skysight-inc/HackerNews huggingface dataset:
After 15 years of python, going from client to client, my experience is the opposite: i've yet to see a code base that would not benefit from python 3. Usually people saying that just don't know much about python 3.

However, I understand that those benefits might not be motivation enough to migrate in some contexts.

In those cases, I advise to freeze the project in time, isolating it by vendoring dependancies and either compile it with nuitka or distribute it in docker.
App asks for your fingerprint to open the app, then charges you 100$ when you do
The planet in that other galaxy doesn't matter because increases in their consumption does not affect anyone on earth.

How the rich on earth behaves does affect poor people: It affects what resources are available to others, and it affects prices, job opportunities, investment in the immediate surroundings of poor people, and can do so both positively and negatively.
There are plenty of good stories—the product works as intended and never happens to face a determined adversary. It’s just not a remarkable story, and the potential upsides are pretty minimal compared to the downsides in the horror stories you’ve heard.
Honestly the scooters seem like a reasonable idea, but they are being left everywhere in Brisbane, and also they're way too fast. Could bump them down to 25 or 20km/h pretty easily I would have thought.
It’s hard to work through difficulty if your emotions aren’t engaged.-This is actually true.
Blue Monday: Is the 'most depressing day of the year' just a PR stunt?
No. VAT is across the supply chain, provided they are all VAT registered. So as a business you only pay The net VAT between sales and purchases.
The reverse argument also works: using HTTPS may lead you to link and expose, say, OpenSSL where you otherwise would not have needed to. OpenSSL has had dozens of vulnerabilities in the past: https://www.openssl.org/news/vulnerabilities.html

Some of these vulnerabilities have the potential for arbitrary code execution, leaving you worse off than the simpler solution based on the verification of cryptographic signatures that has fewer vulnerabilities by virtue of doing less.

The discussion at https://whydoesaptnotusehttps.com is about the protocol. You can add implementation bug risks to the discussion if you want, but then include the risks from both the approaches being discussed.
I think the thing here is that cities are a better deal if you can command a top salary, and worse in most other situations. For example, talking about FANG, a senior position at Google (the lowest terminal level) comes with an average salary of $360k. Whereas someone who can get a senior position at Google is looking at your $135k (I get the feeling you're quite senior) or maybe a bit more in lower CoL areas. Even adding in a significant other that doesn't see a bump moving to the Bay, you're likely looking at 2x in the high CoL case.

On the other hand, if you can't get one of those top positions in the Bay you're probably looking at closer to $150k-$200k in a senior position, which makes a $100k or so low CoL position look awfully nice.

This gap widens as you go up the salary scale. I don't think I've ever seen even $300k in a low CoL area, whereas in the expensive areas 7 figures is possible (although quite rare).
European Commission to revoke British .eu domains after Brexit
Patient Zero of the selfie age: Why JenniCam abandoned her digital life (2015)
Someone who actually knows their stuff knows how to make it interesting and relevant. Carefully building you up.
Demystifying decorators in Python
You can do a generator returning promises.

It's actually preferred over async/await in the frontend world in libraries such as redux-saga and mobx flow. One advantage is that you can cancel the iteration early.
This is nice to know, I do use rhythmic breathing a lot when I try to meditate and you can inmediately feel the results, but I didn't know at nostril breathing, I noticed a lot through my life that I've always had difficulty breathing through either nostrils (it kinda changes), It hasn't give me as much trouble as other people in the comments, but I've grown paranoid of it lately and I can't do this technique at all pleasantly, should I have it checked?
Oh, I hadn't actually heard of doing this before, but that's something I'll look into :)
There's no a single IoT device available that I would want to install in my home, let alone a lock.

I can understand the need for IoT device in industry, such as remote monitoring of device in the field. For home use I have yet to see a device that make any sense. IoT is at this point complete marketing hype, and very little practical application.
Cause pushing the barrier of how easy it is to detect is a bad thing.
That's interesting. I see that Facebook develops more feature to support different initiatives (FB groups, charity pages) and even petition pages.
> Those arguments are invalid.

