skysight-inc/HackerNews huggingface dataset:
I don't know how perfectly you could do this. If there are going to be arbitrary mouseover effects then JS has to be able to see your mouse. If you want Jupyter notebooks to indent text & do tab completion then JS has to see text you haven't submitted.

That said, I'd like my browser to be much more on my side -- by default disclose very little about my setup, by default partition cookies according to the headline site I visited, and delete them soon. I'd like JS completely off on most sites I visit, and more convenient ways to turn on as much of it as needed on some sites.
Phishing by Venezuelan government puts activists and internet users at risk
Whenever I read stuff like this, I'm reminded how user-hostile Android and iOS are. Even compared to Windows. Or at least, to Windows XP and 7.

Not that many years ago, I had imagined that microcomputers and cellphones would merge. But I was expecting something like Linux. Or at worst, like Windows.

And it clearly didn't work out that way. We have smartphones that are never really owned by users. They run apps that have more rights than they do. With no practical way to change that.

It's sad, because I can't have a smartphone that I can trust. But so it goes.
This is exactly what I was wondering. "Couldn't this just mean that they're self-sufficient now?"
My takeaway is that Erlang/Elixir aren't designed to squeeze that much performance with that setup and that the Discord team went out of their way to optimize hot-spots to make it possible.

Erlang/Elixir are still quite impressive out of the box, even without these Discord-specific optimizations. But they probably wouldn't scale to 5M right away.
I get:

> You cannot visit nsa.dod.afpims.mil at the moment because the website sent scrambled credentials that Google Chrome cannot process. Network errors and attacks are usually temporary, so this page will probably work later.
Paid for by.... Mr. Pai? Follow the money...
Who benefits from forcing DNSSEC?
On a sidenote, looking at their Github, they publish a lot of names / emails in the git logs (~100). Some are encoded / anonymous, but most are real looking names and plausible email addresses.
Subtweet
I was super interested in buying one of these, but the markup is just too much for my tastes. I built out a reasonable workstation (9900K, 16 GB RAM, 500 GB NVMe SSD, 1TB SSD, RX 580) and the cost came out to $2,359 versus the $1,582 it would take to build it myself. I could understand a markup over retail of $100-200, but $700+ just isn’t a good value in my opinion, especially when I wasn’t selecting affordable parts.
Title is misspelled.
> there is a God, this life is not our beginning nor our end,

Downvoted because this is an extraordinary claim without falsifiable evidence. And my experience following that path was not a harmonious one. Perhaps it is better for us to cooperate more, but I'm not convinced that wildly varied interpretations of imaginary authorities are the best way.
Harvesting, Searching, and Ranking Knowledge from the Web
Chat over IMAP, isn't that just email... :)
This likely hasn't been made clear to them with a terrifying example yet.

Guessing they currently don't have a hardware LED because it might freak people out how much the camera is actually on. Likely no onscreen indicator for the same reason.
If they were going to make this change, they'd have to weigh the benefits of making this change against spooking users who have no idea why their bank app is using their front facing camera.
They mean that System76 doesn't use an OEM, they use a white box ODM. You can buy the exact same laptop from several different companies.
I already somewhat routinely spend multiple hours playing text-heavy games in it, and while I'm sure it would be a problem if I spent my whole work day in it, I really feel that the resolution is the only thing that would be needed to be bumped up to stop the little strain I do feel.

That's what annoys me so much. I feel like the tech is already here, but nobody is putting together all the right parts for some reason. We have high enough res displays (IMO), we have the tracking, we have the "AR" aspect, and we have the ability to project screens into the world around you, but nobody is putting all those parts together in one package!
Yup. IDA Pro is the gold standard, and was basically the only choice for a long time. It's also stupidly expensive and priced for defense contractor funny money, with an individual license nearly $3000 [0]. Most freelancers just use a cracked copy or the freeware version.

Recently Hopper and BinaryNinja have been rising in use, with much more affordable pricing plans, but they're still second-rate as far as I know.

(There's also radare2, which for all it's mentioned occasionally I don't actually know anyone that uses it)

0: https://www.hex-rays.com/cgi-bin/quote.cgi
I don't know about that A-series chips are competive with low-end intel in single-threaded performance. And they keep getting faster each year.

If that team were to design a bigger core aimed at laptops, then I wouldn't be surprised if they could make it competitive.
> Akka / Scala is another take on the whole actor based architecture, and seems to have considerably more traction (hiring talent will be easier for your manager).

They solve a subset of the problems that Erlang's OTP solves. They don't have the entire package.
We do indeed. Rustler is very cool!
>> How would you make it so that printf doesn't crash your entire program if the console hangs.

Why would the console hang? If that happened, it would signal a major issue at the OS level and probably not related to your application (unless you're trying to log an extremely massive string; which is a bad idea and you'd probably already have run out of memory before that could happen). I have never seen the console/stdout hanging in production and I've built some pretty high-traffic distributed systems with Node.js.

