skysight-inc/HackerNews huggingface dataset:
Even though the packages are signed cryptographically, there are possible risks when using an unencrypted connection.

A man-in-the-middle attack could simply work by serving you a signed, but outdated packages list, preventing your distribution from updating and leaving you vulnerable to security holes. It's the same attack an evil mirror could do as well.

So if you want to be really sure you should probably use two independent mirrors over an HTTPS connection.
You might be able to maximize your earnings going independent and becoming a contract worker.
I would say a decrease in players. TF2 still had a strong playerbase but it isn't what it was 5 years ago.
> Writer went on to suggest that racism was somehow involved

That's a crude misreading of the actual claim:

> They apologised after ... the realistic threat to ban United Airlines from China because of the racial undertones underlying that incident.

It was about image. Police officers dragging a bloody and seemingly unconscious man of minority ethnicity has extremely clear racial undertones, regardless of whether the intentions of the officers or airline staff were actually racist.
Last summer was very mild for us and this is the first really hot day we have had this summer.

It is very hard to differentiate weather from climate experientially.
I, for one, don't expect the universe not to make intuitive sense. I just think average folk intuition is waaay to weak for that. Actually, I think the same applies to nearly all people, mathematicians the least of all.
Debian was never cutting edge. If you want that, you would either have to switch your branches or change the distribution. There are quite a number of other distributions based on Debian with more recent software.

But I wouldn't want Debian to change their release behavior. And to be honest regarding different versions: Python has always been a special needs kid in this regard.
And now everybody has cancer and the food is tasteless.
Capitalism by definition is private property rights and voluntary exchanges between individuals/businesses. It's the very antithesis to exploitation.

You might say that it's immoral to pay $1 an hour to people Africa to produce Nike shoes for the US market, except it isn't. It's simply the market rate. Could they afford to pay more? Yes. But it's in no means exploitation. That $1 an hour they make boosts the local economy, driving the quality of life up. Make it $10/h, and nobody would work for local companies there anymore.

And do you have any metric that proves that peoples' standing in life decreases the birth rate?

For example, there hasn't been a noticable decrease in Nigeria.
https://www.worldometers.info/world-population/nigeria-popul...
https://tradingeconomics.com/nigeria/gdp-growth
The author is right that the firms are not selling enough and often they are too picky, have unreasonable slow and effortful hiring process with many stages of which some don't test the engineer but rather humiliate the person.

I am running a tech recruitment agency and this month I had TWO engineers who refused to take offers because the companies (two different ones) basically grilled them too much in the processes and showed off an insufficient company culture. I know both firms rather well and their environment is actually good. Seems like firms who aren't yet having a brand name like Google but who are sufficiently good tend to be arrogant enough to scare of engineers but not good enough to make them accept an offer.

The arrogance of some firms might seem irrational but it can be explained by "catastrophe avoidance". Most of the time, hiring a bad engineer is really much much worse than rejecting a good candidate - that is especially true in Europe, where it is hard to fire people. Also, every job description is a set of tasks that is supposed to be done by a person who'd better be REPLACEABLE. If you wait sufficiently long, YOU WILL FIND SOMEONE ELSE WHO FITS ALSO OR BETTER. Due to the nature of the employer-employee relationship, firms will still be "the ones on top".
"Unlike most kinds of canned produce, which pale in comparison to their fresh counterparts, a great can of diced tomatoes offers flavor almost every bit as intense as ripe, in-season fruit."[0]

Just thought I'd share that canned tomatoes are delicious, better than fresh in many cases and cooks illustrated has some tremendous analysis on all varieties of canned tomatoes.

[0]https://www.cooksillustrated.com/taste_tests/510-canned-dice...
Could you provide a link to the service you are talking about? I can't find any without a monthly fee of some kind.

Also, the original comment specifically mentioned free phone numbers, not cheap or otherwise not-free numbers.
tldr; wealth inquality is good, because it is easier to distribute wealth (fight with wealth inquality)

disease is good, because it easier to fight with disease when you are ill
https://www.oxfam.org/en/pressroom/pressreleases/2017-01-16/...
The analogy for this comment is:

"The defendant is already doing that (committing crimes), wouldn't it be better if we permitted them to continue doing so as long as they're putting a portion of their spoils to good use?"

And don't forget to pat them on the back for their community service.

Even that is a very generous analogy, as it assumes that Google's AI contest will actually result in outcomes that produce some social benefit, rather than a few temporary initiatives that look good, provide near-zero real benefit to society, and really provide Google with technical AI innovations that are of some small use to their business.