Your individual statements are correct, but they do not add up to valid argument in this case.

Kazakhstan forces their citizens to install government-issued certificate to use SSL. This allows Kazakhstan to track their citizens. Which proves, that a regime can track it's citizens even in presence of SSL encryption. In other words, using SSL/PKI does not inherently prevent tracking by powerful entities. You need to create your own government for that.

It is naive to think, that regimes like egypt/syria/US can't track people, while at the same time being able to exert overwhelming physical force over the exact same people. If you can force someone to hand over encryption keys, you can track them. Different countries do the same thing, everyone just picks their preferred ways: physically controlling Certificate Authorities in case of US, handing over encryption keys in case of Great Britain.

> Compare that to yum/rpm which use secure https and signed rpm and signed metadata

No, using more "secure" technologies does not amount to better security.
Neither. Use windows built in protection (Windows Defender Antivirus.) I switched over a few years ago.
Any self signed certificate? Then the attacker who is already capable of intercepting packets can just serve whatever and proxy your request. Your argument to the main argument falls short just the same..
The HTTPS movement is about ensuring that only Google gets your data. It's not about privacy.
About when the internet started taking off as a consumption medium I think. Desktop computers started to show up in every home and were largely there just as a gateway to the internet. Prior to that, they were mostly for office work and computing enthusiasts with the occasional non-computing-enthusiast gamer thrown in. Since the consumer market was much, much larger the focus shifted.

The strange thing to me, though, is that once smart phones and tables took over as the preferred platform for internet consumption the desktop OSs didn't start reverting to targeting the market that still wants them. Instead they doubled down on trying to turn desktops into smart phones.
Yeah, those mini and regular SD cards looked huge, and micro SD is pretty much a universal standard by now.
This is quite disgusting. How will these companies rebuild their reputation of their URL's after this? So there will not even be a redirection to the new site?
The post you replied to outlined a way to determine which packages were downloaded for the HTTPS way, so I don't get what you're trying to say here.
Wow what an amazing story of survival.
I didn't know this website, but I know some of decentralized torrent websites on https://zeronet.io/
I think the question you're asking isn't purely about security. You're asking about a lock that maximizes security while allowing you to digitally transmit a key - in which case I don't know of any with a track record for resisting attack.

Right now the predominant attitude is basically "key control is easier than trying to secure IoT." Easier to use a physical key and manually vet who gets the key than to audit an IoT setup. I tend to agree just because the state of security practices in IoT is so egregiously bad.
Interesting article, thanks for posting.
Hey, I didn't write the article but work with John... we deploy through a CI/CD pipeline using Concourse CI. Which builds the docker containers and eventually deploys them onto a Rancher cluster
That leads to a question I had recently, I know that some insurance will only reimburse in case of thefts if there's sign of a break-in. If someone lock-picks the lock, is there a trace of a break-in? Would such thefts be covered?
If human beings have a libertarian sort of free-will (the ability to do otherwise), then their actions can't be caused by God.

So if we imagine a free-will choice, say whether or not to mow the lawn today, it's possible for me to either mow the lawn or not, thus creating two possible worlds (the one where I do or the one where I don't).

God can't make me choose one way or the other, or rather, he can make me choose, but doing so makes the choice a non-libertarian-free one.

According to Molinism, God knows both the future (what I will actually do), but also all counterfactuals (what I would do in any situation).

He chose to create world we actually inhabit (the actual world), and there are many other worlds he could've created instead (actualizable worlds), but there are possible worlds that he could not have created, because many of the things that happen in those worlds are determined by the choices of free creatures.

So a subset of possible worlds are actualizable.

Plantinga is arguing that perhaps there are possible worlds with no evil, but none of them are actualizable.

