skysight-inc/HackerNews huggingface dataset:
From people I know who've interacted with the customer service representatives, in particularly weird/complicated situations once you've reached the second or third tier of people who resolve unusual problems, and authenticated yourself, it's possible to get them to read back your own password to you.
I guess you could look at major European cities like London where CCTV is pervasive and other cities with considerably less.

It seems to me that most of the justification for surveillance systems is focused on edge cases, terrorism and paedophilia which are statistically unlikely of affect the vast majority of people.

If you watch some of the reality TV you see in UK about CCTV surveillance you’d think the county is suffering from a crime epidemic when in fact a lot of the situations are minor and often escalated by overly aggressive police officers interacting with uneducated angry drunk people.

Better social policy regarding education and alcohol would be the better solution.
Nobody ever got promoted or a raise because the core product 'just works'.

As an engineer, you need growth in headcount or complexity if you want a raise.

It's a people management problem that flows from the CEO and form the HR department, not a technical one.
Linux 5.0
It’s great that we have access cheap and open hardware projects like these! This new product line up is exciting.
These articles tend to attract comments with dire predictions for US society if people knew each others salaries, so just a reminder Norway always does nationwide salary transparency

https://www.bbc.com/news/magazine-40669239
Which distro are you using? The last I tried with Ubuntu, it "just didn't work", i.e. failed with very unhelpful error message.

Bonus points if it's possible to install to a partition in existing FDE container (saves a /home backup-restore external drive round trip).
If the market were perfect the coin should become valueless if 51% attacks are happening?
Maybe link to all the answers instead of just this one ? IMO the other answers are much better. It's crazy what journals will publish without even looking at it.
> Government doesn't care about me

Until they do.

Hi from Germany.
> How typical is it for the Chinese to use English headers in their DBs?

very typical. because unicode table names or key names are rare.
You said you were 15 and it was a very popular software that needed to be installed relatively often.

I guess people on here are 30-ish, so it happened 15 years ago in the 00s. This hints strongly towards WinXP, which has a few famous leaked Serials.
Trussle | Product Engineer | London | Full-time | Onsite | https://trussle.com

Hi, I'm Jonny and I'm one of the Product Engineers at Trussle, a free online mortgage adviser.

We've been using technology to make getting a mortgage simpler and faster - all for free. It was our 4th birthday last week, and we've been growing every year. This year, we want to expand the team to specialise our teams and move faster in a competitive market.

We've fallen in love with TypeScript, but we're looking for any engineers with JavaScript experience who want to work in cross-functional teams and take on the responsibility of understanding and solving big issues for customers and our internal operations team.

If you're interested, you can read more about the team (or apply for the role, hint hint) on our Product Development blog: http://trussle.github.io/jobs/

If you have any questions, get in touch with us via work@trussle.com or tweet us @TrussleTech!
Yes, katakana is inspired by Chinese characters... roll eyes.

For example, the Katakana character you mention is directly taken from Chinese.
At least yaml allows for comments. This is not supported with JSON (at least not with most parsers).

I recently migrated a javascript project to typescript. We had some yaml based localization file and I decided to turn it into a typescript file by translating the yaml into json and then turning that into a ts file that exports constants. Crucially, typescript can do type inference and multiline strings.

The benefits of this are that I can now autocomplete keys in the file elsewhere in my code and get their type inferred correctly.

Similarly, gradle now supports kotlin in addition to groovy as a language for specifying build files in. The gradle dsl is more or less a declarative DSL. Using a statically compiled language such as Kotlin means you gain type safety and better tool support (autocomplete, correctness checking). Relative to Groovy you don't actually lose anything in terms of expressiveness but you gain a lot.

Neither typescript nor Kotlin are particularly more verbose than JSON though the lack of supporting a colon to map keys to values in a dictionary remains an unfortunate language choice in Kotlin.

Probably typesafe configuration DSLs are going to be a thing in the future. Neither JSON nor Yaml really do this. And schemas just add a lot of cruft.
Your friends already know what your phone number is
My ~/bin/makepass file:

#! /bin/bash
cat /dev/urandom | base64 --wrap ${1:-"10"} | head -n 1

Defaults to 10 character passwords, but you can put bigger numbers as the first argument. I don't think the `base64` command is on the Mac, so probably won't work there.
DDD - Domain driven design. My entire career pivoted the day I worked with a team that was building a large financial system (ie: multiple teams around the world, hugely complex set of business domains, zero margin for error). The entire approach to code, thinking, and organisation meant that a code base that could easily be a mess at 1/10th the scale, was maintainable and actually increased velocity of the teams over time.

