skysight-inc/HackerNews huggingface dataset:
For important things you can use the Munroe method and randomly choose several words from an appropriately large dictionary. The result has the advantage of being much easier to memorize as it lends itself to mnemonic techniques.

The method has detractors who would argue that the word choice wouldn't be random enough, but that's because they employ a strawman who insists on either choosing their own words or using only words they are familiar with. If you actually pull words randomly from a really big dictionary, it has plenty of entropy. Having some obscure words in your passphrase only make it even more memorable anyway.

For unimportant things, like your HN account, who cares.
We heard you like to resolve domain names into IP addresses so we put your DNS provider behind an A record.

This way you can resolve while you resolve.
>they will do whatever is necessary to accomplish what they think is their goal.

This is exactly my concern. As someone who had to deal with people jailbreaking their phones without any knowledge of what they were doing, this is exactly what I think the issue is. The difference is that, in this case, there's credible evidence to suggest that this is a data-mining operation in disguise and people will unknowingly allow it to get "free apps".
Are you asking for a reference that the USA has more diverse demographics than Sweden? That's gonna be a lmgtfy.
As one of the founders of Streak and someone who helped build the InboxSDK this is so cool to see. Congrats to Ajay!
They can do what they want, but I would hate to see various beloved open source projects and their leaders in league with the IP police.
Corporations in general have the constitutional protections that people acting in a group have. Corporate personhood is just a convenient legal fiction.

For example corporations don't have a right to free speech because they are "persons" but because we extend the rights of the individuals who make up the group to the group itself.
Awesome! Plugins like this make me want to make the switch to emacs from vim sooner than ever.
Ask HN: How to Best Stay on Top of Vulnerability Releases in Software?
I maintain a fairly large collection of hosted web and server applications, a large portion of them running WordPress, Django, Laravel, and Drupal. I'm aware of the normal channels for tracking new releases, but what is the best way to be in the know about new security issues without spamming an email folder or twitter feed with every CVE?
If you have sleep apnea it's useful.
Why on earth would it mention that? When were you last grievously injured by an inattentive pedestrian?

The ultimate cause of these deaths is principally in the tons of metal propelled to abnormal speeds by engines that could just as well serve the power needs of an entire row of houses. If your traffic policy doesn't realize this basic fact and instead prefers to make worthless publicity campaigns appealing for "everyone to pay attention", it is not rooted in evidence and doomed to fail.

Imagine every day we had 10+ planes crash, killing everyone inside, and we collectively shrug our shoulders, make tactless comments along the lines of "if it goes up it's gonna come down" and put up posters for plane construction workers to pay more attention putting the rattling cans together.
Why Do Humans Drink Animal Milk?
I thought so as well. But, if he's okay with it and the numbers pencil out well, there's not a lot of reason to improve it: probably better ROIs elsewhere.
The DNS resolver seems to break DNS, the time system no longer acts as a server

This isn't necessarily a problem with the systemd project, it's more on the distros that bundle these service, but when you have the same branding across multiple systems, you have to take the bad with the good.

Had they called it "multidnsd" or "ntpclientd" then people wouldn't think "systemd sucks because when MyDistro 9 came along", they've blame multidnsd and let the systemd init system stand on it's own.
It helps if you have sleep apnea. If you don't have sleep apnea, I'm unsure you're going to see cognitive or productivity gains, as your brain is already getting enough O2 during sleep.

