skysight-inc/HackerNews huggingface dataset:
> That's always been a question in the back of my mind when seeing all these canaries. Anyone know if ordering a company to do this is feasible under US law, either by force or by authorities taking over private keys and doing it themselves? Canaries appear to be pretty much untested in court.

The evidence shows (IMHO) it is likely the government has enough power to obtain your keys by force, issue a gag order, and take actions against your users before the case works its way through an appeal process. The only question is if you'll be willingly participating in the activity or if it'll happen while you're in lockup.

"Pete Ashdown, CEO of XMission, an internet service provider in Utah, knows. He received a Foreign Intelligence Service Act (FISA) warrant in 2010 mandating he let the feds monitor one of his customers, through his facility. He also received a broad gag order."

https://www.buzzfeednews.com/article/justinesharrock/what-is...

"My company, Lavabit ... [snipped, see URL for this background info paragraph]

But that wasn't enough. The federal agents then claimed that their court order required me to surrender my company's private encryption keys, and I balked. What they said they needed were customer passwords – which were sent securely – so that they could access the plain-text versions of messages from customers using my company's encrypted storage feature. (The government would later claim they only made this demand because of my "noncompliance".)"

https://www.theguardian.com/commentisfree/2014/may/20/why-di...
Major Theories in Environmental Psychology and How They Affect Us
Sending Keybase Chats Using Vim
Tips to increase online t-shirt sell with help of T shirt Design Software
Are there benchmarks to provide metrics on this ? Depending on the amount of garbage generated by the runtime the cost might be lower than in theory.
> the CEO or shareholders didn't invent the computer either, and buying a PC is a fairly small expense, so why should they be the ones to benefit from the increased productivity?

Because the company owns the computer, and the work done by it. The employee is paid to do that work, and the CEO is paid to do their work. The company (and the market) decides what they are willing to pay the CEO, the worker, and the share holders, and each of those parties agrees to it. These are not slaves, none of these people are forced into these agreements against their will.

> Because they hold power and the regular employee doesn't. I think that's the only real explanation for this discrepancy: CEOs and shareholders have power, while the regular employee doesn't, and that power imbalance means more money goes to the CEO and shareholders.

Or because they are worth less in the market than the CEO is. What those parties have is "leverage" and "marketability" and "ownership", not some evil "power" construct. Ownership is available to general employees in a co-op, and people are free to join them, or start their own companies. If they choose not to, that's their choice.
Yeah but I don't know any language used by hundred of millions of people that doesn't have many gotchas.

Could be worse. The future language could become a mix of emoji and markup language :) ;) :D
You probably need nginx in front of this.
Fast R-CNN – Overview
>It's difficult for me to take someone seriously when they're making statements about internationalization not requiring any additional resources.

I don't think is the intended meaning of the quote. Based on the rest of his response it sounds like he's saying, "Non-English speaking customers matter just as much to us and as an organization the default should be 'support i18n from the start'." If your default is "we must support languages other than English" then it isn't really "extra work", it is just core functionality.
Carriers are lying about signal strength.
Of course, you are completely wrong as other posters have pointed out -- CD is indeed a fully digital format (but it does not have a filesystem, just a continous stream of binary data with a TOC section near the beginning of the disc to tell the CD player about the timecode location of the tracks)

I thought it would be worth mentioning that you may be confusing CD with Laserdisc, the video format. Those look a lot like huge CD's but are in fact analog and work more like what you describe.
Actually, according to some of the greatest people who have practiced meditation (like gautam buddha), consciousness is a manifestation of your subconscious. It originates there!
Why pink? For the iron?
This is kind of what non-profit Worldreader does, takes Kindles loaded up with books and ships them to schools in Africa. See https://www.worldreader.org/our-solution/products/blue-box/
I agree the tooling is a tire fire :(

> e.g. an exploit in libpng even though your container runs nothing that even links to libpng

it's a problem because some services or api's could be abused giving the attacker a path to these vulnerable resources and then use that vulnerability regardless if it is used currently by your service.