It made me realise that technology is rarely a solution. In fact every new language promises a silver bullet, when in reality I've always seen its the approach to writing software and complexity that kills projects.

DDD - a sane approach to keeping complex systems simple.
I had my doubts about Rust. I knew it was a powerfull tool, but I thought it was too hard to learn, to complex, and that it was reserved for heavily resources-constrained environments, or any other situation where pure performance was one of the prime concerns.

Then I attended a brilliant conference/demo about Rust, in which the speaker proved that one could build something with Rust without giving much thought about the complex principles of the language. You could get familiar with the language by using it, and then have a much better chance to understand the core concepts of Rust.

The conference is here (in french) : https://touraine.tech/talk/o9KtP8ZrZ130zLZPzdqn/
JavaScript Basics: How to render fast 10k elements
It's worse than that. If you gave them your phone number, you can ask to see it and have them to erase it. If one of your contacts gave them your number, it's _their_ data, you cannot get Facebook to confirm they have it and you can't ask them to remove it ...
When I was student, I learned that many languages are equivalent to a Turing machine and my teacher told that the expertise level in a language is generally more important than the choice of the correct language for a task. About 7 years latter, I have learned Perl. Using Perl, I was able to code in a couple of hours programms that would require couple of days using my favorite langugage (C/C++). I was shocked by the huge difference in productivity. Before that, I was sold to the strong typing side because of my experience in software maintenance. I still believe in strong typing, but I have more insight to choose the most effective tool.
Exactly. The tl;dr of the article is: "I agree that carbon scrubbing is used to justify continued emissions, and that's not good, now let me advocate for carbon scrubbing and not talk about what we really need to do."

Let me put it simply: we need to stop burning fossil fuels NOW (move to renewables) and also have less kids (1 or 2 per couple). Anyone with the means should use solar PV, wood heat, electric cars, and reduce air travel to once per year. This means you most likely need to change from what you grew up with and what you know and how you live. We all need to change, our economy needs to change, and we need to acknowledge that as soo as possible; the lives of outer children depend on it.
Pedestrians, cars, signals and swans – life as a London transport manager
> When I looked at Python, it looked interesting. Then I found out that -white space is important-. I thought about what it might be like to worry about that, and decided -not for me-.

I did the same thing. In fact, this is why I came to comment on this thread: my initial reaction was to turn my nose up at the significant indentation. Then I gave it a try, and I got over it in about five minutes. It just wasn't the big deal I thought it was. I've heard a lot of other people say the same thing.
I've been using ZoL-git with Datto's encryption since 2017 on my main systems. It's really really solid and makes the management of encrypted datasets a breeze (even send and receive are supported). Yes, probably is slightly less sicure than LUKS/GELI and similar block-level encryptions, but I personally do not care that much. I can't wait to see it in stable ZoL and in FreeBSD (I'm also kinda hyped for ZoF, which I hope will allow to share easily pools between Linux and FreeBSD)
Thanks for the reference to John Bell. I wonder where he said that.
How do I contact you? I'm based out of Bangalore.
SPARK lets you write proofs - you can write different implementations of a function and prove at compile time they match some specification. An example of this is here: https://blog.adacore.com/gnatprove-tips-and-tricks-proving-t...

Here's another post with some examples: https://blog.adacore.com/taking-on-a-challenge-in-spark

There's a good book, Building High Integrity Applications in SPARK, that goes through things in detail. It's a good read for any programming language user to mine for ideas or explore how similar problems could be solved in their language: https://www.cambridge.org/core/books/building-high-integrity...
I use https://pwsafe.org/ (or a few other file-format compatible apps on different platforms) and keep my password file (still with its own passphrase) in a keybase ( https://keybase.io/ ) private filesystem. Keybase's filesystem does a dropbox-style thing to take care of sync, and pwsafe doesn't need to know anything about the internet.
JavaFX is a great choice for beginners. Whatever app you make, anybody can run so long as the have the JRE installed.
The success of the blockchain goes through three stages
To better implement blockchain technology, we've designed PPIO with three distinct phases that slowly introduce complete decentralization. Read the explanation behind our unique strategy > http://bit.ly/2UcYmvN or chat with our developers about it > https://discord.gg/xKaB9wu
Qt is licensed under the LGPL. Same goes for PySide.
I tend to browse HN at 130% zoom, Chinese characters render quite well at that zoom too. Even for English the text size here is rather small though. You don't need to see all the details to recognize words made from Chinese characters though, context (neighbouring characters) and general knowledge of the common characters help fill in the blanks.
My understanding of illicit cannabis production is only from films like "Lock, Stock and Two Smoking Barrels" but it seems to be heat lamps in basements and caravans etc.

