skysight-inc/HackerNews huggingface dataset:
My mission statement:

I choose to collaboratively, peacefully, and fluidly coevolve with all life by mindfully embodying science and art, in love to identify ways to sustainably contribute to all life's needs.

Would you be willing to give me feedback on how I might evolve it further?
Ask HN: What service do you use to manage your domains?
Over the last year or so I've collected a 20-odd domain names to use for different projects. The problem is that they're spread out over 3 diffrent registrars which makes managing them a pain.

I'd like to consolidate this to a single service and I'm more than happy to pay for it. What is the HN consensus on which service is the best right now?
At my first waiting job, we didn't report our full tips because if our income including tips surpassed $8, our salary would be reduced. With the "benefit" that if we made less than minimum wage, we would be compensated. However base pay was $2.50/hour + tips, so do the math.

Yet somehow the system only ever seems to work in one direction. I once had to pay $20 after working an 8-hour shift before leaving home under threat of termination (right-to-work state) because of the two tables I had that night, one was a giant party that didn't tip me at all and the other ran out on his $20 meal while I was taking care of other duties in the back. Somehow my responsibility, of course.
The second link was Vinay Prasad. He's not a PhD student, he's one of the most respected cancer researchers alive.
I was under the impression Chrome was dropping HPKP support (it was deprecated in 2017), so I imagine this would be across all products - desktop and mobile.
activeneighbor.com
The complex problem of text re-flow is probably not that complex. It has been solved rather satisfactory in all word processors and desktop publishing systems.
I'm not totally into this right now but I think there were no such registrations in the beginning.

But as the Nazis had more and more influence laws ("Nürnberger Gesetze") were passed which required Jewish people to mark their shops and register themselves as Jewish etc. pp.

Also denunciations and more from neighbors happened, after Jews were declared "enemies" of the state, so everything came together.

edit: But potential misuse of any kind of registers by whomever is obviously the strongest point against those registers after all. Right-wing parties are always eager to have such things for obvious reasons.
I got Neutral, which is what I expected. I grew up right in the area of the US that they love to set up call centers in because people talk with a neutral accent.
Gday Platforms that censor speech List :-

* Facebook

* Twitter

* Google

* Youtube

* TUMBLR

* Pateron

* Stripe

* Paypal

* Twitch

* Spotify

* Apple

* pin interest

* LinkedIn

* Mailchimp

* Wordpress

* mastodon

* azure

* Mastercard

* Godaddy

* MEDIUM

* Shopify

* Cloudflare

* pusher

* WIKI

* Reddit

* teespring

* Slack

* coinbase

* GOFUNDME

* VISA

* Square

* Bitpay

* ROKU
The Julia programming language: a high-level perspective
South Korean Exchange Market Troubled with Frauds and Scandals
> 100% passive.

Can you explain what you mean by this? I wouldn’t like
it because I would consider it to be watching me, and I don’t think that’s passive.
You can on a Huawei:

- Block unknown/hidden numbers

- Block all strangers (non-contact numbers)

- Block all incoming calls
It's not quite that cut and dry in the UK[0], and the article mentions that parental consent was required.

But if they were operating in the UK, I'm somewhat doubtful their disclosures as reported in the article could be classed as informed consent under GDPR given the "specific protection" children are provided [1].

[0] http://www.steinfeldlaw.co.uk/uploads/Are%20you%20contractin...

[1] https://ico.org.uk/for-organisations/guide-to-data-protectio...
And no HP exec was arrested.
Why would a beautiful girl give me her number and not whitelist mine? My teenage child could very well block my number. This argument doesn't make any sense.
I have started trusting reddit a lot less after all their banning and quaranting of subreddits with little notice beforehand along with their non moderation of rule violations, blatant vote manipulation, vote botting, corporate posting, etc.

Irc is awesome though, actually feels like real communication with other people.
frankly, because they were promised it. if we create scenarios where employers can skip out on paying due compensation to employees who have already performed the work then our corporate system would be even more rigged then it is.