I like my images to only contain what's absolutely needed to do that job only. It's not so difficult to do, provided people would be willing to architect systems from the ground up, instead of pulling in a complete debian or fedora installation and then removing things (that should be outlawed imho lol). Not only do I get less attack surface but also smaller updates (which again then is incentive to do more often), less complexity, less logs, easier auditabile (now every log file or even log line might give valid clues), faster incident response, easier troubleshooting, sorry for going on and on ...

It's a cultural problem too: where people working in an environment where it's normal to have every command available on a production system (really?), and where there is no barrier to install anything new that is "required" without discussion & peer review (what are we pair programming for?) or where nobody even tracks the dead weight in production or whether configs are locked down?.

I sometimes think many companies lost control over this long ago. [citation needed] :(
> What makes a good i18n and l10n expert

Another pet peeve of mine: using lazy abbreviations like "i18n", "w/" or "w/out".

These aren't even understood by many native English speakers.
If you liked this, you should read Art Spiegelman's Maus.
> Or do you employ an official to help pack the belongings of each individual who you think may eventually cross the border?

Without telling the person who's things were packed that they were packed by the official.
Encouraged by who? I see the same people which used to install jQuery or WordPress plugins and were able to get janky but working sites. But prolific module authors and node core contributors don't promote these approaches.

Maybe if you listen too much to twitter "thought leaders" you might get this impression, but we are all aware of the problems with social media platforms...
Wasn't clear to me from the article whether the firmware was modified via the BMC's network interface or whether it was done locally over some hardware interface exposed to the customer's OS. Was this really done over the network?
This was mentioned in Matthew Walker's book "Why We Sleep." Ghrelin and dopamine levels are high which keep you awake. It is suspected to be an evolutionary boost that you are alert more in order to find food.
Are these actually novel vulnerabilities, or just unpatched CBC vulnerabilities? As far as I am aware CBC has been discouraged for a long time precisely because of the padding oracle attacks.
72 DPI, document quality?

Ahh, the days before "retina displays", yes.

;-)
Can you explain how any of the above connects to anything else? If the markdown text will be reformatted for display, you get no benefit from writing it in a wider format than allows more than one source document to be on the display at once.

You seem to be saying that when writing markdown you have no need to refer to anything else?
> “What [the computer field] needs first is a William of Occam, who said “Entities should not be multiplied unnecessarily.” The idea that it is worth while to put considerable effort into eliminating complexity and establishing the simple had a lot to do with the rise of modern science and mathematics, particularly from the standpoint of creating new aesthetics...

The tricky thing is he argues for “sophistication” here[0], which on the surface seems antithetical.

Picking (and committing-to) a (correct) abstraction can be tricky. Also, these “axioms” are often made true by useless qualifiers like “unnecessary” complexity, or even “complexity”. If it’s required, it’s not “complexity”, but a necessary implementation detail. Pick in good faith, keep a loose grip, have fun.

[0] https://www.youtube.com/watch?v=NdSD07U5uBs?t=345
The node:10-alpine image is a better option [...]
while no vulnerabilities were detected
in the version of the Alpine image we tested

Note that Docker Hub offers no way of verifying download statistics per tag, so we don't know how many containers are using the base node image - in my experience everyone uses alpine.
It comes down to risk, cost, reward. If it costs you one developer 3 months to build a utility used by 5 people in your company, but would cost 3 years for a team of 5 to write an "engineered" version with security focus, it may never happen.

It depends on need and risk.
I also don't have a reference right now, but I would assume they've taken a thousand of random people and ran some statistical analysis on that sample.

Chances of someone from this thousand people being among the highest end are indeed pretty small.
Intuitively this seems quite reasonable.

Yet the period 1946-1973 saw enormous growth in all western countries and wages kept up with growth during that time.