And the impression the news gives me is that UK Police regularly use heat cameras from helicopters and analysis of electricity bills to find illegal growers.

Would this approach allow test-tube illegal cultivation with a much less detectable footprint?
> Apparently when a woman uses a pseudonym on facebook, it is not unlikely that it is because of a nasty/stalkerish ex that she would rather get away from.

Also men do this...
China in unfamiliar territory as rust belt cities flatline
Good old KISS policy.

Sure, Kubernetes, fully automated CI/CD, autoscaling, lambda functions are all cool and very useful if you have a problem and paying users in that scale.

Majority of the applications even today in 2019 would be served well by the reliable Nginx + (Python, C++, Rust, Go or other language of choice), PostgreSQL and backups. If you keep things simple, you can even have a standby mirror of the same infrastructure to take over if needed, and it would still cost you less than spinning up nodes after nodes for the complexity of running your own Kubernetes.
French guy too. I have to add that’s not specific to US company : Total, Ikea, and even EDF (french electricity state owned company ) also use the same practices. I too would prefer that they fix the law. It has been decades we know this and nothing seems to be done. I hope that the fact that population is getting more and more upset by the situation will push the politics to move. Btw the way the same companies dont seem to pay taxes in the US either.
Yeah, it's a real shame. From what I see the best Common Lisp compilers and libraries are proprietary and seem to be stuck a in 90's vendor (think Borland) mindset.

They're probably serving their existing customers well, since they're still around, but I doubt they're getting many new customers (or mass adoption) with these prices: http://www.lispworks.com/buy/prices-2c.html, https://franz.com/products/packages/.
Encrypted and mutually authenticated React Native to Go seamless bridge
I went a couple of weeks ago to the Yuki Matsuri on Sapporo, and it was very funny that they accepted chinese credit cards, and virtual payments, but they did accept japanese credit cards.
You can regulate by having legislation that has 2 components. One is the law that such companies have to follow best practices. Second, best practices are created and published by a set of companies who have the best record of implementing security correctly, or even having security professionals (and there are many well respected security experts who can do this since they talk about it on their blogs all the time).
That follow-up tweet freaks me out. What does that have to do with anything, really. I think it's rather unprofessional and would prefer people not make self-congratulatory statements about their personal beliefs.
Two years ago I met some guys with an Icelandic startup to help autoshops manage their parts inventory. One cool thing they were doing was using these Dash buttons to let the shops reorder parts like filters, etc.

I can't remember the name but I wonder if they're impacted at all...Then again, two years is an eternity in early-stage startup time.
What language/framework did your team use for that project?
Originally Buffet was saying that he believes and invests in trusted brands, I was just saying that Coca-Cola the trusted brand is not regarded as highly as 15-20 years ago. And I’ve personally only heard about Nestea from your list of brands (I’m not an American) and as such I have a really bad opinion of the product behind said brand (I see it as sugary water masquerading as “tea”). Otherwise I agree, building a logistics holding company is hard, but Buffet said he invested in companies like Coca-Cola for their brand value not for their logistics know-how.
>Can you elaborate? It's not often that they see valid critiques of Rust on HN, and it would be interesting (to me at least) to add to the data bank.

Ehm, SPARK has a full proof capabilities, pretty much like you have in Coq (and SPARK integrates with Coq). With SPARK you can prove your code is correct, with Rust you can't, and there is nothing like Frama-C/SPARK available for rust.

In Ada12/SPARK14 you have statically checked Hoare triplets (in Ada contracts are ensured in runtime sometimes tho), you can ensure that your output array is sorted in the type system and prove it statically, you can ensure all sorts of invariants statically.

I like rust, but it's nowhere near proving correctness since it has neither dependent types (like F star/Low star` has), nor dedicated proof system (like Frama-C/SPARK). You can compare Rust to Ada, though Ada is pretty awesome two and have many features Rust lacks (contracts, subtypes, parametric modules).
Yes, I'm talking about use of qt in a closed-source commercial product.
This isn't a shutdown problem. That's getting the directionality confused.

This is actually the failure mode of most altcoins in the wild. They get attacked because the consensus was never reliable.

There are still tons out there (easily more than 50% by number) that could be smashed into oblivion by anyone with a decent amount of money tomorrow.
My Involvement in the Python Community
I've been writing Python for over 20 years, and I don't think this has happened to me one single time. I'm not some kind of super programmer; I make as many mistakes as anybody else and spend too long debugging stupid mistakes occasionally.

I've mixed spaces and tabs before on a handful of occasions, and it's always told me straight away what the problem is.