>> how would you isolate a single codebase's IO operations ?

What sort of IO operations are we talking about? Network, Disk? There are many ways to inspect different kinds of IO operations. The Node.js ecosystem offers a large number of modules which would let you achieve that.

>> How would writing to console work in a multi threaded environment ? multi server ? 100 servers ?

Node.js is perfect for running on Kubernetes. There are many K8s dashboards and tools which allow you to browse and aggregate logs from thousands of machines with very little effort. I don't see how this point has anything to do with Erlang specifically. A language-agnostic container orchestrator like Kubernetes is the best way to go over a tool which only works with a specific language.

There are Node.js frameworks which offer kubetnetes .yaml files and CLI tools which allow you to deploy a highly scalable cluster to K8s in a few minutes.
Why bots were DOA but messaging is still thriving
We would still use our own homegrown system. And we do use kafka internally already for a plethora of other things. Just not on the real-time chat side of things.
Meh, most people can afford a house somewhere in the US. I have a friend that does gas station convenience store attendant level work and owns a house in Iowa. It isn't much but it has a yard, was in decent shape at purchase and only cost him about 100K.

What most people mean when they say they can't afford a house is they can't afford a house in or near Boston, NYC, Seattle, SF, DC or some other hot and important urban market. That's an entitlement problem not an affordability problem. People feel entitled to live in certain locations.
You should read on the fault tolerance guarantees of Erlang OTP. It's really hard to be summarized. Supervision trees, "let it crash and get safely restarted", super-mini-processes that have preemptive scheduling built-in, soft real-time...

TL;DR: No, no other language or framework in the world has the primitives that Erlang and Elixir have.

People on HN and Reddit really love acting non-impressed and claiming the pain points are easily solved in other languages.

My 17 years of career say this is not true at all.
For once I feel like the military could help: they probably had similar issues in unrelated fields, and may already have a organisational protocol to deal with those. Maybe we should ask them.
This is a bit similar to what I had been thinking for the past several weeks. My approach was a little bit different, and involved excel-like mechanisms with a bit of AI sprinkled on top, but this might be even better, though harder to do.
Without a definition for "high performance" the statement doesn't really say much. If we had a definition for it, we'd also have to ask if "high performance" was even a goal for the reddit team. As you stated, reddit is the most popular forum on the internet and it has continued to grow even with the new design so perhaps the performance concerns were considered premature. I know some would disagree based on their own issues with performance, but it's at least safe to say that most people using reddit don't seem to have a problem with it (if there is one thing redditers love its to complain loudly about why reddit is going to shit)
It's ok to build strength and character, but that doesn't mean you have to be jerk or a liar at the same time. IMO if you have to lie or be a jerk, it's the opposite of a strong character.

Your argument started with "it's easier to get laid, if I'm a jerk". And now your argument is "it pays to be a jerk in harsh environments".
First of all, I hope women aren't included in your harsh environment.
Second, you're right. Absolute commitments without exceptions is rarely good advice. There are always exceptions. My criticism is about finding a balance of being a jerk. There is no balance to be attained. There might be exceptions, but not something to balance for.

I'm aware that I feel very strongly about it. That's why I couldn't hold myself back from writing a comment. For me this is very important, because I get the feeling, that humanity is drifting towards dishonesty. It's even expected to be lied at. For example, my co-workers lie to our customers if we missed something or implemented a bug in our software. It's not an option anymore to say to them straight, that we made an error! How stupid is that? The customers wants to be lied at! On the other hand, if they did something they're not supposed to do with our software, they lie about what they really did. This gets me so angry... Sorry, I'm going to stop now.. :)
I just submitted a link for a recent DNS attack on .com and .ve ccTLD domains, any chances that this:

> On 15 February 2019, in response to reports of attacks against key parts of the DNS infrastructure..

Is related to said attack ?

heres the link for the dns attack by venezuelan gov

https://news.ycombinator.com/item?id=19240685

it's worth a read
If you end up doing it, please make a blog post for people who have the same questions as you do now.
This workism sounds exactly like the puritanical ideological bullshit that's been going around in America for hundreds of years fueling all types of hideous cultural practices like the current obsession with work and productivity. This is clearly a culture pushed by the business owners who undoubtedly would be happy to have slavery back if it applied to everyone but themselves. It's sick, disgusting, and oppressive. It's the sign of a seriously broken culture and society that no longer meets the needs of workers but only of their masters.