In the case of corporate governance, we hold board members accountable. not employees who do as they are paid.
US using Huawei to pressure China over trade
Learn how to code a distributed throttling system using Lua and Nginx
I just found my new fave FF extension. Thank you for sharing this!
JVM-RS – A Demo Memory-Safe JVM on Rust
Maybe the author has some valid points, but he/she fails to illustrate them properly. Beyond the not-so-reasonable scenario, the analysis lacks precision.

"Wi-Fi credentials stored in plaintext into the firmware"

It seems the author fails to understand (or convey) what is a "firmware". The user must set its credentials, right? So, how is it possible that they're "in the firmware"?

1) Wi-fi credentials stored on a device must be readable by the device somehow when it boots and it wants to connect. There're other, less-used and more complex authentication systems (e.g. X509 client cert authentication) that don't rely on that, but they're harder to setup and support, and you'd still need to revoke a cert after a device is thrown away or compromised.

Sure, some systems provide an "encrypted partition", but usually such partition (since the device must start without a password) is encoded with some variation over the serial number or other unique property of the device... and it's usually not so hard to access. Some systems provide a secure enclave (e.g. TrustZone) where passwords can be stored, but someway it is usually possible to get it out when you have PHYSICAL ACCESS to a device. Not something that I would have expected done right on a MCU.

2) No security settings; ok, this could be improved. But most of them are physical-access only settings.

3) Root certificate and RSA private key extracted

Root certificate and private key of what? Given the fact that the author has a vague notion of "firmware", I wouldn't trust his/her opinion. First, the fact that the certificate is in the firmware is not a problem; just the private key could be a problem.

But is that certificate shared and reused between all devices? Or is it flashed per-device and/or autogenerated and trusted on first use? The author says nothing about that. If it's a single certificate that allows, with such key, ALL devices to authenticate on LIFX server, well, that's a vulnerability! Otherwise, it's probably a good practice.
Audio Induction Loop Receiver (2014)
It's the same with used hard drives: It's your fault if you throw away unshredded/unwiped disks.
Any good libraries to build a node based visually programming editor.

Something like node-red, rete,..
Lambda# – Accelerate Serverless Development with CloudFormation
They're barely desktop apps - they're essentially bloated javascript heavy web-frame like apps that perform poorly, have many bugs (IMO 7~ years of use) and require login to Office365 / Azure online.
> If you advocate for type safety within software, you should also advocate for a better system than URIs.

Well, maybe. Before I advocate for a better system than URIs, I'd like to be convinced that this is a problem that can be solved in a satisfactory way and that the solution doesn't involve ceding control over Internet names to some unaccountable party.
Some people believe mentally ill homeless drug addicts are the tragic, powerless victims of a society which has made housing and medical care unaffordable and deprived them of political representation; that putting a homeless person in jail guaranteeing them food and a bed for a week is unlikely to be much of a deterrent; and that the things that would be an effective deterrent are inhumane.

Personally I don't agree, but I can see why a person would think that way.
But just a VPN itself shouldn't be a problem. No rootca no sniffing.
high speed in an ice patch -> disaster

burning more coal than necessary -> high speed

coal fire -> burning more coal
Best web scraping tools in 2019
Doesn’t this argument give us child labour and sweat shops? Fortunately most places have laws that set a minimum standard to protect society against those who have lower ethical standards.
Fossil fuels also create a no-go area - the Earth. Solar and wind are simple, safe, and democratizing technologies, but they aren't without environmental impact either (you need a lot of land area), and they aren't yet ready to meet the world's energy needs. Nuclear is here now (was here 50 years ago in fact) and, absent an avoidable Chernobyl-type disaster, is the cleanest available energy source.

Worth noting that 17 Chernobyl-style RBMK reactors were built and have largely operated without incident. Lithuania was entirely powered by two such reactors until they were shut down in the 2000s, to be replaced by fossil fuels, on the grounds that they lack containment buildings. The EU ponied up nearly a billion Euros for the decommissioning, which I can't help but notice is almost as much as the new Chernobyl sarcophagus. Might it have been cheaper and better to just... build a containment building? Perhaps. But there would never have been the political will for that.