Here is an example of mixed spaces and tabs for indentation:

https://repl.it/repls/NegativeExemplaryBackups

You'll see that it raises an error:

TabError: inconsistent use of tabs and spaces in indentation

…and points you to the exact line with a problem.
OP specifically stated:

> I know you can do FDE with LUKS but would prefer a more enterprise solution where I can store a recovery key centrally that a user can’t remove.
Given the complete lack of respect that Facebook has for individual privacy and the wellbeing of our society in general why should anyone believe this?
How can you possibly trust published information on the experiment? We can see from India's experience that democracy isn't going to work "as well" as in developed countries but we can't say anything about China's experience.
I think that the issue is that microservices _require_ good practices and discipline.

These are attributes that 80% of projects and teams lack so when they decide to jump onto the microservices bandwagon the shit hits the fan pretty quickly.
You can ship a closed-source product with LGPL licensed libraries like PySide/PyQt as long as you respect the license (most difficult part to comply with is relinkability by the user if you're shipping with static libs) [1].

[1] - https://www.qt.io/faq/#_Toc_3_7
Nature invented solar-powered CO2 scrubbers, they're called plants (and algae). We just need to not kill them everywhere. This is hard when humans have an expanding population, which is why we humans need to realize that we are now so numerous we are competing for physical space (Our housing and agricultural needs) against the very resources we need to live (forests and clean water and clean air).
If you watch reality TV then you aren't getting the facts.
Startups transforming sales and marketing with AI (artificial intelligence)
THC and CBD have a much broader user base, though. Lots of folks will use one recreationally and will try the other medicinally before considering medical-grade heroin or even recreational heroin. Even in that case, occasional users are more willing to take a lesser amount by mouth and as a bonus, the yeast gives us another way to make legal opiods.

IIRC, we also use yeast to make insulin now.

Which does mean that things like Humira - or at least precursers to it - might some day be made like this. The bigger issue with Private Person making it rather than the labs is that Private Person doesn't always do safety procedures. Sure, You the Individual might, but random Private Person probably won't. Better to buy treatment from somewhere else and look for solutions to high drug prices in other ways until we can make this safe for the general public. (Also, if you are using Humira: Sorry about that bad health luck).
No expert on US law, but I think mass surveillance is illegal. So yes, there is a very direct connection between surveillance and criminality.
So Lyft is paying $8m/mo to AWS, $100m/yr Each ride costs $.14 in AWS rent
My experiences with lawyers suggests that they can have a tendency to get sidetracked that is most definitely "not that solve real problems for users" - the real difference with lawyers being that they will then charge you vast amounts of money for their sidetracks.
Interesting. Just typing "password" yields "pa,s,s,w,or,d", so it seems you register groups by keypress delay. It actually opens up multiple possibilities to factor typing style in to the password. The same keys one fingered grandma-style would not necessarily register as the same password when "properly" typed in.

Idea itself is interesting, though password validation brings its own can of worms. Where do you do key groupings - client or server side? How do you capture keypress timing data? What amount of timing variation is allowed? How do you factor in changing typing swiftness? How do you handle keyboard layouts?

Essentially, the idea is different keys pressed at tightly controlled intervals, which sounds awful lot like music tune played on a keyboard (pun intended). Are tunes more or less secure than strictly textual passwords we use now?
Saudi Arabia runs a database of women that men use to track them
I really enjoy using https://makemeapassword.ligos.net for xkcd-style passwords because the sentences you get are a lot easier to write as they sort of follow the natural syntax of English, yet are still completely nonsense. My single gripe with 1Passwords generator is that it just picks words at random, losing the cadence and flow of language.
Tìm hiểu về liều dùng và công dụng thuốc atropine
I think I might just found the replacement for my 2015 MBP.
The WWF Funds Guards Who Have Tortured and Killed People
Keepass is amazing. I use Keepass2Android to keep a local file in my cellphone, and occasionally back up the encrypted file to my Google Drive.
BBC BASIC: The people's language (2006)
In the case of the US, the government is bound by due process, at least theoretically, which makes it far less likely to hurt me than private entities.

Granted, that may not be the case when it comes to China.
>which is already what we are doing with most languages that don't care about indentation!

No that's not what the other languages are doing. They have explicit structure defined in the code (with Lisps being at the extreme end), which allows the development environment to automatically present the code in a way that's easy to read. This frees the developer from the job of manually formatting their code like some sort of caveman.

As someone with 8+ years of experience of programming in Python for a job, I've seen countless of bugs spawned by incorrectly indented code, which is incredibly difficult to spot. I've seen people far more experienced than me make these bugs because they didn't notice something being misindented. To me, the fact that we have to deal with this is laughable. Especially considering it's so easy to fix Python the language so that indentation becomes unambiguous: add an "end" statement for each deindent (aka closing brace).