skysight-inc/HackerNews huggingface dataset:
This is really well done! I appreciate both the design, and the amount of thought and effort that went into laying all of this out and then honing it into a cohesive, well-written deck. I've been thinking and reading a good deal about distributed companies recently, and it's nice to see a perspective as solid as this.

I'm also curious for your take on one question: you describe yourself as "a remote team working all over the world", and also say that to keep the team cohesive, you try to overlap with other members of the team four days a week, and use CET as your "standard" time zone. The globe diagram makes it seem like all of your team members are relatively close to that time zone.

How would you support team members living in locations that are farther away (e.g. the west coast of the US), given that overlapping with central Europe would require those employees to work either very early in the morning, or very late at night?
Password managers are universally terrible, but until security experts stop telling people to use them, everyone's going to dump their sensitive passwords into incredibly poor apps written to put all your access in one place secured by one single password.

A lot of password advice today is bad. You only should be making valuable passwords (those that control sensitive data or access) unique. Forum accounts do not need that level of security and you waste cognitive power by doing so.

Banks, email accounts, and a handful of others are the only ones worth truly securing. And passphrases can be incredibly easy to remember, unlike passwords.
Yeah..

That'll be a hard pass on a bullshit trend word topic.

FFS...
is this the same company that's shilling Rekogition to police departments and governments?

for some reason i'm thinking this point of view isn't held company wide.
Wood-Stove vs. Pellet Stove: Which One Is Right for You?
So this is a userspace app that reconstitutes the VPN encapsulated datagrams into outgoing networking socket API calls, a bit like slirp in ye olde days? I can't imagine this process is very lossless, does it really properly handle multicast, ipv6, protocols other than tcp and udp, etc?

edit: apparently, the Android VPN is flexible enough that they can direct only DNS traffic through this process, which mitigates it quite a bit. This issue has some tech details: https://github.com/julian-klode/dns66/issues/193
- I am no security person myself. -

I always liked this idea: https://krypt.co/

Basically using an entirely separate device to authorize your access. 2FA devices still connect to the computer requesting access, I liked the idea that your phone act as the gatekeeper without ever touching your computer.

Problem is: It's a phone. Apple has done much but I wouldn't trust it either.
New Claim Dogs Oracle: I Was Unfairly Axed Because I Am a 64yo Woman
ICANN will never delegate .test. It's reserved per the linked RFC.
User Paid Commission of 3150 ETH for Four Transactions in the Amount of 0.15 ETH
Those aren’t “rugged” male leads
Lawns are the dumbest thing Americans obsess over. I've lived in apartments my whole adult life but if I had a lawn I'd be inclined to just let it go wild. Or maybe plant moss or something.
> 10. Connect with nature and the universe at large... 18. Choose love.

Even better, seek the creator of the universe and the source of love. Many people come to the conclusion that since science has enabled us to understand so much about how our universe works, we can jettison the idea of a creator. However, the contingent nature of our universe and everything in it requires a cause that is not contingent, and religion, especially Christianity, has been telling us about that non-contingent cause for centuries. I urge people to seek out that cause by looking to the testimony of the generations of good people who claim to know this cause.
Nest makes many products. This one is a security/alarm system.
Your threat assessment is backwards. Someone needs physical access to your computer area to steal your notebook. Anyone anywhere on the globe can make a reasonably trivial attempt to get malicious software on your computer.

At any given time, the number of people who can attack your notebook is... maybe five. The number of people who can attack your computer at any given time is seven billion.

(Also, there are trivial things you can do to make a paper notebook even better. Write the passwords consistently slightly wrong, according to a rule that you only know in your head, or have a common part of all of your passwords only you know, and then use the notebook for uniqueness.)
Organic products are often more expensive, but not necessarily 3x more expensive, or anywhere near it

Carrots for sale in Ireland in one of the most popular supermarkets - https://www.tesco.ie/groceries/product/search/default.aspx?s... ... organic ones are more or less the same price as non-organic
Read it again. The renter offered to install their preferred solution on their own cost, instead of the owners preference. The owner refused, insisting on having the one they picked.
I don't know what Amazon will do now or at any point in the future if I were to do a charge-back or any else they don't agree with. I imagine they could easily link my accounts together. Payee names, IPs, logging out of one account into the next in the same session. Any other meta data like phone, search history, etc. It sounds like a reach right now but the fact is there is no way to know what they do and its the unknown that causes a problem.