Speculatively: God decides the trade-off is worth it and creates the universe anyway. Perhaps a universe in which God himself redeems free creatures from sin is better than one without free creatures at all.

Plantinga readily admits the speculation is just that. The important point is that the example illustrates a possible solution to the apparent paradox, so existence of evil and God's attributes aren't inconsistent. The actual solution may be something entirely different or even beyond our ability to comprehend.

As to the point about omnipotence: It's a good one, but I think in the end it boils down to the classic "can God create a rock so heavy he can't lift it" objection, and theologians will readily constrain omnipotence so as not to include the logically impossible, or that which is incongruent with his own nature. So by extension, that some worlds aren't actualizable doesn't impinge on omnipotence because it flows (logically) out of the concept of libertarian freedom.

Furthermore Molinism suggests a framework for thinking about how God can "ordain whatever comes to pass" if creatures have libertarian freedom.

It's also worth mentioning that the concept of libertarian freedom is itself widely debated. I would suspect that the majority of theologians are compatibilists when it comes to this topic, and don't believe that creatures have this sort of free will at all. (see the westminster confession of faith 3.2 for example) Some even argue that the concept itself may be philosophically incoherent.

Under a compatibilist view actualizable worlds and possible worlds are the same.
Can't you have a "system fonts" section that uses the fonts already installed, so people can compare if they are running the respective OS?
Is there any distribution besides Arch that isn't like this? Alpine is also pretty bad about this, and I haven't tried other distros in years.
Madness!

I guess with images of this sort, it might judge that the person could be dangerous, but just on the looks of your face alone, that is just stereotyping done as a [very suspect] business.

https://www.google.com/search?q=silence+of+the+lambs+hanniba...
Agreed, went a bit overboard there. Removed the part about self-signed certificates.
It depends on the threat model, here TM1 and TM2:

TM1: attacker does not posses zerodays to installed software

TM2: attacker possesses speccific (perhaps OS, perhaps library, perhaps userland) zerodays, usage of which (including unsuccesful attempts) should be minimized to avoid detection

in TM1: it's ok to use HTTP in the clear, as long as signatures are verified

in TM2: everything should be fetched over encrypted HTTPS, since HTTP would leak information about available attack surface

EDIT: not only would this increase security by not revealing what a user installs (perhaps download some noise as well such that it becomes harder to detect what a user is installing?), it could also improve security by turning the APT servers into honeypots, so that monitoring these can reveal zerodays...
Ideally the fat is just a transfer medium for the heat. If you cook correctly, the fat doesn't reach the temperature of the pan, so it doesn't burn even when you use a hot pan, and even if you use butter.

The key is adding fat just moments before adding the food, and adding just the right amount of fat (which is more than people realize).

I cook eggs on high temperature in butter and steaks on high temperature in olive oil, and I never burn my fat. You can only do this for one portion though, if I use the same pan to prepare multiple batches, I switch to lard instead of butter/olive oil. I still like to finish my steaks in butter though, but I just do that as an extra step at the end.

As an unrelated note, I very much prefer lard or duck fat, or if they are unavailable then coconut oil or some other kind of saturated (?) fat, to vegetable oil. Not because of taste (lard is good though), but because the surface tension is different for these solid (at room temperature) fats and these fats coat the pan much better than any kind of vegetable oil. They coat the pan instead of pooling up.
The industry as a whole? I'm not sure I could make that claim. And I'm somewhat well informed having close family that work in agriculture. But take one major player as an example, Monsanto (now owned by Bayer):

- Major producer of DDT. Evidence that DDT was causing widespread environmental damage was clear by the 1960s but it took the US government until the 1970s to finally ban it. Then the industry sued the US government to try to overturn the ban. Who tries to continue selling a product that has caused widespread environmental damage?

- Producer of Agent Orange. Another "perfectly safe" chemical. Red Cross of Vietnam estimates that up to 1 million people are disabled or have health problems as a result of Agent Orange contamination. I'm not sure how many US veterans were affected.