I don't know how you fix this at the societal level because such stupid ideology has been around for so long, but at the individual level it's possible. Individuals can start to recognize and see through the bullshit of this ideology. Some will even be able to disconnect further from work and focus on what they value rather than what their masters value. The more disconnected, the more disengaged, and the less work people put in for their overlords, the happier they will be. One promising avenue is remote work. In a remote setting it's much easier to reject this stupidity and just focus on doing a reasonable amount of work, then moving on to non work stuff. Some management of appearances is necessary, of course, as the corporate overlords would be unhappy if they found out their employees were not 100% invested even if they did all the work asked on time with great quality.

This is one of the worst aspects of American culture. It's almost like the slavery mindset never died. Instead, the new wage slaves have taken the mindset and co-opted it for their own identities. If I had to guess why, it'd probably be because our society does not provide much else for most people. Money is such a focus, most people never think of anything else, even when they have plenty of money. Or perhaps in a society where any little accident can bankrupt a person and send them to skid row homeless, there's no such thing as enough money and people are too scared to do anything but work and earn money. I know this last thing keeps me up at night, and I have to consciously remind myself that there is more to life than preparing for disaster.
Investigation of Hermes UK Reviews on Trustpilot
SDF is great and all but ClearType is a necessity if we want text as ubiquitous and cheap as 2D computing. If SDF is the way to go, Microsoft should standardize it themselves so we don't need to pack texture sheets of every language of Ariel into every app.
In the link I documented at length why the evidence is sufficient for me, after long consideration, experience, and testing. And it gives me great comfort and direction etc. (And I mention somewhere down in there how it relates to science, which I greatly respect.)
Maybe I'm confused about this detail of DNSSEC in which case I retract that claim - I thought it's possible to advertise a false key with a long TTL and use that to prevent people from accepting records from the true key, if they still have the false key cached. If it doesn't work that way (e.g. if all resolvers will update to new keys and accept signatures from them), great.
I would loved to have seen benchmarks.
I think multiple dispatch will scale perfectly fine for large projects when it has better IDE support.

There's no reason Juno or any other IDE couldn't display the output of a static analyser inline, or allow you to command-click a function call to go to the site of the exact function being called, or show a list of alternatives, and so on.

Give Julia and its IDEs a few years to improve and you might find it much better suited to large projects. I wouldn't consider Java any good for large projects either, if it didn't have the excellent IDE support it now enjoys.
I like parser combinators, but I think they obscure the formal definition of the language being parsed. There's something to be said for having a declarative specification of what you're parsing.

This is less important if you're just implementing a parser for an existing language or standard, but if your implementation is going to be the reference implementation, then I think it's important to generate your parser from the formal language you're working with, to give other implementers confidence that your implementation is correct.
Having spent many years in US Navy Radar Rooms, NOC's and the like. I can tell you that white interfaces are the digital equivalent of being snow blind. it's MUCH easier on your eyes and your vision if you utilize dark backgrounds (or darkmodes) than it is to use bright interfaces... that's not just my opinion but something born from experience...
Yeah, I really don't get his comment there. Whenever there is a crash, the launch provider usually does not launch RUD is fully investigated. The analysis is equally exhaustive (if not much more so) than in the aero industry.
While AWS supports DNSSEC for domain registration they don't support it for DNS. While it does appear that most of these attacks would not have been prevented by DNSSEC isn't it about time AWS supported DNSSEC ?
Clearly, the 5% would be slaughtered pretty quickly. This is one of the reasons (IMHO) that jobs suddenly open up after things like Occupy, even if there's no tangible or realistic reason why jobs are suddenly needed.
What Amazon thing does Ubuntu install?
Ok, then I understand what you mean, and I agree with you. Most people are bad at hearing, in that context, for sure.

Or rather, we who have decades of experience in this field, have over average capacity for processing music and the sounds/patterns we have studied/practised. Then again, that is true for every field.

I do not however, believe "most people" (with less developed hearing) are relevant to why this "battle for the organs", came to be.
This is kind of expensive actually. Its usually done with a precalculated texture sheet of glyphs which trades memory for shader perf. See: Signed Distance Field
Crowdfunded whole-genome sequencing of the celebrity cat Lil BUB
Good to see NSA has got on board that removing the attack surface of US software is a top priority.
FYI, I was paying attention recently and calls from my bank that I requested have been marked that way, for e.g. 2FA verification. If I had turned on the option to block such calls I'd have been left clueless why I wasn't getting the requested call.
I think we did ask the military how they'd handle domain names on the internet, and they came up with DNS.

(Also, if you're going to let the military overrule decisions in your distributed permissionless blockchain, is there a point in having a distributed permissionless blockchain in the first place?)
Ninetyfive: React.js components for a faithful Windows 95 aesthetic
I haven't worked at US government so I am not 100% sure of the details, but this is my understanding:

HTTPS (tls, really) allows clients to present a certificate, just like the server does. This is commonly used, eg, for microservices authenticating to each other in a backend.

It is less commonly used for people to authenticate to servers.

