skysight-inc/HackerNews huggingface dataset:
Handshake (handshake.org) provides an SPV Proof that the DNS records held in it's zone are authentic. This means if an attacker wanted to spoof records, they would have to:

1) Eclipse attack the client, meaning that the client is on a partitioned network with an alternative chain tip. This grows more expensive as the records were written further in the past

or

2) Steal the top level domain owners private key and update the database
This is the sort of programming language that I would love to read a detailed retrospective of in an ACM journal. It's a programming language designed to solve a particular problem, grew over time for that problem, and it successfully did so for almost 20 years. A programming language that is useful that long is interesting to me.
Under ideal conditions my “smart” tv, internet connected game console, internet connected air filter, etc will never leave my home. At least not u til I get around to documenting them for renters insurance.
As a manager of software engineering teams I can tell you that: there are two options to be as productive remotely as within office hours.

1) Either the whole team communicates in a remote manner, e.g. holding meetings via videoconferencing only and writing down follow-ups, meticulously logging progress via special tools, putting a lot of effort into documenting everything, so any member of the team can quickly find literally any piece of information and manage most of the tasks without asking peers for help.

2) Or you should ask for a position as mechanical and routine and async and redundant as possible, like I don't know, fully scripted first line of customer support, or data markup, or monkey testing, or something like that.

This is because most of the teamwork is actually about information flow, and the bigger the team - the larger the stream. In case of partial remote working, when some team members are indulged with home office days or even full remote, other members, and especially leads and managers, are just paying these outstanding info bills, just to keep remoters in the loop with the team and company as a whole.

So in my opinion the only way to work remote in a close-quarters team is to either be extremely special and indispensable just to strong-arm your privilege, or be largerly underpaid to justify communication tax you will lay on your teammates and direct supervisor.
> What would be better is to require 2FA for all zone hosting companies.

Even with this, many registrars and DNS hosts are too fast and loose with disabling 2FA when you call them up and tell them you lost your second factor. Alternatively, requesting changes over the phone without going through web authentication. My confidence in 2FA dipped quite a bit after going through the experience myself.
You misunderstand, I think. The problem is that the ecosystem of the modern web is entirely and irreverisbly full of spying and user-hostile junk, due to decisions that were made. TL;DR you can't have Javascript with anything close to its current capabilities and also have a safe and user-controlled Web.

I don't want some restricted version of web sites that work OK in current web browsers, provided you're very careful not to leave those sites. I don't want constant fiddling with umatrix or custom privacy settings that break 90% of the Web. I want a safe hypertext browsing system back, in its own program that will kick open a "real" web browser (with warnings and flashing lights) if you try to link from it to the spyware web, like if you try to open a PDF. As long as I'm in it, I shouldn't have to worry about any links I open trying to spy on me. I shouldn't have to track down which tab in this system is making my nigh-supercomputer laptop's UI stutter (hi, Asana, Trello, Slack, Jira). None of them should break because of my privacy settings—privacy, old-school web style, should be the only way it operates.

I want a safe-only Web that is for browsing hypertext documents. The current web can keep the spying, security vulnerabilities, resource-eating, and apps. I know I'd still have to use it, and that's fine, I just don't want safe, secure, resource friendly browsing to happen alongside this shitshow, because then it's not safe and secure.
It already exists in the form of user namespaces.
If I told you the light indictor can be switched off anyway by Apple?
Not if you have pre-existing medical conditions that marketplace medical insurance won't cover, like dwarfism or albinism - there are others but those are the ones I know of. You need big-company insurance benefits for these.
Shutting down the internet doesn’t work – but governments keep doing it
It’s not labor? What is your definition of labor?
>Nice. AR for the industry is an interesting field

Yep I'm also happy about this and like the direction Microsoft seems to be going. Industrial applications have always seemed much more interesting and potentially widely beneficial than just targeting consumers and entertainment.
I couldn't agree more. Rolling your own distribution is in general a bad idea, unless you have lots of resources to develop and maintain it. Plus a very good reason to do so!

But Dell often also screws it up. I ordered a really expensive workstation from them (>$15k), configured with Ubuntu as OS. However, it was not vanilla Ubuntu as advertised but a patched Ubuntu of the latest LTS. The machine always got stuck in an infinite loop after setting the timezone and entering user details within one of the welcome dialogs. Totally unacceptable.

I installed the very same Ubuntu LTS version, just a vanilla one, and everything worked fine.
NFS has been around forever and has always had a bad reputation due to problems like this. It mostly handles transient failures by waiting (indefinitely) for the server to return, but it's unclear what a better option is.
What are unsecured domain names in this context?
> Somewhere you can browse hypertext documents with high performance, in safety, with no spying.

How do you propose the no-spying part? With laws passed by country? Nothing in your setup prevents spying, and spying is extremely lucrative in a capitalistic society, so people will still find a way to spy.