You may not consider collecting "anonymised" data to be a bad thing, but you'll note that you inexplicably introduced the "anonymised" descriptor twisting the original commenter's "sensitive data"!?
Apple long ago chose 'Menlo' and it now uses in some applications (Xcode, Terminal) the font 'SF Mono'.
It doesn't need to, the actual security is implemented on a per-package basis.

https://wiki.debian.org/SecureApt#How_to_manually_check_for_...
Still quite a bit easier than creating a F2P game to those same standards.
> Amazon warehouse workers who need medical attention after their shifts might disagree with you.

They probably would. However, I think they would be in the top 50% in wealth terms and not the the bottom 50%
It's the wealth inequality that creates the problems for so many people in the first place. Superrich people are basically royalty at this point. Affecting change as they see fit, mostly busy with themselves.
A few additional ray tracing resources:

https://github.com/melling/ComputerGraphics/blob/master/ray_...
Myth of the Server's Terrible, Horrible, No Good, Very Bad Day
One of the most interesting things I saw on the rails when I was in Japan this year was on the Shinkansen (Bullet train) from Kyoto to Tokyo (and back again).

Every time the train guard went through, when he got to the front of the door he'd turn around, do a 180 spin to face the passengers and give them a salute before 180 spinning back and going to the next carriage in front. I know it's a cultural thing but it's a nice touch.
Will ReddCoin Define Digital Socialization in 2019?
Yes, recent iOS updates tried to force people like my parents to have passwords or logins that are too complex and simply unnecessary for them. If you use iPad in your own home, there's no reason to "authenticate" on every open (my parents surely don't want/can't perform the fingerprinting every time -- not to mention that if the device prompt them to enter a new complex code they might even type in twice but they will never remember it, or be prepared to write it down first, the expect the device to "just work" and not to have to maintain some other external notice book with the access codes, and I fully understand that). It's not easy to match the security "requirements" and general "common" use.

The iPad of my parents (that they use mostly at home) seems to insist on more complex security procedures for my parents to watch the pictures of the kids than the procedures which secured the launch US nuclear missiles (the later had simply the code 00000000 https://arstechnica.com/tech-policy/2013/12/launch-code-for-... ).

Balancing the security and usability is hard.
True, the size difference would mean the time/effort saved would be tremendous. I detest the hours and hours of my life I've given to the IRS simply because they are stuck in a time warp. My UK tax return took me under 2 hours last night (and only because they keep getting the student loan wrong - but it's simple to correct). But yes, it does require investing in a suitable computer system. I seem to be giving them the benefit of the doubt and attributing it to an infrastructure issue but that's probably not the real problem, is it.
Why talk to someone so condescendingly? I mean, what percentage of people do you epxpect to HAVE seen this bit of obscure media you seem to hold as seminal?
It was something of a unique audience, as these folks were not computer literate and we were training them to be machine operators. On the professional software side of things the big dense UIs seem to be holding their own, so they must have some good :)
Exactly (from experience working in a top 5 consulting engineer) an Architect is nothing like a Chartered civil engineer.
How efficient...
give me your email, i have some spam for you
You may not want to make it too easy to find out which packages you have installed.
Let's check the package "python" in Ubuntu...

14.04 (2014): Python 2

16.04 (2016): Python 2

18.04 (this is obvious but... less than 12 months ago!): you guessed it, Python 2 (!!!)

So, still in 2018 and until 2020 (when I guess the next LTS release of Ubuntu is scheduled) all instructions over the internet telling you to run "python" or "pip install" will run Python 2 if copied into your Ubuntu terminal.

I already said this in a previous discussion about Python 2 vs. 3: what a lost opportunity.
Trends in small and medium businesses cloud adoption
The higher you go the more compromises you have to make.

That said, nobody is talking about disruption, just wisdom.

It just so happens, sometimes that wisdom will tell you that shipping shit out the door in the name of delivery focus is going to cost you more than its worth in the long run. Calling them overly idealistic to justify your laziness just makes you look bad.

I'd say a truly good senior can tell the difference between a startup and a mature company and adapt accordingly. It takes one set of skills to ship shit out the door as quick as possible and an entirely different set of skills to come in and clean up the mess the kids left behind.

This is why you are selling. Not buying. Because nobody wants to clean up your delivery focused mess.
I feel the HTTPS hysteria is going too far. For some strange reason people started to consider it a security panacea, without often understanding its limitations. Accusations against APT are a perfect example (it's built-in security mechanisms are superior to what HTTPS has to offer).
The notion that frugality implies poverty is classist, not to mention inaccurate.
> Basically, you pay at least 20% tax virtually on everything.