I am well aware of the need to diversify. It is something I am actively working towards but there is no path from here to there overnight.

I still partly agree with your consumer stand point. Even if you rule out the business aspect Amazon is pretty entrenched in may ways from purely a consumer standpoint. If I personally don't care what happens to my account, what about my family? Will their kindles stop working, prime video, audible, whole foods, etc? They share some of the prime benefits so they would be affected as well.
Yes, you can take a look at the source code and recompile the ISO to match the hash. If the compiled ISO hash doesn't match, then it isn't the same code.
First person to create "thisdoesnotexistdoesnotexist.com" with some appropriate functionality wins one Internet. And apparently several HNs.
I’m Leaving Google for a Startup (Matt Welsh)
It's worse in some places than others. Oregon, for instance, is famous for its drivers being too polite.
The intentional and willful breaking of screen and tmux was to fix a GNOME bug of GNOME not closing up as it should when the user logs out, so systemd was changed to mass kill processes. The interplay between GNOME and systemd in backroom dealings is a major pain point.
>massive demographic the studios could exploit the Hell out of

who? readers of a novel?
Have you tried edeliver? it make use of distillery and I find it easy to deploy with, I guess it all boils down to your server architecture but you should give it a try someday.

https://github.com/edeliver/edeliver
You're welcome. Again, I appreciate that you probably have much more comprehensive data to go on than my mere anecdotal experience, but I think it would be useful to include a more standard introduction for visitors who don't need so much handle-holding, such as those coming from other libraries/frameworks and already happy setting up tools like Webpack/Browserify/Rollup/etc. Those of us who play the mentor in the previous story would certainly appreciate it. ;-)
Fun fact, the toroidal cat is actually a stable gravitational configuration along with a spheroid. There are upper and lower bounds on angular momentum and mass of course, but within those bounds you can have a toroidal cat orbiting its primary!

Wait, what’s a cat again?
Doesn't most advice like this lack nuance? That is what makes it easily consumed and processed. We attach our own rationalizations and perspectives to it.
In my last company the toxic guy was the one who was extremely loud and obvious, always burning the midnight oil, running around like he was on fire. i.e. squeaky wheel.

In reality he was causing 10x more problems than he fixed, and for multiple years in a row his personal overtime spending was significant in a company of 500 employees.
And if, it's on lsd.
> If your goal is to make money

That's one of the reasons why we have so many poor movies (the other reason is that making movies is hard). If your only consideration is making money, you'll produce whatever crap is cheapest to make that still makes reliable income. This is why e.g. consumer market is full of barely-working near-disposable products which existence is a pure waste of natural resources.

Seriously. There's no rule that says that the most profitable product is also the best for the user. In fact, it's almost always the opposite, and A/B-testing things to death leads to the former type of product.
That depends on the management and is part of what makes a good manager. I have heard of many accounts of successful and well liked technical managers admitting their job is to be a shield to their team/abstraction layer to allow them ability to focus and explore appropriately while not being buffeted by contradictory direct commands and meetings - all while not ignoring them unduly either.

Upper management was perfectly okay with that because they had good release quality and time tables.
That's not why. I live in the DC area, and everyone here is from somewhere else (many from outside the country). People are still much more polite here, and it's much more pedestrian-friendly than in other metro areas, particular Florida.
Coming next thispoodoesnotexist.com
I agree! Author is the asshole. Could have kept his response as was (make the changes yourself) or not made any response at all.

The author approached a doxxing vs harassment discrepancy, doxxing seems much more uncivilized.

Further, I think the author should consider the features of his software and the people it attracts. Frankly the author could have ended the conversation earlier when the complainant specified that his use of the software was to harass.
Or other wise called a list of dependable design choice that the author doesn't like and a list of incompatibility with the tools the author used before.
I'm not saying the microphone was ignored or forgotten about, I'm saying the "add that line to the specification sheet for public release" was forgotten about.
> I’ve made the same basic comment before, but we need to ban the residential use of herbicides and pesticides.