You are putting all your trust in the server. But those servers are where the spying would move to if it needed to. You cannot create a technological system that prevents spying, since you have not removed the incentive to spy.

Make it illegal to do targeted marketing and then you will have a dramatic reduction in spying. You'll also have a short-term dramatic drop in economic efficiency, something the HN crowd is likely to decry as equal to the end of the world. But I think it's much more likely that we build a sustainable society with good, long-term-growth economics if we put more limits on capitalism.

Edit: Facebook doesn't care if you're reading those documents on some simple text-web. They'll find out anyway, either via your absence from the 'regular web' or any other clue they can find. The spying won't stop just because you're using some primitive technology.
Where I think I disagree is that I don't see this as some corner case - to me it's one of the primary use cases for owning a car, and I'd wager the same is true for the population at large - perhaps even second most common after commuting. A huge number of people have relatives/family/friends a 3+ hour drive away.

The most constructive answer, I think, is to prefer plug-in hybrids as a drive train option (perhaps the default option) on "normal" cars/SUVs which people actually want to own. This is what Volvo is doing for example. It has a weight (and therefore efficiency) cost but a plugin hybrid with a true 100+ mile range is still incredibly worthwhile. Don't let the best be the enemy of the good.

There are still incentives to build out decent fast charging infrastructure in a plugin hybrid world - as stopping to charge instead of stopping for fuel has a cost advantage (though the time cost still needs solving - it's not just time to actually charge, it's also queueing time to be able to use a charger in many places).
> 8,582 websites in the Alexa Top 1M implementing a security.txt file

I count 6460 sites on the linked list, and loads of these are subdomains on tumblr.org, so I wonder what the number of actual TLDs using security.txt is...
Are you sure that Netlify homepage uses react?
I have react developer tools installed and it indicates no react presence on netlify's (very plain and simple - I mentioned complex apps in my initial message, but that is another thing) homepage.

Another example could be Facebook which qualifies into "complex apps" category and at the same time is very well known for sluggish performance.
A site like pcpartpicker makes this easier. It tells you the cost of all your parts, where to buy those parts from and importantly, if they're compatible with each other socket- and space-wise.
kinda sick of all this container nonsense tbh - they are so insecure, un-engineered and propped up only by vc marketing dollars

kernel community is wise to reject this, seriously
I think you are underestimating how novel those things were 20 years ago. The NYT has been ahead-of-the-curve when it comes to the sophistication of their webpage for about that long. Perhaps their language helped.
No, all the stuff in these images are divs.
> open a "real" web browser

I'd call that launching a Javascript app, which rarely touches the World-Wide Web beyond that single point.
Remarkably cost efficient.

I wonder how feasible it'd be to do this on a larger scale. TARP spent $400B bailing out banks; seems like that'd go a long way here.
The difference between this and seatbelts is that with the LED, you are trying to prevent someone from maliciously using the camera, while with seatbelts you are trying to give everyone the ability to be safe should they choose to do so.

And regardless, the ability to defeat it should be a factor in determining whether or not it is worth regulating, even if it isn't the sole factor. The combination of having the LED both easy to defeat, and having very limited usefulness, make it not worth regulating.
It’s not really painful to search through 800 passwords when logging in to a website. I have a similar sized 1Password database - actually, just checked, it’s 895 - and I’ve not once had issues with it.

Just another person looking for something to complain about.
Microsoft hails revamped goggles as more immersive and easy to wear
Facebook attacked over app that reveals period dates of its users
Now you should consider those effects.

1) most mechanical and routine jobs will be automated first. So in XXI it is not a wise choice.

2) Any team manager's duty is to reduce bus factor [1], so strong-arming remote job from competent supervisor should entail dissolving or breaking apart a unique employee's position.

[1] https://en.wikipedia.org/wiki/Bus_factor
In addition to the captain's glider experience, the first officer just happened to have served at the RCAF station where they eventually landed. So they had at least a couple of extra things working in the favour that day.
Ask HN: Is anyone interested in an eco-friendly postcard print API?
I run a small app called Postcard Panda (https://postcardpanda.com/) which allows people to send a postcard through the iOS app.

Is anyone interested in a paid API for postcards? Getting a relationship setup with a printer was a bit tricky, and I'd like to open it up if other people find it useful. Likely cost of each postcard send would be around $2.50
The friction, risk, and uncertainty of rental cars sucks. Friction: pricing is unpredictable between and within vendors so you have to waste time comparison shopping on ad-laden sites to avoid getting screwed, taxes and fees and insurance costs and benefits are often opaque, and you have to somehow get to and from the rental office which can be far away (Enterprise's pickups sort of kind of help with this but need to be much more Uber-like), and you have to wait an indeterminate length of time in line (from 0 to 60+ minutes if you're unlucky during a rush) and then you sometimes have to trek a ways from the office to the actual car. Risk/uncertainty: your car may not exist (has happened to me often) or may stink, or be dirty, or somehow not what you were expecting, and the alternatives, when they exist, usually involve an argument and an upsell; and if you have an accident, the insurance paperwork is a nightmare even when you're 100% covered, unless you've paid for the expensive rental agency max coverage.