The fear of nuclear is doing more damage than nuclear ever did.
Seems to me like the law needs to be clearer about how to inform users in cases like these. Surely, it's deceptive to tell someone they're getting paid for installing a "market reasearch" app which actually records all online activity. Charging companies, who knowingly deceive users like this, with fraud sounds reasonable to me.
Explain that to Average Joe.
If you believe Facebook to have violated the law in your state, you can write your Attorney General and ask them to enforce the law or explain how Facebook is not in violation of the law.
Indeed, but will a non-tecnical user know that. It's been of increasing frequency non-technical users ask for disks to be wiped though, they are aware it contains sensitive information... but a light bulb? Maybe no lightbulb moment for them.
Aside from cachability, there is still an extra indirection. If you have a std vector on the stack, to access the first element you need to dereference the stack poiner, at an offset, to fetch the heap pointer and then dereference it. The two loads are in a dependency chain. This is true for the first load at least. For subsequent loads the heap pointer might already be in a register.

For a small vector you still need to dereference the stack pointer to load the heap pointer/discriminant, the perform a conditional jump on it, then, if the vector is stack allocated perform a further load at an offset from the stack pointer. Thanks to jump prediction, the second load does not depend on the first, so the dependency chain is shorter which might make a difference in some scenarios.
People aren't dumb just because they aren't experts on URLs.
It sounds to me like phone spam is so bad in the US, a lot of people want to throw out the baby with the bathwater. I wonder what the differences are in law or technology that makes the problem so bad there vs other parts of the world? Maybe it can be solved in another way.
Automate AWS Tasks Thanks to Airflow Hooks!
In case someone else goes after "[William] Holden insisted that Columbia pay him no more than $50,000 a year", there's a concise biography here: https://www.britannica.com/biography/William-Holden
Are you sure you're not confusing Go with some other language?

> daunting!

Go is often praised for being simple.

> modern!

...and criticized for being too simple, ignoring modern advances in programming language research.

> no compiler OMG!

The compiler and its careful tradeoff between fast compilation and fast programs is a key characteristic of Go.

> text transformation on the code itself!

Go doesn't have macros. Instead people fall back on code generation, just like Java.
I am skeptical that they can kill the URL. It's like those smart inbox startups that decided to kill email a few years ago but they ended up shutting down and email has become a stronger and more important tool in communication now. Some things don't need to be replaced or killed. If it works, it works. URL is the foundation of the web and killing it would be more difficult than killing the email. Just my 2 cents.
This is why I stopped using Chrome years ago. My current Firefox is configured to display the protocol along withe the FQDN, without any munging thankyouverymuch.

Google is self-isolating into a walled garden. Good riddance.
They could have gone further south.
The subscript operator can modify the map if the key if the is not present, so it is not constitute and thus formally not thread safe even if you are sure the key is always present. At and find are always constitute so you can use those instead; no need to cache iterators.
I wish people would stop making this predictable and tedious comment that adds nothing to the conversation.
Joewalnes/websocketd: Inetd for WebSockets [Golang]
> The need of mentoring must be completely voluntary.

Good point, you can't force it on someone. What you can do however is explain to new programmers how valuable it is, this is not innately understood. The years where I had someone mentor me were the years where I made immense progress. Even though neither of us even considered it mentoring at the moment.
Latvian startups to look out for in 2019
Wonder why they use grub over the simpler syslinux option?
A more organic reasoning about it here: http://lists.alpinelinux.org/alpine-devel/6073.html
It sounds weird that FIPS is relevant to Alpine. They're not going through the certification process, so does it matter?
Even on a ship like the Titanic, it's not like the only way to slow down is to stop burning coal. They could have vented steam instead of using it for propulsion - that is always an option.
If someone gets into your house to steal your lighbulb and cut it open, you probably have bigger problems than your wifi password being stolen.