- Major producer of PCBs. Which are later banned due to being highly environmentally toxic, cause cancer in animals and probably humans too.

- Producer of bovine growth hormone, another "perfectly safe chemical". rBST has not been allowed since at least 2000 on the market in Canada, or since 1990 the European Union. Other countries have banned it. I don't think the studies on how it might affect humans are conclusive but there are concerns. For sure the studies on how it can negatively affect cows are more solid.

- They have been convicted of bribery in order to get government approval.

At what point do you stop trusting? And again, I don't mean the science and GMOs themselves. I mean the company who is making claims that GMOs are perfectly safe for both humans and the environment. Scientists are not so bold. Read the studies to see disclaimers and healthy doubt in those studies. Usually specifically spelled out. Disclaimers and doubts that are never mentioned by Monsanto when they publicly speak about their products. If they started being far more careful with their "perfectly safe" rhetoric, I might change my mind about them. So far, that hasn't happened.

I can't say if on the whole Monsanto has been somewhat responsible and well-behaved as a company. But I can say that based on just the list above, I would be very hesitant to trust any claims they make about the safety of any agricultural product, especially those involving chemicals.

I'm sure that someone can / will come in with a defense of Monsanto or arguments about each point above. The devil surely is in the details. But who has time to sort through hundreds of studies and court cases? Fair or not, we will continue using heuristics to decide who we trust. Maybe Facebook does in fact treat my data ethically and each time they get caught with privacy concerns or taken to court it was "just an honest mistake". Are you willing to spend tens or hundreds of hours of your free time trying to figure that out? Or will you use a heuristic and just be cautious with trusting what Facebook will do with your data?
Building Fastcgi FAAS(function as a Service) on Nginx
I understand maybe 30% of 3blue1brown’s videos, mostly due to his excellent visualizations, but he really gets me excited for math in a way I’ve not experienced before.
How does he make such awesome visualizations? Does anyone know what tools are being used?
The point being made is that the fact that X just talked Y bytes to this Debian mirror is enough to know exactly which packages were downloaded.

The argument that https obfuscates which packages you download is not a good one, and may cause users to unnecessarily worry about the implications (and conversely, that they end up "more safe" if that was not the case). If that type of privacy is desirable you should probably use something like Tor.
The solution he posted is about using phase spaces, not really about this problem in particular.
> It's quite comparable to these systems, even if less pure and lacking some of the features.

So it's not really comparable then.
Zebra mussels might be up to the task as well, apparently they are an invasive species, they will live anywhere and will eat anything

(But they are a freshwater species)
Ask HN: How many developers should you have before you switch to micro services?
I've been under the assumption (and feel free to correct me) that microservices are primarily for team scaling. Yet whenever I look around the internet I fail to find good data showing me the size of a team when they switched to microservices vs how successful/how much they liked it or w/e.

So, feel free to provide any commentary but, if you've worked on a team that switched to microservices I would appreciate it greatly if you could tell me:
- how many people worked on the back-end simultaneously when you made the switch
- your feelings about it at the time
- amount of time passed since then
- how many people work on the back-end simultaneously now
- how you feel about it now

I want to see if there are any trends. I'm expecting that anyone who tried it with a team of 5 had a hard time and anyone that tried with 50 had a good time but I'm curious to see if there's a clear cut off which dictates that "if you try micro-services while your team only has x team members you can't hope to have a positive experience with it" and what x approximates to.