This is misleading. Firstly, in most countries with VAT, goods considered basic necessities, like food, tends to be zero rated or have lower VAT rates. Secondly, VAT is only paid on goods and often services you buy, not on e.g. mortgage payments or other debt, or rent (most places).

As an example, though at an income well above average, last time I checked VAT raised my effective tax rate by ~4 percentage points, despite the 20% UK headline VAT rate.

Very low earners also tends to pay relatively little VAT, as a much larger proportion of their income tends to go to rent or things that are exempt. As a result most poor people pay those 20% (or whatever local rate) at only a small proportion of their overall income.

VAT is still a problematic tax, as it has a disproportionately negative effect for poor people once they do earn a bit extra and want to spend it on something not considered a basic necessity (and the categories that are exempt do tend to be quite narrow). It can certainly drive their effective tax rate up well above the headline income tax rate for their income level even with very small proportions of income spent on full rated things. It also causes a "bulge" effect, where low to middle earners sees the largest effect (as high earners tends to invest and save a large proportion of their income; and in the UK and many other places are also more likely to afford to take advantage of a lot of other tax breaks)
Queen of shitty robots (A Blue Monday antidote)
Please enable additional repos (EPEL, IUS) providing sane Python versions.
Python 2.6 isn't even supported by pip anymore.
RHEL appeals to "enterprise" people for claiming to be able to run the same software for ten years without adaptations.
It's a seductive trap imho.
My local Debian mirrors support HTTPS, and I assume other mirror sites worth their salt do too. Easy enough for Debian to redirect to your local mirror.
You should try Slate (https://github.com/jigish/slate), it's great for window management once it's set up. I have hotkeys for positioning windows top-, bottom-, left-, and right halves, move windows to the right or left monitor and for displaying a grid that let you define the size and position of the current window by marking an area in the grid. It needs the Accessibility API, though, which may be an issue if your employer doesn't allow sudo access on their computers. Here's my dotfile: https://github.com/Jonasmst/dotfiles/blob/master/.slate
These reasons make no sense.

- SSL certs are hilariously simple with Let's encrypt.

- Pretending privacy is a non-issue by saying SSL has the same is stupid, and is it even true with pipelining and HTTP/2 ? Also this excuse conflates the transport layer security with the upper protocols!

- "False sense of security". FFS! This excuse could be used for basically ALL SSL protected services, like Ycombinator or Facebook!

I thought Debian developers' brains would be bigger than this.
Yes, TLS offloading is there

https://github.com/Balasys/zorp/blob/master/lib/proxyssl.cc
https://github.com/Balasys/zorp/blob/master/lib/pyx509.cc

It's able to inspect and relay the connection as well as passing it to another proxy

https://github.com/Balasys/zorp/blob/master/lib/proxystack.c...
Well, maybe; how do HTTP/2 servers allocate bandwidth? If they do it per-stream, you can still identify the size of each package by watching the total connection bandwidth decrease when each package ends.

If they allocate it for the whole connection, then all they get is a total, which still gives the attacker some information (there's a limited combination of packages that sum up to that number).
I work on a weekly base on Linux, Windows and MacOS; mostly Linux. HiDPI does make a huge difference for me, and I'd say even more so on Linux, where without HiDPI I suffer Firefox font rendering a lot (Chromium is a bit better).

Sure some smoothing algorithm might work better for you and ease the problem; same with bitmap fonts. But try printing some text at 96dpi and at 300dpi and compare it side by side. 96dpi is not enough for comfort, and for years we've been pretending it is since there was no viable alternative. There is now. Hurray!
It's an interesting point seldom discussed: governments use money in boring safe ways, eccentric rich people "waste" money in unique and unpredictable ways. Both seem essential to the equation of production, just maybe not in the current proportions.
The website mentions this towards the end (Replay attacks) : To mitigate this problem, APT archives includes a timestamp after which all the files are considered stale

The time stamp is described here[1], but it is not clear how the expiration date is decided.

1: https://wiki.debian.org/DebianRepository/Format#Date.2C_Vali...
The arguments are correct. APT does not need HTTPS to be secure. That said, if APT was designed today I'm sure it would use HTTPS. It's now the default things to do, and Let's Encrypt makes it free and easy.

However Debian, where APT is from, relies on the goodwill of various universities and companies to host their packages for free. I can see that they don't want to make demands on a service they get for free, when HTTPS isn't even necessary for the use case.