Of course, it seems likely there are government interventions that damage growth. But apparently there are some that don't. In particular, progressive tax structures and social safety nets don't seem to.
Speech, like thought, is well protected. Saying "the courts are useless entities and I do not respect them" is well protected.

Apart from the first amendment, I think your missing the "and" in your quote. It's required that you "oppose or defy" the "authority of the court"... I.e. violate an order.

PS. The SEC is not the courts. Musk has been rather clear that he does in fact have respect for the courts...

Edit: And to be clear I'm not saying Musk isn't guilty of contempt of court, is just has nothing to do with being contemptful of the SEC (except perhaps his motive).
Fasting seems to be incredibly popular here - has anyone combined these longer term (3+ day) fasts with the other point they brought up, exercise, and if so, what has their experience been with that? I'm wondering how performance is affected. I know that a lot of body builders perform intermittent fasting, but I never hear about longer terms.
What prediction algorithm are you using for this? Not sure if it's mentioned elsewhere on the site
> So as long as your http server isn't vulnerable you're ok

… and everything loaded by every dependency under any situation which doesn't require admin access. Your server can be fine but if e.g. you process images you have to follow libjpeg, libpng, zlib, littlecms, etc.

Yes, it's a lot better than a full multiuser Unix system where you have to worry about background processes which aren't useful for a dedicated microservice but there's a long history of vulnerabilities in components being combined into successful exploits and it's usually far more expensive to try to analyze those chains than to upgrade.

This brings me to:

> Or same with Redis, which I hope isn't anywhere near the public internet?

That's hopefully true in general but also consider chained attacks: say you're running a web app and I find a way to run code in the app process. That might be limited but if I can poke at Redis enough to run code there I can test whether you were as diligent about sandboxing it. That'll hurt if, say, there was a container exploit which someone delayed patching because they “knew” our app only runs as an unprivileged user.
Show HN: Sqwyre – Research your ideal business location in England and Wales
> Of course leaving won't improve things because the EU will try to punish any leavers as much as possible. The entire EU situation is just depressing, because you can't leave, it won't improve and bad decisions keep being made and you're forced to abide by them.

Ultimately all bad decisions must be paid for. This is the hidden cost of letting the EU exist. Unfortunately, the longer it exists the more painful it will be to leave.
Whats the purpose? Most judges will understand what warrant canary is, and can simply ask them to continue signing it. Judge has the power to gag you, or force you to sign or continue doing something. Its very common in multi-scheme crimes where forcing one criminal to continue their criminal conduct is "greater good" for the sake of a whole investigation.
It's deceptive to call out-of-band MITM not MITM, it's still MITM just covert. TLSv1.3 forcing it to become glaringly obvious is exactly what should be happening.
When they were called out privately, no mistake was admitted and no action was taken. The attribution was only added after they were called out publicly.
Hi, thanks for bringing this to our attention!

We think we've resolved this issue here (https://twitter.com/syrusakbary/status/1094635228457426944), but our response was definitely later than it should have been. If you feel that we need to rectify further, feel free to email me at lachlan@wasmer.io.
Interesting. I don't have access to the full paper, but it appears that the individuals in that study were 28 when the research was conducted. I'll definitely be searching for recent studies conducted on the same cohort when I get the chance, but I do wonder if that correlation holds steady-ish over time, and also if it will be replicated with cohorts of a later generation as other economic climates develop.

I appreciate the information!
I think people don't switch between iPhones and Android phones enough to notice.

I certainly noticed when I switched from my iPhone X to a Pixel 3 XL. I went to known dead spots, and my Pixel 3 worked just fine. I had just chalked it up to T-Mobile sucking but I guess it was really the phone.
It may surprise a naive audience how recent serfdom and slavery were the norm all over the world. Here's hoping for building today a better tomorrow.

Serfdom emancipation in Europe: circa 1800, as late as 1864 in Poland.