EDIT: Now if you could find a drug that promoted the ability to more rapidly clear waste using cerebrospinal fluid while you sleep, that'd be a possible route to still maintaining high levels of wakeful productivity with limited sleep (without causing harm later in life).
Her podcast has been a great source of interviews with interesting researchers. Her guest appearances have also been great (she's been on Peter Attia's podcast).
I'm laughing my ass off. GP claimed that Justice Ginsburg is actually dead and her opinions (including on this case) are being ghost written.
A better way for the executive branch to help the problem would be to abolish the DEA and start work to end the war on drugs.
Linux Kernel Through 4.20.10 Found Vulnerable to Arbitrary Code Execution
This is really neat, but pupil roundness is a dead giveaway here.
My knowledge of this is little more than yours, but my understanding is most people use CPAP machines to cure sleep apnea (extreme snoring basically). I've never heard of someone using one as a sort of sleep-hack. I imagine the machine is fairly uncomfortable? Would be curious to hear more about this.
Is it straightforward to do without a lawyer, though? What if you can't afford one?
> how does one actually go about finding an unfulfilled niche?

Start with things you already have some domain knowledge of (better even, try to find unrelated things you know about that overlap in interesting ways and where few people have domain knowledge of both) ;

find what problems/frustrations practitioners in that field have and do your best to solve one of them in a very immediate, low cost of adoption way;

fail fast .
Yes, "float" is on the asset side of the insurer's balance sheet. As coverage costs decline, the liability side of the balance sheet will shrink, causing the insurance company to be overcapitalized. Shareholders will then demand that the excess capital be used to pay for share buybacks and dividends (thereby returning the excess capital to investors so that it can be more efficiently allocated).
They're doing the opposite here, putting up dedicated stop lights at "troublesome" crosswalks because nobody, ever, stops for people in crosswalks. Well, aside from the 15mph crosswalks they have around schools where everyone stops because the police like to hide around those.
Impressive. But, the one that loads first is always the real person. The teeth for generated faces often look weird.
The paper is open access, so the full text is available sans paywall. :) Worth checking out if for no other reason than to appreciate the figures!
https://www.fasebj.org/doi/10.1096/fj.201801412R
The whole point is that it's not about me being anything, it's about a pretty objective cost-benefit analysis.

I agree that there are big unknowns but I don't think that detracts anything from the point I'm making.
No need for any public crypto. On first use, the computer issues a unique key which the device uses to authenticate all messages, for example with hmac.
Most products really do not need to be revolutionary, and very few are.

Markets are unimaginably large and complex, and they're always changing. Sometimes even the most basic feature can divide huge portions of markets.
> the idea that people over a geography the size of Engalnd would see themselves as one people would've been ridiculous

Yet they were related people, ethnically, linguistically, and culturally. It's like saying the idea of a family would've been ridiculous, because brothers used to fight and bicker.
Machine and deep learning tools are reaching higher levels of abstraction all the time. Libraries like fast-ai make them accessible to anyone with a basic understanding of Python.

I don't think the advent of the 'Citizen Data Scientist' is even about automation. It's about providing an interface that allows application/experimentation without a deep understanding of the underlying statistics and architectures.

I think it's totally reasonably to expect that, within the next couple of years, there will be state of the art deep learning techniques that don't require any more technical expertise to apply than operating a smart phone.
The 14th Amendment's Equal Protection Clause ("nor shall any State [...] deny to any person within its jurisdiction the equal protection of the laws") means aliens are afforded the same protections as citizens.
Everyone should have basic protections, or "fundamental" rights. Those are things that exist as a matter of basic human decency. Nonbasic rights are more like privileges, and they can apply discriminately.
How do you feel about Phoenix (and, by extension, Elixir) as something that might scratch the 'quick web application' itch?

As a web developer, I've been quite happy learning Elixir/Phoenix in the past year, and learning Erlang has been on my list, so I'm very interested in hearing from people with more Erlang experience when it comes to 'web stuff'.
OP didn't say "primary reason"... OP said "only reason", and that is what the person you replied to is arguing against. While it may be the primary reason, it's not the _only_ reason.
> I've never peed in a pool

Yet there's this huge market for incontinence pads, and elder swim, too. Do you think incontinence magically stops when you're in a swimming pool? Don't you think the times you swam you had trace amounts of pee leaving your body?
One of the most important things about this rule is that the court found that the eighth amendment protections against excessive fines and punishments apply to state/city governments as well, meaning it's finally officially incorporated.
Ask HN: Who Is Running a SaaS Business on Top of Open Source Product?
I see a bunch of open source software which can be offered as a SaaS solution. Did anyone find success doing it? What is your experience?