In particular, the "Common Access Card" is the ID badge used by the DoD, various parts of the armed forces, and in particular the NSA (whose website this is). Those access cards have a key and certificate usable for this.

So your keyboard (or laptop) has a smartcard reader in it, and you can insert your ID badge (maybe with a PIN? not sure if usa gov't does that) to log into any website.

Browser UX for this isn't great. Unlike the newer Webauthn specs where javascript (and thus site-specific instructions) can ask you to log in, the browser has to prompt you in a very generic way to present your certificate.
Passive income is not science fiction My experience with Bondora from zero
Would wifi portals work in a world where DNSSEC was enforced?
Nothing does, 5 millions __concurrent__ user creating and sending new data in real time is huge. Not to mention video and sound.
The "new" reddit makes my 2015 macbook sound like its about to launch into space and the site really chugs in Firefox.

Old reddit is smooth as silk. I honestly don't understand why they changed it.
> The CTA goes pretty much everywhere and isn't an open-air drug market.

To be fair, the antisocial behavior I witnessed on the CTA {Green Line|Red Line south of Roosevelt} and the Muni is comparable. I've never been verbally accosted by passengers on CTA like I have on Muni, but I did witness blatant pickpocketing and a drugged passenger break the bus door on CTA, which I've never seen on Muni.

For what it's worth, my sense is that the issues that SF has Chicago doesn't--homelessness, untreated mental illness--largely stem from cost of living differences, particularly housing prices. Everything from opening shelters to operating mental health facilities to avoiding homelessness in the first place is easier when real estate is more affordable. (To give an example, my hometown of College Station, Texas--hardly a bastion of liberalism!--had a quite effective program for preventing homelessness in the '90s and the aughts: straight-up building enough houses to house virtually all the needy and pricing them far below market rate. This worked because of the combination of a rich suburban tax base and rock-bottom real estate prices, which would not work in Chicago or anywhere in California.) That doesn't excuse SF and the state of California from failing to better address the problems, of course.
I'd love to see an example of the language, I kept reading (the story is great) but it felt like we got left hanging without any code snippets to put it all in, uh, context I guess.
an open source competitor to IDA pro is very welcome, never thought it would come from NSA. have they said anything about their motivation to open-source it?
While doing ancestry research years ago, I learned I had a great uncle who immigrated to America from Romania aboard the RMS Carpathia in 1904. (Eight years later in 1912, this would be the first ship to come to the Titanic’s rescue, and six years after that would itself be sunk by a U-Boat.) My great uncle had left Romania likely to escape anti-semitism. He’d eventually find his way out to Denver. Sadly, he’d die in 1918 (the same year the Carpathia was sunk) at the age of 25, very probably from the flu.

This is a picture of him, along with his headstone and declaration of intent to become a citizen:

https://www.dropbox.com/sh/l16p7esag82jibs/AADTWigk7acJSrK25...

Google Streetview of his Denver, CO address:

https://goo.gl/maps/DEgz5WWai822
Teamspeak has something like this.
I've always wondered this - there's a real "pay for your useful tools" philosophy on here at least, for things like Sublime Text. Often quoted is the cost per hour of use, etc. which justify the price (which is admittedly low compared to Ida).

Does the same not apply to Ida where you would make the money back fast enough to justify the pricetag? Or is it that there are more hobbyists and less people making actual money from using Ida?
That was my point. You can control your browser, but you can't control what other people offer up.
I had this happen as well with a brand new precision model. What I found was that Dell had patched broken drivers in the kernel and then pushed the fix upstream (bless them for that!) Once the hardware was about 6 months old the vanilla kernel had the fixes and I was fine installing stock Fedora on the machine.

I was pretty happy with this compromise (tho I wish I had known up front about the custom driver). They didn't delay shipping but did future proof it. If they ever don't push the fixes upstream tho, they'll be dead to me ;-)
Since this blog post, we are well over 5m ccu (I don't think we have shared our current peaks publicly yet). We do egress 4m-6m websocket messages/sec through our system though at peak. So it's a lot more than just holding onto idle websockets :P

The power of BEAM is that although the performance may not be the best, throughput and response time is consistently low throughout the system - allowing no single process (or actor) from monopolizing resources of the system. When you use a homogenous server configuration like we do, this makes a lot of sense. Our largest guilds (100k ccu, 350k members) are on the same nodes as all of our other servers. And when they're busy, the small guilds notice no performance degradation.

Other chat products out there (that I hear use the JVM for their real time stuff) have to spin up dedicated resources to hosting their larger servers/clients - and even then cannot handle servers with as many users or concurrents that we can. Every single discord server runs in a homogenous cluster, without special dedicated resources for our largest instances.
An attacker could certainly do that, but they could also advertise bogus records (e.g. the MX record in mit.edu's case) with long TTLs so I don't think DNSSEC makes the worst-case recovery time any longer.