Slavery abolition in US: circa 1800 in the North, as late as 1865 in the South.

https://en.wikipedia.org/wiki/Serfdom#Dates_of_emancipation_...

https://en.wikipedia.org/wiki/Slavery_in_the_United_States

https://en.wikipedia.org/wiki/Timeline_of_abolition_of_slave...
Emacs runs on Windows as well as Linux (& on macOS, too). It works fine on the terminal in Android, but you'll want a keyboard, too.

In principle you could add special Android bindings for emacs which would make using it without a keyboard somewhat useful.
Bare metal customers get access to the whole machine. We get to access the BMC for remote management (console, power management, etc). Apparently, you can configure the BMC via tools running in the host OS, without needing to authenticate to the BMC; I've used this to fix BMC provisioning errors, that would otherwise require a SL tech to fix via physical console in the bios screen.
One of the few things where Google Search is really awful for me personally. I've set it up to get search results in German (country of residence) and English (everything else). But I haven't found a way to communicate to it that for anything technical, I have a very strong preference for the English results.

If I search for "std::vector", I get https://de.cppreference.com/w/cpp/container/vector as the first result and https://en.cppreference.com/w/cpp/container/vector as the second. The German translation is just awful and completely trips you up if you know English. I don't understand why it keeps pushing them up.
So you're buying the idea that it looked at a bunch of code snippets embedded at various pages, managed to build a sub-model for PHP (separate from all other languages it should have encountered) and managed to generate a long, nearly syntactically correct program uninterrupted by English text?

And while it makes tons of obvious mistakes in English (which is a much more flexible and forgiving language), its PHP is somehow nearly syntactically perfect?

-

Examples from GPT-2 GitHub have a lot of code:

https://raw.githubusercontent.com/openai/gpt-2/master/gpt-2-...

To me, this doesn't seem like an argument in favor of this model "understanding" English (or C, or PHP). It seems more like an indication that it memorizes way more information than the paper implies and then does clever word substitution.
The expectation is that the encrypted link is not decryptable by a third party. If that isn't always true in the face of an adversary then claims of forward secrecy for TLS 1.3 are false.
Show HN: Control your Hue Lights through your Visual Studio Code
Growing up in a loving upper middle class home is not the same as the charicature of a snobby trust fund baby that you're envisioning.
Retribution could serve a useful purpose to those in power: a warning to others who are considering doing what you've done.
Unbabel Open-Sources Award-Winning Machine Translation Quality Estimation System
Anything that makes code review harder or less comfortable is deeply destructive to code quality.

It is entirely hard enough to get people to do meaningful review without kneecapping them by obliging them to side-scroll just to see what changed.
My God, the people on this thread. There are people out there, working as software "engineers," who think that if they can't personally find a vuln in 5 seconds, the system must be secure. How is this #1 on the site right now?
> They say this, but people with integrity are typically made fun of secretly or even publicly, declared dismissive and asocial, instead of positively recognized in any fashion. They are seen as "rude", as "expecting too much", and at every point of their life, it is as if the society is telling them: "let it go, drop down to our level". Not in those words, but with actions and with the general atmosphere of the society.

Oh my gosh, that is such a grim set of generalizations. What possible evidence do you have for those premises?

Is it possible you're thinking of the narrow set of people who have integrity and are public figures, then shifting to generalize to all people who have integrity? Because there are plenty of areas of life where people with integrity are not only valued but protected by their communities.
Anything for Mumbai / India?
Depends on what modules are used, how they are used and how/when your builds happen and are/were configured.
Cheap tyre iron included with your vehicle vs nuts over-tightened with commercial pneumatic wrench ... it's not that unlikely that the tyre-iron breaks. If it doesn't you may be unable to loosen the nuts. It's pretty reasonable to call out a mechanic.

If you're doing anything complicated you have to wrangle the vehicle computer.