Edit: Replaced open source product with open source software
Remote keypress injection.
I've worked with 2D graphics quite a bit and I've often used anisotropic smoothing[1]. GAN images have similar artifacts (probably worth thinking about, btw), which are trivial to spot if you know what you're looking for. They look like waves on water[2].

One could mask these artifacts by blurring, adding noise or downscaling further.

[1] - https://authors.library.caltech.edu/6498/1/PERieeetpami90.pd...

[2] Extreme example: https://c1.staticflickr.com/9/8449/8048065891_7fab061307.jpg
"I" statements. :-) reminds me of "Mistakes were made!"
This is a good story, but I'm surprised Google allowed this extension to exist, especially if it's true that it was widely used by spammers.
Then you are going to the wrong movies friend.

Which is to say, you are victim to assuming the mega complex Movie Theater, powered by the mega complex of Studios pumping out advertisements are the only option available to you.

If cinema is a desirable experience to you, seek out film colleges, independent theaters, movie rental spots, and YouTube/Vimeo/reddit. You’ll find a bunch of crap, for sure, but it will be new and interesting crap. You’ll explore your own mind trying to define why you don’t like it. Eventually you’ll see something truly moving and that will be amazing!

Or, If you justly say “I don’t have time or energy for something I’m not that passionate about,” continue to go to the AMCs. Just recognize, much like McDonald’s they (and the studios) have massive overhead and massive interest in not losing money. No one takes the person complaining that McD’s isn’t gourmet very seriously.

(The most moving zombie movie I ever saw was 15mins on YouTube and had 3 zombies in it..)
This is also something I struggle with.

I think that they are incredibly difficult to find and most people (me included) can't identify "problems" in their day to day that could be improved by something - in hindsight - relatively simple.

I'm constantly asking myself: where are the pain-points in my daily interactions with computers/software etc.

So far there's nothing and I know that can't be true.
None of these DNS blockers have ever worked on YouTube for me, nor any of my other streaming apps.

Honestly the only real solution I've found is to use Ublock Origin in Firefox for Android.
What Is the Purpose of Peer Review?
This strikes me as being classically anti-inductive: if they figure out the "formula" for a successful movie, the formula will become useless as soon as they try to apply it.
Jj Qa Bbq Ekadf Vwifkb Voohfffohddljqwwwwwbfiuc Vvvvvvvvvvvvvvvvvvvvvvvvv
Separate from HSTS, they should also be redirecting http to https. Hopefully they'll get around to that soon. The domain is still recent so they're probably not finished with configuration.
While it's definitely the biggest incentive, there's also a customer-focus piece. I used to do third-party repairs for these devices and I can't tell you the number of people that would get mad at me and/or Apple because they jailbroke their phone and then did something to brick it. They had someone else jailbreak it for them, so they had no understanding of what had actually been done, and then they attempted to run updates that broke them. When people expect support, it makes sense to me that Apple would want to prevent those types of situations from occurring when they're the ones that have to deal with people who don't know or understand what they've done.
It doesn't help that many of these password managers are written in high-level languages (some are Electron based, ffs!) where you have zero control over the actual allocation (and subsequent clearing) of bits. The best you can do is overwrite the memory and hope that the framework/runtime/GC does the right thing.
> But, the one that loads first is always the real person

I tested your theory and the loading order was a mixed bag. The first loaded definitely isn't the real person. It's about 50/50 here.
Who Killed Tulum?
The link goes to a medical research project that suggests existing drugs are more effective when combined with a few days of partial fasting. It needs more research, but I don't think it's fair to lump it in with fad diets and green tea.
IMO most people would not consider healthcare affordability as a factor in where they want to live, or even a major factor in their quality of life. NYC (as one example) is famously expensive across the board for all types of insurance, healthcare, housing, food, etc. but still has hordes of people who want to live there.

