skysight-inc/HackerNews huggingface dataset:
Maybe they can't force you but you might still be found in contempt of court and jailed or fined large amounts of money.

Either option, force or contempt of court, isn't that well explored in the domain of cyber security yet, especially because the lack of updates on the warrant canaries are supposed to communicate something and the lack of updates would therefore also constitute communicating the presence of a warrant to outside parties.

Law isn't like logic puzzles.
When I was using VR a lot I just kind of stopped looking with my eyes outside of a small area around the middle and mostly used my neck. When looking towards the edge doesn't look great I think most people adapt and just start subconsciously working around the limitations. Maybe it partially comes from being a glasses wearer almost all my life (since around 7-8) so my vision is already basically useless for detail around the edges but it wasn't a huge jump for me.
besides finding it odd how they select what to recommend me, including stuff I rated poorly that comes back up, the "See something new, every day" bar that displays shows item thumbnails that are not actually of items you will see if you click there.

so while they do somethings well there are just some odd choices made with how they present product. oh, with regards to that "see something new", reported it and got back that those thumbnails were not meant to represent actual products. call me confused
The piece reveals little wisdom and too much blame the victim. Two of three of the most important reasons are mostly beyond the control of hardworking, smart, less than totally successful individuals: Location, timing, and luck.
We've been noticing a big surge in the number of really inauthentic looking reviews - I'm talking 1,000 written over just a few days, 100% unverified, and some obvious manipulation going on with the product versions. Here are a few examples. I just don't understand how Amazon isn't catching this low-hanging fruit.

Here are just a few examples:

https://www.amazon.com/VOWSVOWS-Microphone-Earphones-Headpho...
https://www.amazon.com/dp/B07MF81QMS
https://www.amazon.com/VOWSVOWS-Microphone-Earphones-Headpho...
https://www.amazon.com/Headphones-Microphone-Earphones-Compa...
I always wondered how old machines get fixed when replacement parts are no longer in production. This was very educational.
I set this up on an RPi last weekend and this is not how it works for me. Trying to resolve blacklisted domains from any network device resolves to 0.0.0.0
Vivaldi and Firefox user, here. Nothing more to say, just wanted to lend my support.

What do you all use?
Work of the Past, Work of the Future
If you were CEO of Amazon, what would you do? As much h as Amazon would love to have you but something you don't really need/want every day, it's not going to happen in substantial numbers. But they need something to keep brand awareness so you remember Amazon is the place to go for everything. Even complaining about the ads is still word of mouth for the store. Even of you don't like the recommendations, talking about Amazon is t bad PR for shoppers.
Making (and eating!) yogurt is one of the simplest and most satisfying pleasures in the kitchen.

1. Heat milk to 180 degrees (F)

2. Let the milk cool to 108-112 degrees (F)

3. Add starter*

4. Divide into jars and cover with lids

5. Leave your jars someplace warm...in a lightly warmed oven in the winter...on the counter in the summer

I like mine tart...so I'll leave it out for 24 hours. But generally if you leave it overnight, you'll have delicious yogurt in the morning.

*If you don't have access to someone with yogurt to borrow starter, you can get a starter powder in the store. The first generation won't have much flavor. But you can re-use a few spoons of your homemade yogurt as the starter moving forward. Each generation will successively develop great flavor.
Making tools whose names end in "grep" that don't behave exactly the same way as grep itself is almost as old as grep. Every Unix-like system has egrep and fgrep, for instance (in fact, they're usually symlinks to the same executable as grep itself, and I at least pretty much always use egrep in preference to grep). There's an approximate-search tool called agrep that's also decades old and pretty widely used.

ripgrep is no more "totally different" from grep than egrep (different regex syntax) and fgrep (not regexes at all) are.
One of the most dangerous things in a kitchen is a dull knife. (And mandolins without guards!)

Dull knives require multiple times of stress, and sawing motion to abrade through the thing. And with more power means accidents are easier and more damaging.

A proper chefs knife (I prefer santokus) should be professionally sharpened, honed before each use, and will be razor sharp. I only need to lay the knife on a steak and pull, and it cuts right through. The cheap $20 knives are usually serrated (nigh unsharpenable) and double as hacksaws.
This. It uses dialog like interface.
Pretty much, plus if you're even running, you have high confidence that lock acquisition will succeed, because the entity that gave you a thread to run on has checked that all the resources you need are available.
It's a small monitoring program that checks a master/replica pair and alerts you or initiates a failover.
Whow, thanks
I'm fairly sure that ignorance isn't the reason these companies aren't implementing your suggestions.
Wouldn't be a waste if you could return the containers and the design does not change often.

Barring that, plastic foil is more friendly. Buy a refill if available.
Ask HN: Finding tech talent is getting harder. It's not a Bay Area problem only
If you're a CTO for a growing startup, this might be a familiar challenge for you.

On top of building the product, finding product engineers is becoming one of the hardest things for a CTO to do in 2019, especially in tech hubs like NY and London due to higher demand and competition.

This problem is no longer exclusive to the Bay Area. Hiring is time-consuming and expensive, and many startups feel that they can’t compete with some of the top salaries and perks offered by deep-pocketed alternatives.

It makes sense to rely on your network to hire the initial few developers, but this approach is not sustainable in the long run.

Job boards are getting crowded. Recruiters are generally worse.

I've read a lot of stories about using recruitment platforms. Few are great, but many are unpleasant. The flaw with many recruitment companies is they don't reliably deliver enough good candidates to build trust.