Having your own car is predictable and low-risk, if expensive in other ways. But if your time has value, and you add the probability-weighted costs of not being able to leave for your trip on time, or go at all, or do it in a sub-standard car, renting can be pretty expensive too.
To name a few more aviation terms derived from French...

Aviation: https://en.wiktionary.org/wiki/aviation

Aéroplane: https://en.wiktionary.org/wiki/aeroplane

Hélicoptère: https://en.wiktionary.org/wiki/helicopter

Sortie: https://en.wiktionary.org/wiki/sortie
> the conservative thing to do would be to create, write, fsync() the file, fsync() the directory, rename, fsync() the directory again.

Afaik the conservative thing is the necessary thing if you're on an ext4 mounted with noauto_da_alloc,data=writeback. I think you can skip the last fsync if you're fine with losing the new version as long as you get the old version in its place.
Numerous programming languages, including basic, algol, etc used for loops. Notably absent from the list of languages which used FOR as a looping construct was Fortran, which used 'do' for looping, and cobol, which used 'perform'. So whatever languages it was, it wasn't Fortran.
Eminem's 'Slim Shady LP' turns 20: An oral history of the album
It's not an unreasonable thing to get ticked-off by
Uhh, what's this about? https://i.imgur.com/e3kNYTH.png
This is not a new problem.

There was a somewhat high profile theft a few years back where the owner published how they recovered their domain:

https://www.forbes.com/sites/theyec/2015/02/28/how-to-recove...
I think of it in slightly different terms. Yes, we could build software that reliably. (Perhaps not totally bug free, but, say, with 1/100th of the bugs it currently has.) But that takes a lot more time and effort (say, 100 times as much, as a rough number). That means, because it would take 100 times as much effort to produce each piece of software, we'd only have 1/100th as much software.

Would that be a better world?

Sure, I hate it when my word processor crashes. On the other hand, I really like having a word processor at all. It has value for me, even in a somewhat buggy state, more value than a typewriter does. Would I give up having a word processor in order to have, say, a much less buggy OS? I don't think I would.

I hate the bugs. But the perfect may be the enemy of the "good enough to get real work done".
If you are interested by uncommon approach to implementing programming language, toy should have a look at the K framework (http://www.kframework.org/index.php/Main_Page)

The idea is to write the spec (is grammar and semantics) only once and have for free a compiler as well as some formal tools (model checker,...)

C had been formalized with it for instance.
Expansive interpretations of "Treason", such as the one you propose, are explicitly prohibited by the US Constitution due to their abuse by european monarchies to silence dissent. "Treason against the United States, shall consist only in levying War against them, or in adhering to their Enemies, giving them Aid and Comfort. No Person shall be convicted of Treason unless on the Testimony of two Witnesses to the same overt Act, or on Confession in open Court." Article 3 Section 3.

As a result of this strict standard, the last successful prosecution for treason in the USA was in 1952...
Also now there is Rust as potential C++ successor. Time flies.
I agree completely, and have only popped in to note that you can order System76 with regular old Ubuntu.
Parser combinators are fine for languages not designed to be written by people, but the error messages tend to be awful.

What's increasingly clear to me, having designed a few languages, is that a well designed languages is easy to parse. I work on a couple of languages which require one token lookahead. This means when something goes wrong, we know exactly where the problem is, and what token we didn't expect.
There's nothing stopping you from browsing that way if it's what you want. Install uMatrix, uBlock, and a couple other extensions, and you can lock down pages as much as you want. You can even take it a step further and use an older browser that doesn't support the modern features you're complaining about.

Unfortunately, what you can't do is force everybody else to participate. HTML3 still works great in modern browsers, but the people making the sites want to use modern features.
x86 is undoubtedly a very complex beast, so ARM/MIPS are fairer comparisons. Never mind the fact that a Xeon CPU is boggling complex on top of that. I think you are right about how problems are more likely to come from interractions with peripherals, especially the MMU. Most of these things are not architecturally specified, so it's an orthogonal problem to ISA complexity.

Bugs in instruction decoders are something of a false flag in my opinion. They are no less important than other bugs, but they are much easier to find as well, because the problem space is more manageable. A little more complexity in an instruction decoder is not, in my opinion, enough justification to exclude otherwise useful instructions or functionality.
See IEC 62304:2006 (https://www.iso.org/standard/38421.html) and the related standards which govern the formal processes which medical device software must meet for FDA and CE approval (as well as other national standards).