This reminds me of a thread in my local suburban community's Facebook group. Someone was complaining about his dog repeatedly eating some small mushrooms growing in the backyard of his newly bought home and getting sick. The backyard was wildish, had flowers and some patches of tall grass, rocks etc... It actually looked pretty good. The whole thread was about herbicide recommendations. He ended up killing most of his vegetation and finally decided on 'installing' a lawn. A sterile all-American golfcourse-like green. All so that his dog can no longer eat mushrooms. Fucking idiots.
I mean I agree that it should just show you the output of "systemctl status" in the error message, but your comparison isn't entirely fair. The commands systemd error message give will show you the same thing as the generic sysv output.
Yes something like this: http://www.whichfaceisreal.com/
What if someone steals your laptop and decides to see if they can get any sensitive info off of it before they wipe it and sell it?

Probably not a common scenario right now, but if this threat goes unfixed for a long time and tools become available to automate the attack I could see it becoming a problem.
Elon Musk on Bitcoin: Structure Is Brilliant
The DOT is part of the state government, and as such responds to the voters. This problem is caused by the residents of Florida ultimately.
Sure, that seems plausible. If the existence of the microphone wasn't a secret internally, why would PM or devs or QA or government inspectors be disturbed to see it?
That was my first thought too, about how this can cut down on new information that isn't supported by medical literature. I have some weird food issues that I can't find any research on. Some people with similar issues go on an all meat diet, which might not be the most nutritionally complete, but it beats the hell out of their regular symptoms. It would be a shame for discussions like that to vanish under the premise that it doesn't match the food pyramid.
How to Use MParticle's SDK to Collect and Activate App Customer Engagement Data
Baby Boomers! The film Forrest Gump was basically Baby Boomers: The Movie.

It was a Greatest Hits album of everything the stereotypical Boomer would consider great and memorable about their childhood and young adulthood.
I was thinking of the most common organic thing we buy, which are eggs -- usually about .69usd/dozen for the regular ones and 2.99-3.99usd/dozen for the organic ones.

I'm sure there are many other things one could look at, but in general at the stores where I shop it's around that.

ETA: Logically, the comment doesn't make sense anyway -- farmers like money, they're not ideologically hanging on to spraying their crops with unnecessary poisons because they want to.
>In the mixins are considered harmful blog the point is made that sharing logic between components is a mistake and you should be using composition to achieve the desired outcome. Why do I need hooks? Is composition considered harmful now?

Hooks are composable, unlike mixins. That's pretty much their whole point. Hooks are functions so you can pass values between them.

Consider that reading everything with a cynical mindset might be obscuring the design. I encourage you to play with it a little bit to get a feel for it.

>If splitting your logic into lifecycle methods was too disjoint there was way more going on in that component than their should have been.

I don't find this argument convincing. I'd love to see your take on abstractions for subscribing to data, form input, or animations that allow similar expressiveness to Hooks. https://medium.com/@drcmda/hooks-in-react-spring-a-tutorial-...

Dismissing them as unnecessary doesn't really point to any concrete solutions so it's hard to debate.

>Besides this not making any fucking sense, why don't you call new and leave me out of it?

Sorry, I don't know what you mean by that.

I tried to answer your questions the best I could. It seems clear that you don't find Hooks useful. That's cool.

I'd be happy to continue this discussion but I'd appreciate if you could tone down the aggression and snark a little bit. You seem to be very annoyed by our conversation, in which case I'm not sure why you talk to me at all. Answering comments like this isn't a part of my job, and I'd appreciate if you could at least talk respectfully even when you disagree. Thanks.
I'm a bit disappointed they didn't use some old movie terms ... maybe it's in the code such as a "LEGS quotient". They used to ask if a movie "had legs" because legs puts butts in seats.
Solaris and other Unix had things like systemd already.
>Yes, I have 100% doubt anyone is spying on anyone.

Really? Did you ever hear of a guy named Snowden? Do you understand that our government spends tens of billions of dollars annual to spy on people? Do you understand that Google, Facebook and every other search, advertising and social media company have billion-dollar business models based almost entirely on surveillance and information hashing? I hope you are being sarcastic here.
> We need to allow people to have native plant yards. I've seen great results with insects. Unfortunately it's illegal where I live

Illegal!? Seriously??
I wonder if password managers should consider running under a higher privileged account (eg administrator). This would prevent lower privileged processes (eg your typical drive-by malware) from being able to get a handle to read memory without also using a privilege escalation technique.
Yeah, just as a thought exerise I took a look at my DB.