As an aside - New York State did launch a universal healthcare program recently, and I believe Colorado has something in the works on that front too.
Knowing that one is fake you can take the time to pick it out, but these could easily pass as real photos in a context where you're not looking for them.
In the successful businesses I know, finding that niche was often 1-2 years of exploration/iteration, where the final result looks vastly different from the initial hypothesis.
I mentioned that specifically in my original comment.
Boy, I'm sure glad I went 20 years ago before this craziness started... It was gorgeous and nearly empty then.
Same with Sweden. For example, Allemansrätten (Freedom to Roam) applies to alla människor (or all people), not just citizens.
> See your reaction is exactly my point. In your mind the closest most analgous thing to a pedofile is a sadist. All a pedofile is definition-wise is a minor attracted individual (MAP)

And all a sexual sadist is is someone who derives sexual pleasure from he suffering of others. And a rape fetishist derives sexual pleasure from thoughts about rape. You're the one who seems to think that has anything at all to do with how they act as opposed to merely what excites them.

Edit: I think I see now your point. Your argument is that just because straight males are attracted to females does not mean that they are going to act on those impulses in an illegal or immoral way.

I still think it is a flawed comparison because one could argue that being attracted to women doesn't mean being aroused by non-consent. That is of course also true of being aroused by children, however as you have pointed out the issue is that there isn't a legal (or for most definitions moral) path to fulfillment of that desire.

The comparisons I mentioned fit better because they too cannot be legally or morally fulfilled. Instead, as is the case with pedophiles, they explore the fantasy via various fictional media, imagination, and role-play. Yet these two groups do not provoke this irrational equivalating with people who do fulfill their desires in illegal and immoral ways.
> but wait... our entire economical system is based on this.

Hence our problems. If there's something I've learned to notice recently is that most world issues are or were very profitable for someone. I think we're past the point where "nature" is really that big of an issue, and now it's mostly just us pecking each other down either in the smaller scale, or in large, systematic ways.
> Some companies (notably medium and reddit) are protective of this speech

Not Reddit anymore, if the recent permaban+unban of /u/holofan4life for a drawing of a fictional teenager in a swimsuit [0] is any indication. Granted it's a drawing and not text, but still.

0: https://imgur.com/a/BZinZM6
Am I an introvert if trust my image manipulation know-how and purpose detection sensor array more than my human instincts in the quest this web site proposes?
Urine is not sterile,though it normally doesn't contain harmful bacteria, and it's not generally good to pee on wounds, and even the specific cases it's been popularized as a treatment for (jellyfish stings) it's not a good idea.
I'm waiting for "this alien does not exist".
OK, the warning could perhaps be better designed.

But I still don't see the huge problem:

"Trusted" has a very strong meaning when used for any computing device. So this is already a really, really strong warning sign (safeguard 1). Next, you explicitly have to go to the settings to manually trust the certificate (safeguard 2). This gives you a lot of time (i.e. you don't accidentally "click/touch OK") to inform yourself intensively of the consequences of the decision (safeguard 3). Even after that according to this link (no screenshot is shown), you explicitly have to confirm your decision again (safeguard 4). Now according to this link, you have to install the apps from the now-trusted developer manually (safeguard 5).