No house-breaking is necessary. I could just go and buy a super fancy smart bulb and give it to you. You don't need your old insecure smart bulb any more so you put it in the bin. I take it from your bin. Now I have access to your network.

Your tech-savvy neighbour is the threat 99.99% of people should worry about, not a nation-state funded intelligence agency.
There is no next pointer in a deque block; the pointers to each block are in a separate vector.
That's pretty cool. Thanks for sharing!
Client-Side Context: A defense against misinformation in the encrypted WhatsApp
This somewhat depends on the technology you're using as well though. Writing Java in vim is a pain in the ass in comparison to something like IntelliJ that has auto-importing, go to definition, etc
Why do they get offended?
> The only drawback is you have to crack someone's skull to do it...

Couldn't the recent work in implanting mesh electronics via syringe "solve" this problem?
In a post-award interview, Richard Harris described what he wanted to do as Australian of the Year...

"I really want to try and inspire kids to get out and about, get them off their screens... ...and get outside and build up a bit of confidence and resilience that comes with adventuring and taking a few risks."

As long as said risks don't involve getting stuck in an underwater cave and triggering an international search and rescue mission!
Hard drives are designed to store data, it is very explicit that they have data on them.

Lightbulbs? Not really. Especially for people who don't work in this field.
You might want to read the article, its well written and addresses that point.
for android, https://f-droid.org/en/packages/org.jak_linux.dns66/
"Use LibGen if you can't buy these books." This is literally the first guy that recommends something like that in such a literal way. +1.
As a Swedish person, I'm apparently northeastern.

Also, for the first 2/3 or so of the quiz, it's pretty much unfathomable to me how anyone could pronounce any of them the same.
"Make a PR" actually means "This seems not to be relevant enough for the current maintainers to do it, and if it feels important to you, you should write it yourself and post a patch", which is a good answer.
> You`re not Northern, Southern, or Western, you`re just plain -American-. Your national identity is more important than your local identity, because you don`t really have a local identity.

Well, that's comforting. Apparently I'm from anywhere between Pennsylvania and Illinois, which is off the mark -- from the other side of the river in Boston, a Cantabridgiot born and raised. God bless Dachestah, Summaville, and Reveah (although with gentrification these towns are likely losing the local flavor, perhaps the Boston accent is dying?)
There are situations where you want to be able to say you're using a FIPS certified crypto library, but that you're not going to get the whole thing certified.

I went through that with an IBM product I was working on years ago. It involved taking out any crypto implementations already in the code (I believe we had a reference DES implementation doing something with passwords) and switching to FIPS certified TLS libs. At the end we got to say we were FIPS compliant (NOT certified), which was important for some government contract or other.
From the web site: “ container requires no more than 8 MB and a minimal installation to disk requires around 130 MB of storage. Not only do you get a fully-fledged Linux environment but a large selection of packages from the repository.”

I remember in 1997 when I could boot Linux off a 1.44MB floppy and get a fully a fully functioning Linux environment even with network support in a blitz. If 130MB is considered “lean”, what happened to our Unix principles of minimalism and clean design?
while we're at it we could make the query parameters into a textfield which could expand into a table, for easier editing of values
As a European who regularly experiences atrocious QoS in restaurants, I'd be willing to bet it has something to do with the fact they get paid a decent wage whether or not they even notice the customer.

As a customer I prefer "fake" service over being ignored, but as an employee I would prefer the European system.
If the police had one's detailed driving history including speed limits and how fast one was driving at any given moment then how many speeding tickets would one get?

Even someone who obeys the speed limit would get dozens of tickets per year.
Anonymous voting is only necessary because people don't trust each other.

