.

Informed consent is the keyword here.

Plenty of paid services share their data with third parties.
Orange Pi 3 Released with Gigabit Ethernet and USB 3
I liked it! This article is very much along my line of thinking on the subject.

Thanks for sharing!
Certificate cost is trivial. Let's encrypt makes it free, but with a small change to the host names (country code.ftp.debian.org instead of ftp.countrycode.debian.org), all mirrors could have been covered with a single certificate. Some CAs will let you buy one wildcard cert and issue unlimited duplicate certificates with the same name. So, that would cost some money, but probably not too much.

The real costs are organizational and technical.

Organizing all the different volunteers who are running the mirrors to get certificates installed and updated and configured properly is work. Maybe let's encrypt automation helps here.

From a technical perspective, assuming mirrors get any appreciable traffic, adding https adds significantly to the CPU required to provide service. TLS handshaking is pretty expensive, and it adds to the cost of bulk transfer as well.

I get the feeling that alot of the volunteer mirrors are running on oldish hardware that happens to have a big enough disk and a nice 10G ethernet. I've run a bulk http download service that enabled https, and after that our dual xeon 2690 (v1) systems ran out of CPU instead of out of bandwidth. CPUs newer than 2012 (Sandy Bridge) do better with TLS tasks, but mirrors might not be running a dual CPU system either.
Things you should know about the Ottoman Janissaries
> If you add in humans, you have to find volunteers and then waivers because no one is
> really willing to hang around in the nude and get bit by horseflies for a day.

You'd be surprised. Naturist love hanging around nude in places where insect bites are a serious possibility.

Not because of the insect bites of course. They just literally come with the territory. But if there was ever a demographic where this research would be very relevant, it's probably naturists.
French data protection watchdog fines Google $57M under the GDPR
Best engineering practices: how to fix a bug?
One problem I have with it, though, is that often all the most popular articles in their site, are the opinion pieces.

I'm still a subscriber, but there's a strongly "promoted" bias, IMHO, and it requires reading news from several sources with an open mind to get the complete story.

Also, NYT isn't immune to click-baity titles, where the meat of the story isn't necessary correlate with the title.
My understanding is that those cookies are covered by a separate ePrivacy rule that isn't fully finalized yet, not the GDPR.

But yeah, it's bad optics.
I'm somewhat surprised that no-one has (yet) linked to this post [1] by Joe Damato of Packagecloud, which digs into attacks against GPG signed APT repos, or the paper which initially published them [2].

The post makes clear in the third paragraph: "The easiest way to prevent the attacks covered below is to always serve your APT repository over TLS; no exceptions."

[1]: https://blog.packagecloud.io/eng/2018/02/21/attacks-against-...
[2]: https://isis.poly.edu/~jcappos/papers/cappos_mirror_ccs_08.p...
No. There is no discussion, the answer is absolutely no.

NYC is not PAYING 5 billion dollars. they are simply not taxing it, therefor you can not say 'what else could they have used this money on instead'.

Its like me hosting a website for many charging 100$, and one person comes to me and says they will pay me 0$ but do other stuff, but otherwise they will not use my services. I can not say 'gee, if I charged them 100$ I could do these other things with the money', because I am not paying them 100$ to use my site.
In the spirit of charity I wish there were a version of this post that didn’t seem like it was written after injecting some strange cocktail of anabolic steroids and cocaine.

Maybe there are some good or at least interestingly wrong arguments but I find myself incapable of looking past the rhetoric.
Every individual article will have some bias. But GP is complaining that the entire editorial staff seems to share a bias, indeed a single agenda, meaning that there is a lack of rigorous discussion.
How is it not trivial if rogue organizations like "Staat der Nederlanden" have default certificates in the browser?

Hint: The Netherlands is world leader in surveillance of its own citizens and inhabitants.
Also, their claim that HTTPS doesn’t hide the hosts that you are visiting is about to not be true. Encrypted SNI is now part of the TLS 1.3 RFC, so HTTPS will actually hide one’s internet browsing habits quite well. The only holes in privacy left on the web’s stack are in DNS.
Can we please add 2013 to this? Additionally it was discussed at that time:

https://news.ycombinator.com/item?id=6980058
Single Life Gets Even Better with Age, New Research Shows
Disclaimer: I'm near the end of a PhD in experimental quantum computing.

I'm not sure what he means very little progress... we're entangling over long distances, we're doing practical error correction, we're reaching really long coherence times. More importantly, we've seen exponential progress in coherence times over time. Moore's law-like progress. Quantum computing has also had the side benefit of generating obviously practical results like ultra wide bandwidth, high dynamic range quantum limited amplifiers, and debatably practical but stunning fundamental results like reversing a quantum jump in real time by feedback. This is all recent. Quantum computing research has exploded in the last 10 years. The blog post just sounds like some dude that doesn't really understand physics, didn't do a thorough literature search, didn't really even look at recent news articles, who pats himself on the back for being a real practical business guy instead of a Quantum Physics PhD, because some Quantum Physics PhD served him food or something and thus they must all be floundering. He then goes on to poorly explain why quantum computing is really really hard and therefore we shouldn't be spending money on it. Poorly I say because he can't even seem to explain properly one of MANY proposed implementations of a quantum computer. One that isn't even particularly popular anymore. I really think he just woke up angry and wrote this.

Nearly having finished a PhD in quantum computing, I wouldn't say the skills I'm most proud of I picked up are my understanding of quantum mechanics... I'm now an expert in low noise microwave electronics, high speed feedback control, cryogenics. Some of which are practically useful skills, some of which are highly applicable towards better understanding of the natural world in ways that I think the author would even agree are worthwhile. So no, my life hasn't been wasted and my career hasn't been ruined.
You make it sound like a magic Repel Insects spell.
The New York Times is just constantly pumping out racially charged articles, every day.

You can hellban me, but it’s true.
All those ligatures for <>, <=, >=, etc. annoy me to no end. Ew.
>Optimus keyboard

I’ve had that page bookmarked for like 5 years now, and its never changed/stopped being out of stock. I’m starting to doubt it ever physically existed..
It could be a million times higher, but if it's an amount the company in question turns over in less than an hour, it still meaningless. As a fine, it's almost insignificant, but as judicial signal it _is_ important, because it's the first official warning, and ignoring it means the next punitive measure will be orders of magnitude higher.
An interesting article, but I would be concerned about readability for newcomers unfamiliar with Proxies.

To be honest, for the particular use cases mentioned here - why not use the object utilities in Lodash (which is well used, familiar to many, well documented, and battle hardened)?

> we didn’t get around to implementing slices like array[1:3]

What's wrong with arr.slice(1,3)?
"You should definitely make these major changes to your lifestyle, and if you don't, in about ten years or so we will fine you $25."

Will you make those changes?
Not for less than 2 years:
https://www.gov.uk/dismissal/what-to-do-if-youre-dismissed
Show HN: Rust `dbg` macro in Python
Does anyone have experience with Sudarshan Kriya from Art of living? Is it any good?