I expect you're right, computers will get more complex, more proprietary, less open, less likely to use open standards, companies will do more to prevent users adapting or repairing them.
$450 for 1TB. Who else other than spies moving large volumes of data in as tiny item as possible, is going to buy them?
I only read the part you quoted, but I don’t see anything about a warrant canary?
A lot of people can't sleep when hungry, that's not uncommon.
Agree with this, but I have no idea what the out-of-proportion people climbing on Mt. Rushmore are supposed to be about.

It's less propaganda and more like an image salad.
Never skip on the unit tests, dude!
Could a company create a warrant canary for every user? Just a simple notice when you login to your account? If the premise of the canary is that they can force you to keep silent but can't compel you to speak, what would prevent a company from doing this?
Recently there has been a lot of talk about the intermittent fasting diet (fast 16 hours, eat for 8). My friend is a doctor and started the diet himself a few months ago, and takes his bloodwork every week. He says it's making huge improvements in his cholesterol and other blood levels.

I've been trying myself recently and so far no big changes, although I have lost a couple of pounds. But I think that's just because I had to cut out late night snacking!
Could it be that the "3 convictions and you are out" comes from trying to balance the fact that the system believes if someone is caught 3 times, they are likely to have done other times without being caught and that they will continue to do so for the foreseeable future (prison is not acting as a deterrent). Coupling that with the material and psychological impact on the victims, the system believes that society is better off having that person imprisoned for "close to life"?

If that is the case, society then needs to start looking at other incentives (carrot & stick) that can limit the risk of re-incidence, such as better reintegration mechanisms.
I feel that way about all social media, not just isolating Twitter. Social seemed to make narcissism accepted as the norm, and encouraged it.
Well, considering the amount of dependencies in popular projects like CRA that was highlighted here a few days ago I don't think it's unreasonable to extrapolate to the general ecosystem. Of course there are module authors and devs doing it differently, but in general most node projects I see are more dependency-happy than projects I see in other languages.
> you need to be able to get to the reddit user names.

I don't understand how you can think that's a reasonable thing to ask for, given what this thread is about.
I use w3m which can display images inline (im sure there is a way for lynx to do this as well) I use this for 4chan and HN.

For all other web needs I just hit super+shift+w and it makes a new chromium window in a new workspace.

Writing custom keybinds for launching weirdly specific applications is my favorite part of i3. My least favorite part of i3 is dealing with parts of the UI that I am very used to being graphical, like sound management. I end up installing gnome applets but I would love an alternative to widgets in i3bar.
Abnormal environment experiences do affect normal bodily functioning in animals and us. Its good that they are thinking of ways to advance technology without compromising our health.
An update: Edwin from Stripe reached out to me and I'm much happier with the resolution he proposed. He also indicated this was an anomaly and unusual and explained why, and that they are putting things in place to prevent my situation from occurring again. I'm feeling much happier about using Stripe Atlas at this point. He did not ask me to write this but I felt it was important to note that Stripe as an organization worked hard to make this right with me.
Same as with variable scope in the language. Every variable is persistent until deleted or released. Such a language would need to manifest transactions (or some other behavior for consistency), but much of it would be handled with existing language concepts.
Cold dead hands won't be writing any more unreviewable code.
Gotta love my 2.5kg W520. Once I get the spare dosh to replace the ram and maybe HD, it'll be good for another 4 years, and I got it secondhand in pristine condition. My old X60, which was second hand, got used 3-4 years, and got resold, yet again! These machines aren't beasts, they're leviathans before which apples cower to their core, shedding their to-some-shiny, -seductive red skin.
I do not awaken hungry.
Computing in 128 Characters: Wolfram Employees One-Liner Competition
> www.zachaysan.com/I-havent-been-paid-off-by-the-Mossad

Well, it doesn't resolve for me... The only conclusion is that you've been paid off by the Mossad.
Yeah, that sounds about right.

I would be annoyed with a coin slot in an elevator that said "insert 25 cents to close doors" and then it did nothing, however.