If you trust each other there is no need for anonymity.
Since when is there no competition and diversity in open source? Isn't too much choice usually a major complain with linux, programming languages, frameworks, etc?
If you want your model to train 20x faster, continuously move your mouse up and down the far left menu, or open the outline and madly expand/collapse the options for a layer :D

edit: turbo mode: keep v8 at full speed:

function sleep(ms) {return new Promise(resolve => setTimeout(resolve, ms));}; while (true) {console.log(document.getElementsByClassName("content").length); await sleep(20)};
That was scarily accurate. Tells me I've picked up stuff from my parents as well as one of the locations where I've lived.
Ask HN: Have you succeeded in creating a source of passive income?
Share your story on how you have succeeded in building a source of passive income. I will love to know some solutions and how to approached to do that?

By Passive income i mean, a source of income other than your regular job where the effort to money ratio is good.
I wouldn't necessarily say that opposing opinions aren't wrong. Sometimes they are, and a lot of the time it's because of some form of institutional inertia. In general though, you'll have great ideas, people will politely tell you to fuck off, and you have to be able to get over it quickly or you'll make yourself hate your job.
I'm not aware of anything with the breadth and discovery features of FB and without the disadvantages. Your phone's contacts list is probably the best compromise between privacy and ability to get in touch with old friends (I have 20+ years old contacts on it).

If you just want to be found, publish a personal web page, perhaps with an easy to find, SEO-friendly domain like firstnamelastname.info or similar. List your e-mail address there and people should be able to get in touch.
I don't know how to properly address this without wiping. Maybe not use wifi for the bulbs in the first place or not use IoT at all? Consumers will not care about that.

Either you trust the lightbulb provider to protect your creds better or don't use it. In my opinion the lifx is reasonably protected and far from being the worst offender here: the attack doesnt work over the air, and depends on physical access to a pre-setup bulb and involves physical labour to access the credentials (needs cutting out the board, removing protecting glue from the board, dumping firmware). This is not really mass-exploitable. Services like wigle will allow to see where the wifi is located though, but the bar for attacking is pretty high.

Have a look here for really awfull IoT sec:

https://mjg59.dreamwidth.org/40397.html
As a Brit, I'm also apparently Northeastern, and agreed on your second point.
It's better explained on this page than how I can explain it: https://www.tripsavvy.com/tipping-in-japan-1458316
No doubt this depends on where you are in your life.

As a single guy with no children, I'm unlikely to get any emergency calls. But my friend who has two children in school and one in nursery? You bet they're going to call her if one of them gets sick or has an accident.
Honestly the SmallVector case sounds more complicated. As to the dependency chain in the standard vector version, the heap pointer should be easily put in a register. And the SmallVector has such a dependency just as well: The discrimant must be loaded and tested first. In both cases it shouldn't matter much since it's expected to be optimized to a one-time cost.
Creating APIs for the human developer
> The EU ponied up nearly a billion Euros for the decommissioning, which I can't help but notice is almost as much as the new Chernobyl sarcophagus.

It's less than 2/3rds (<1bn vs. 1.56bn) and the new sarcophagus is the (hopefully) last of a series of developments for confinement for a century (ie. there were costs before) while the decommissioning reduces these two reactors to mostly nothing, where the remaining troublesome radioactive material can be long-term stored together with any spent fuel (once there's a proper solution for that which we need, decommissioning or not).
Wallet, keys, card, coins, hanky, phone, glasses.
(my version of "spectacles testicles wallet and watch")
Following that last point, it sounds like customer preference is shaping the demographics. If people prefer to be served by women, and tip them more, the field will skew female.
> I don't think personal information is so valuable that we need to outlaw its sale.

Europeans seem to disagree. Maybe your "reason" is just cultural bias?
Depends on what live chat software they're using. Zendesk (one of the most commonly used live chat tools) doesn't show what users are typing in real time.
> Search for "World Conference Center Bonn Scandal" if you want to read some hilarity

FYI: I tried, and the only Google result is this exact HN post.
Although at some point you might find yourself behind a captive portal where port 53 is being redirected.

In that case, you could ping a recursive nameserver on the open internet that listens on a non-standard port.
Features to be deprecated in PHP 8