The high value things (bank, email, web hosting accounts) all have 2FA enabled.

The lower value ones, I can easily recover from a breach by simply resetting the PW via my email.

The only real threat I see is if you're storing passwords to things like encrypted containers (Veracrypt, TrueCrypt etc) but as you pointed out if they'd had something running on your system you're hosed either way.
The best kind of wrong? :)
Anecdotally: my uncle has been driving an '88 Oldsmobile Cutlass for the last 30 years. I remember riding in that car as a kid, and him giving me an uncle-y lecture about how when your windshield is caked with bugs, you don't want to run the wipers, because it will just smear them all around and make it hard to see. He then demonstrated that to me, something I remember vividly (we stopped at a gas station shortly after to wipe them off with a squeegee). Last summer, driving on that same road by the lake, same time in the early evening, I commented on some of the bugpocalypse stories I had read. He hadn't really thought about it before, but his Cutlass' windshield was dramatically cleaner than the night I remember in the early 90's.
I live in a town here the main street has a posted speed limit of 25 that absolutely nobody obeys and the average speed of traffic is always around 40.

If you take a road with a "natural" speed and try to artificially restrict with a speed limit, unless you are prepared to have officers posted on that road at all times ticketing people will ignore the limit entirely and go the "natural" speed of the road.

I see it all the time, all over, especially since I live in PA where the state thinks its a really sensible idea to keep almost every highway at 55 mph no matter what. When you try to heavily constrain car speed well below the natural speed of the road people simply stop trying to obey the limit at all and go whatever speed they want.
How to Monitor and Analyse Network Capacity Usage
I had a client who required me to use LastPass because he didn't want me to see the the actual password. I was wondering how that was even possible, maybe some kind of magic I didn't know about. Turns out it's trivial to get the passwords using a browser's built-in inspector.
>The other findings about sensitive information remaining in memory even _after_ the password managers are locked are concerning however.

Sounds like a reasonable countermeasure is to quit the manager when not in use.

After all, I'd need to enter my password if I was "unlocking" or restarting the app either way. (At least in my manager)
Möbius Strips Defy a Link with Infinity
"true in part ..."

Sure, it would not get the initial visibility. But we would not keep using it if was an ineffective language.
It makes it a lot easier to set up a service than System V init. Writing a service file is much easier and less error prone than writing shell scripts.
Even for many 2FA devices however, root access on the accessing machine can allow for hot online attacks. Not all tokens include some kind of system independent operator intention mechanism, ie., you must touch the token or input a PIN or biometrics on the token itself for each action. Many instead have the PIN inputted via the connected system. The token does protect the private keys themselves of course, so a remote attacker can't take them and then utilize them independently later, nor prevent the operator from removing the token or whatever. But with root, and while the token is in the system, attackers who had already taken the secondary auth (trivial with that level of system access) would be able to silently use it for anything the operator could. And even for tokens that do require an independent physical operator presence and decision indicator, root would still open up a lot of paths for social engineering (ex, wait for them to want to perform a real 2FA action, intercept it insert the attacker's own, then show an "error try again", then allow it to proceed so it looks like a brief blip which many users will ignore).

Basically even pretty good 2FA systems aren't at all full defenses if an attacker has root. They can help in very important ways to minimize the potential damage, to make recovery easier (since private keys are never compromised), to aid discovery/auditing, etc. But it's hard to avoid there having to be some trust in the client at the end of the day. And it's often a lot better to decentralize trust into client devices rather then something that can be centrally compromised. It's much harder for attackers.

Password Managers are no different, their raison d'etre is essentially trying to move the trust foundation more to clients. Client trust is a req though and any "compromise" that depends on controlling the client is uninteresting. They're basically a hack recreating PKI badly, but in a world where the technical foundations for a proper one didn't develop it's a good bandaid.
Show HN: Python Script to Generate Fake Datasets for Testing ML/DL Workflows
Documented where? Honest question. The marketing department isn't going to list something that's totally non functional. Is there a privacy oriented spec sheet somewhere (that people will actually read)?

I can see this slipping through the cracks between different job roles' responsibilities, although after this incident they'd probably go through a post mortem and find a way to incorporate new checks into the product launch process.