Also since APT and Debian was created in the pre-universal HTTPS days, it does things like map something.debian.org to various mirrors owned by different parties. That makes certificate handling complicated.
You might be interested in somnoplasty, it seems less invasive than traditional surgery, although I have yet to complete my research on it. It's usually done for soft palate reduction in order to remedy some forms of sleep apnea, but it can also be used for turbinate reduction. Somnoplasty uses radiofrequency to reshape soft tissues.

I've had an ENT surgeon explain some of the normal/traditional surgical methods of doing turbinate reduction, and it seems to be fairly complex; some methods preserve or reconstruct the underlying bone structure which may be needed for the turbinates to function correctly, while others just do a straight reduction and don't consider the final composition of what remains of the turbinates. I'm trying to find out how somnoplasty relates to this.
The man knows how to fish. Unfortunately for him, the fisheries are collapsing, because someone who wants to become wealthy is sending trawlers from halfway around the world, taking all the fish and leaving destruction in their wake.

The man also knows how to farm. What looks like forest, or jungle, to you, is actually the man's farm--has been, for generations. But that was last year: men came with guns, fenced off the forest, logged it, and now it's all a palm oil plantation, stretching toward the horizon in all directions. The man and his family were offered "jobs", earning a pittance, barely enough for survival, buying rice imported from halfway across the world. Because some other man wanted to be wealthy.

The man can't manage his resources, because there is no legal framework for him to do it. The people who claimed to create a free-market, "teaching the man how to fish", etc, actually created the present situation, so may be looked at today with some suspicion.
In germany the taxi driver cannot actually ask you to leave.

They have a transport duty (Beförderungspflicht, PBefG) by law unless 1) you can't pay or they would have to drive longer than allowed by law, 2) they can't transport you to the destination in a taxi or 3) some higher cause prevents transport (snow storm, traffic jam, etc.).

To my knowledge, airlines do fall under that and a german airline cannot legally kick you out of a flight unless any of the conditions above are met.
infosec twitter is crap like any other twitter subculture, full of drama queens and clickbait to increase their fav/rt count. What's even sadder is that they make no money off it.
>This can lead to a replay attack where an attacker substitutes an archive with an earlier—unmodified—version of the archive. This would prevent APT from noticing new security updates which they could then exploit.

>To mitigate this problem, APT archives includes a timestamp after which all the files are considered stale[4].

Let's take a look at the repo spec then:

https://wiki.debian.org/DebianRepository/Format#Date.2C_Vali...

> The Valid-Until field may specify at which time the Release file should be considered expired by the client. Client behaviour on expired Release files is unspecified.

“Should”, “may”, and unspecified behaviour.
Saudi Arabia has always had a history of sectarianism and uprisings like the 1970 Qatif Uprising[1]. While they can deal with their internal problems, I am hoping that without oil funding, Wahhabism will calm down elsewhere.

[1] https://en.wikipedia.org/wiki/1979_Qatif_Uprising
I enjoy opening a photo in photoshop and just putzing around with filters and tools to see what they do. I expect it to throw away my changes unless I explicitly state I want to keep them.
Defaults matter, as that is what a large majority runs with.
No you would not be able to use HTTP/2. HTTP/2 is not implemented in apt, and probably won't be for a very long time, as it directly clashes with apt internals.

That said, pipelining over https is surely possible to, and reduces the risk.

That said, if you're installing security updates automatically, as you should, anyone will know anyway, as there are only about 3-5 possible combinations of updates you'll be downloading on a particular day in one session.
It's quite simple: Coca Cola, Crisps, Mars Bars, Bacon, White Bread ... all these things you assign a red. Broccoli, Carrots, Nuts and Beans get a green. Everything in between gets orange. Pretty much all meats and dairy will end up in the orange segment which will upset this very powerful sector. The pork guys want you eating pork at every meal if possible.
Wow, thanks tons. Your story is an inspiration.
Show HN: Meet STUDIO 2.0 – Design. Collaborate. Publish Without Coding
Why would it? As the site lays out, HTTPS is strictly inferior to the scheme used by APT.

You can not get more security by adding a less secure mechanism to a better one. It's not additive.
Is it really not serious? Is there a possible chance that countries that we get our debt resolved from can just start buying US land and US businesses? Isn't there a reason more and more US companies are re-incorporating in the bahamas or other locations? The net effect of the last 20 years of economic policy will likely be felt... suddenly - when a decision is made by the new owner.
> No, it is not “extremely easy” to injure yourself if you show a modicum of good sense and avoid max lifting.

I think the OP was making the point specifically that doing it wrong would make it extremely easy to injure yourself. Which it would be, and doing it wrong would also be extremely easy for a beginner to do.
TypeScript Express Tutorial #8. Types of Relationships with Postgres and TypeORM