So I see at least 5 levels of safeguards that Apple introduced.
I guess my thinking is how does this affect the funding for Trump's wall. IIRC about $2.5billion was supposed to come from DoD drug seizures... this case seems highly relevant
How do people meet other people to date then?
Please do not change the training data for this....or at least keep this version. These are the most amazing failure cases ever.
Right... but that's the case here. People are installing certs that grant all entitlements, a completely valid situation for someone using the certs as intended but not for someone unknowingly doing so. Apple is removing the certs whenever they can but that can't possibly cover every situation.
How do you determine if it's non-security threatening, though? Isn't that considered an approval process?
I get the concept of what you're saying with, "the 23% could be 30% if you dealt with the toxic employee", but I think that unfortunately is not true in a lot of cases. There are a lot of really talented, hard-working people who are also toxic leaders (some maybe not fully intentionally), and the challenge of dealing with them in an organization is that, as you point out, measurable performance is often all that matters.

I think the cost-benefit in an example like this is usually not so much "replace the asshole and get a 7% bump in growth"....it's more like, "it'll cost you a point or two of sales growth but that'll more than pay for itself in terms of lower turnover because we'll save $200k a year in recruiters fees because we won't have to pay them to find replacements for miserable junior people who don't stick around for very long".
I've worked with a few small town USA type law enforcement agencies. No big city ones, so think towns around a few thousand people total, or a county with 15k people total. This won't reflect the majority of the US, but it does seem to reflect the majority of arrests in this location.

A lot of criminals (again, around here at least) are that stupid. The detectives have solved many cases just by searching for the suspects name on Facebook. Some examples were: seeing the stolen items right in their profile pic, drugs with the suspect standing there while holding a gun, a video of a friend recording someone breaking into a car, hell, they had to get CPS involved because a parent had a video of them hitting (it was hitting, not disciplining) their own child. All of that just on Facebook. The hardest they had to work to get those pictures was add them as a friend under a fake profile.

Now career criminals are a completely different beast. The law enforcement here (luckily) doesn't have many or any "advanced" criminals around here. There are definitely plenty of low hanging fruit here to keep law enforcement busy, and being in small town USA, once they know who you are, they KNOW who you are and who you hang out with.

The detectives always said that if most of these people left their phone at home, didn't take any pictures, and didn't tell their friends about what they did, that crime may not get much priority (or any) depending on what the crime was.

I don't have raw data to back that up, but it does happen here. I do agree with you about the career criminals though, but there are still A LOT of stupid people out there or maybe it's something in the water here.
Show HN: SaltShaker, Easily Encrypt/Decrypt/Sign/Verify in JavaScript
I worked on a hierarchical, distributed control system written in Erlang, and I found the actor model well suited to that problem domain.

We had to control various devices based on sensor data, but we also needed to make sure that the workload was distributed across the devices in an efficient way. To implement that, we had one actor per device that was solely responsible for adjusting the device output based on sensor data. Then we had another actor that was responsible for looking at the behavior of a cluster of devices and distributing the load between them. This "load distribution" actor wouldn't control the devices directly, but instead would send adjustments to the actors directly controlling the device.

I find it very natural to anthropomorphize actors. That is, if you were to think about how you would organize a group of people to do the work of the system (in a very Taylorist sort of way) the roles of those people map neatly onto the actors one would create.

One common pattern is the manager/supervisor/worker pattern[0]. I see this as mapping fairly neatly onto the project manager/people manager/employee structure that you see in many organizations.

[0] https://zxq9.com/archives/1311
Hot code reload is imo an enabling practice, and should be done everywhere possible. Restart to reload may be useful or practically required for some deployments, and it's sort of a test of cold start, but it's so disruptive and time consuming. I've done deploys both ways, and time to remove host from load balancer, wait for server to drain, then add back is time I won't get back. You can do a lot more deploys in a day when the deploy takes seconds; which means you can deploy smaller changes, and confirm as you go.
> Because the app is open source, if it was doing anything shady, it would be found out

This is a little misleading... Just because there is source code on GitHub does not mean the random APK you're downloading from the internet and side-loading is safe.

If you're paranoid (and you probably should be - if I was a bad person and wanted to get malware onto your machines, I'd be making some useful "open source" app and publishing "its source code" on GitHub too), you'd want to build the app yourself! :)
On what do you base that notion?