Greatly appreciate any input, corrections, insights, or comments!
Show HN: Server Hunter – Giving away $1,000 worth of VPSs
Switch those situps with leg raises lying down without touching the floor. Better for your back.
It is a great start. It also shouldn’t be a partisan issue. Vote for people who value their constituents over lobbyists.
It's not about money. In fact, money is the completely wrong way to think about it. The vast majority of the wealth of the wealthy is in the form of ownership of businesses that efficiently produce goods and services for others (not for themsevles - this is important). If you take these businesses away from them and give them to the poor (who are likely not going to be that great at managing said businesses), the effect would be to make the poor poorer, as well as humanity as a whole.
Wow, this entire thread is so weird to read! I find these icons really bad compared to what exists on Windows 10 for example, and yet everyone seems to agree that 98's icons are better! I mean, seeing the icons in the illustration, I have no idea what 3 out of the 6 do. In the image at the bottom of the article it's even worse

I'm pretty sure it's just nostalgia, I have no idea why everyone here seems to think they're objectively better
The policy was announced by Labour.
http://news.bbc.co.uk/2/hi/uk_news/8186848.stm

But yes, good point.
What a coincidence. Just earlier this week I was installing yarn in a docker container using their official instructions (https://yarnpkg.com/lang/en/docs/install/#debian-stable) and found out I had to install apt-transport-https for it to work.

Since the image was already apt-get install'ing a bunch of other packages at that point and everything seemed to work, the obvious question that popped in my head was: does this mean none of the other packages I've been downloading used https? That's what led me to this website.
So that’s at least 10 people making 100K, and dumping their entire paycheck into the movie, while holding down day jobs.

Or 20 people making 100K, dumping HALF their paycheck into the movie, while holding down day jobs.

Totally inaccessible to regular people. No normal social circle can accomplish this.
Apple Accidentally Reveals Radical New iPhone
cue today, with mass censorship on the rise.
> The strange thing is that my Grandma never commented on the Mint interface and as far as I can tell she never noticed that I completely changed the operating system

Same, except for my 70 year old parents. I switched them from Windows to Ubuntu MATE. All I had to do was simply rename the Firefox icon to "Internet" and they were good to go.
I think https by default would be a wonderful addition. I understand the complexities from the project's perspective. I understand the users wants for privacy. If the project not defaulting to https is that much of a privacy issue for you, set up a local mirror then point your boxes to that. Yes, someone could potentially still snoop your local network. But if they can do that, you've got bigger issues to worry about than the fact that they can see what packages you're installing.

https://www.debian.org/mirror/ftpmirror
Great, thanks for your input.
Hiring/skillset of the existing team, existing legacy codebases that need to be worked on, simplicity... things aren't as black and white of you must use this technology over another, there are a lot of reasons involved
I work with a fantastic developer who types with his index fingers only, hunt and peck style. It boggles the mind.
Immaturity. think about a time when you changed the most. When was it? Web apps use to be sites with a bit of javascript and they've been growing up these past 18 years. That's it. It's growing pains.
Analysis paralysis.
I'm pretty sure they entered the field of politics long ago. It just wasn't publicly announced.
That reminds me of Mike the Headless Chicken. I wonder if it would be doable to run a chicken farm with brainless chickens. In the end I'm unsure that people would find it more ethical to scoop out their brains.
Timing alone would go a long way.
773M email addresses exposed in ‘mega data breach’
Ditto. I stuck to 1650 x 900 for as long as I could, but alas, It's hard to get those monitors nowadays.

I've since switched to full HD-screens, zooming everything to 150%-200%. It's readable in most cases, but considerably less pretty than bitmapped fonts on a lower-res screen.
Lots of magic for me, I've broken a (dev) k8s cluster by installing Istio via Gitlab k8s integration. The overhead appeared to be non-negligible, but I noped-out-of-there pretty quick, so I don't have the data to back that up.
Portable Node.js guide
I'm pretty sure we did propositional and predicate logic in first year - UK CS course in the 1980s. Programming proving and synthesis was second year stuff, of a four year course.
If you really do not have the time to read the whole article, it's worth reading at least the last 4 paragraphs.
Can we change the title to “landlord”? I’m only seeing on person saying this is happening to them on Twitter and the title makes it sound extremely sensationalist.
Anyone running something like this in a home scenario?

I kinda thought about it but the 50-100 bucks expenditure just for curiosity seems a bit heavy