The whole process from requirements, specifications, high and low level design, implementation, validation and verification and the rest of the lifecycle requires stringent oversight, including documentation and signoffs. The signatures on those documents have legal meaning and accountability for the engineers who did the analysis and review at each stage.
I'm curious what makes you think EFF spends time on patent far disproportionate to the civil liberties impact? Out of their https://www.eff.org/about/staff of 80+ it looks like they have 2 attorneys and one analyst that might be mostly working on patent. How much time would be proportionate? Assuming the current time spent is disproportionate, why do you think they've allocated time in that way?

I haven't followed closely, but on why ACLU might spend less time on business regulations that have a civil liberties angle than they might: they don't ignore completely, but they likely have mixed opinions on extent to which such regulation protects workers or consumers, and being relatively liberal, are skeptical of deregulation. So market libertarian civil liberties entities like IJ are the ones dedicating lots of their time to business regulation with a civil liberties angle...and as far as I know ignore IP altogether, perhaps because to them all property is sacrosanct.

On "copying is bad and destroys innovation", I'd really love to read your take on the ideal set of innovation policies stemming from this assertion!
Just out of curiosity - what Lisp book it was?
I don't think developers get thrown in jail, even for a bug that kills multiple people. The one time I've heard of people getting thrown in jail it was upper management, for trying to game the FDA audit and approval process. They got led out the door in handcuffs by US Marshalls.

Source: Worked in FDA-regulated software for six years, at two different places.
I presume it means domains names without DNSSEC.
There are many people currently living at a good level of decency (even way over the average) from disability benefits, inheritances, accumulated rent... Literally getting paid for no labor at all and they're doing just fine.

We, humans, come from terrible conditions where disease, famine, death by overwork/exposure to the elements were a day to day thing. I never hear of anybody dying after being too comfortable.
Under what I propose you could only do stuff like recording a user's entire session, including mouse position and typing-in-progress in text fields, which is commonly and easily done on the modern web for "UX research", with the complicity of the browser itself. The point is that the server may log your requests, sure, but they can't gather tons of extra info without your seeing it (post previews) and they can't effectively stick a camera over your shoulder while you look a their pages. No more abusive, close session tracking. Best you can get is "the user, personally, made this request at this time". Which is way the hell better than where things are at now.

I agree we also need to outlaw mass collection of info about people, or at least put in place such massive penalties for leaks that no sane company without a really compelling reason would dare store such things. Hopefully that'd end the damn credit card company and loyalty card and credit system spying, too, or at least force them to shape the eff up. I'd just also like a hypertext network that cannot constantly spy on me or eat an entire core because "programmer productivity". That's all.
Why I Don’t Have a Smart Home
I was thinking the same thing... are some just not willing to accept that something a complex as learning might be explained with something as clear as optimization?
I am saying that Jews in Eastern Europe were mostly poor. There is no richness "despite oppression". There was suffering and lack of means. Also that they were almost all killed, except those with means to survive and great deal of luck. Also that the storiés of rich Jews are mostly nazi and other anti-semitic imagination.
Someday your self-driving car will pull over for police
As someone who's had a Model S since 2015, the USB audio bit is my biggest gripe about the car... above pretty much everything else. It's also actually regressed across updates in the past as well. Some issues are flat-out bugs, some are implementation choices, and some are simply a lack of features/options.

And since none of this makes for a flash Elon Tweet or press release (for people who don't own one), basically nobody over there seems to give a damn.
Before Europeans came to the Americas, a population of "Native" Americans who invaded from the other side hunted the megafauna of the Americans to extinction.
Or, failing that, donate it to the Computer History museum.
People Working on Small Projects
How do you guys develop skill to design big/scalable systems?
There was a thread on HN when they first announced a public release at RSA[0]. A lot of reverse engineers I know are excited for it.

0: https://news.ycombinator.com/item?id=18828083
The choppiness decreases tremendously if I wiggle the mouse around during the demo (clicked on the auto-running third link).
Yeah, that's weird. "Morrell constructed a 450-foot spacecraft at the Morrell Airship Company on Market Street. The craft was designed to run by gasoline engines powering wooden propeller blades draped with oiled silk."

I supposed it's possible that was an accepted term in 1908, but this article was written in 2012, so I have to assume it was an error.
What does this solve that a non-blockchain approach (for example the PKI approaches we already have) wouldn't?
Rootless Jailbreak iPad Mini 5th Generation Using Uncover IPA Download
Some links worth mentioning

https://www.colm.net/open-source/ragel/

https://beautifulracket.com/

https://www.jetbrains.com/mps/

https://kotlinlang.org/docs/reference/type-safe-builders.htm...

https://en.wikipedia.org/wiki/ANTLR

https://github.com/llaisdy/beam_languages
I'm your age. I find my oculus totally useless for real world work. I'm used to a 4k monitor as a desktop.