Asking for profile A and getting profile B is a common frustration. For startups, this tends to be a deal-breaker because hiring the wrong candidate has a significant cost and impact on backlog and team.

Is it that most recruiters or on-demand marketplaces aren't highly technical? Is it that they also suffer from talent shortage?

Remote work has been getting a lot of love in recent years to bypass the talent war. Although it has come a long way, it's still hard to pull off, especially for companies that are trying to do both local and remote but are not remote-first (think infrastructure and payroll primarily).

With that being said. How do startups in hubs currently find great engineers quicker? What's an approach that you have been investing in recently to hire product hackers?
I agree there is nothing technically bad about using usernames as more entropy (it is bad from a user experience standpoint), but why have two strings at all? Just have one longer, truely random string.

> Because having an unknown username with an unknown password increases the difficulty of compromise via improved entropy.

Not necessary. It depends on the characteristics of each. If the username is truely random, sure, but then you are back in the same boat as using one random string.
The problem is that ride sharing isn't providing a service with a realistic and sustainable price. In Boston I can get a 15 minute Uber pool trip door-to-door for $3.

They're undercutting public transportation and traditional taxi services that need to operate with a realistic budget that isn't fueled by billions of VC dollars.
The literal translation from Greek is “unpublished” which refers to a short incident irrelevant enough to not be part of the main story. In modern Greek anecdoto means joke.
I am a native speaker and this was correct usage of anecdote by any reasonable definition
AFAIK, GM is selling the Bolt at a loss. They don't have the ability to source batteries in quantities or at a cost low enough to compete with Tesla. This is also a problem for much of the EV competition. Tesla made the right bet by vertically integrating battery production and aiming for economies of scale. This is a huge competitive advantage that many people fail to understand. Batteries are most of the cost of an EV, and you need a lot of them. It's the reason why you don't see "Tesla killers" overtaking the market.
Interviews with Naked Bionic Men
LOL. I was huge raver from ~18-22 and saw lots of that type of stuff from both natural and un-natural mania.

I had a friend once who had a (natural) manic episode and wanted to get rid of a non-running car in his garage. He cut the car into small chunks with a large Dremel-type tool and threw it away in the dumpster. I mean the entire car. This took about 48 hours. The dumpster was so heavy they had to bring a special truck, and someone had to ask who threw away a car. I think the apartment complex forwarded him a bill for special industrial trash removal.

HN-worthy nerd tangent:

Remember all the discussion a while back about the threat posed to humanity by runaway self-improving AI super-intelligences?

I've always thought that you don't need a super-intelligence in the IQ sense. You just need something with the intelligence of a moderately smart human with super-focus and super-motivation. Imagine something that ran by default in the state you describe above but with no cognitive impairment side effects. That would be super-human. A "race" of these would find conquering humanity trivial even if their IQ-type intelligence were merely comparable to ours.

Most humans exist in a state of low-grade depression most of the time. I have for years thought that the dopamine pathway is the rate limiter for human achievement, not IQ or memory or anything else. It's one of the many reasons I'm a moderate IQ skeptic. Our reward/motivation system is calibrated for a very slow hunter-gatherer lifestyle. The problem is that we have not found a good way to artificially boost this without side effects that impair cognition in ways that result in things like dumb comments on Twitter that get you in trouble with the SEC.

Amphetamine|coke|mania is a helluvadrug.
Canadian province of Quebec refunds $19M because of immigration policy changes.
How do indie makers pay the bills?
We end up using a decent yogurt from the store instead when we run out. We haven't been great at keeping the yogurt train going.
It makes the collections you work with in your programming language (list, set, dictionary/map/hash) available as a dedicated server instead, so you can share data across multiple programs.

It's single-threaded, stores everything in RAM with optional persistence, and has Lua and modules so you can do more than the standard commands.
I for one welcome 50% tariffs on all imported goods and services – let’s bring manufacturing back to the USA where it belongs.

Spend the tariffs to help those who need it the most.
Live Chat Triggers: 25 ideas for boosting customer engagement
>> Content still correct.

> I'd dispute that.

Most of Germany is not Bavaria in the same way that most of France is not Champagne (the region). Still if you split it up by country, it is correct to say, that Champagne (the drink) would be French and Weisswurst would be German.

Did you read my comment? Two thirds of it are about how it should be split up further into regions.

And regarding the special Austrian situation: Austria is kind of known for arbitrarily deciding what they like to be ("Greater-")German and what should be seen as distinctively Austrian, especially when talking about cultural heritage from times before Germany even existed. So as a German I would just follow their example here and as long as we are only talking about bread soked in egg, I would just claim what I like for Southern Germany. ;-)
It seems pretty obvious. Uber is more convenient and it comes directly to your home. People will pay more for that, which is why it probably shouldn’t be so cheap as to make public transit easy to dismiss, especially when that pricing structure encourages more cars on the road with only 1-2 people in them and the negatives that go along with it (more carbon usage, more cars idling in traffic, more road damage, more pollution to inner city dwellers, more danger to pedestrians and cyclists, etc)
FTC Rules Against Fake Amazon Reviews in Landmark Case
That's a nice complement to the brief outline I wrote some time ago:

https://www.solipsys.co.uk/new/BashInitialisationFiles.html?...

As the author describes, I was trying to figure out why something wasn't working, and draw this chart to help me try to trace what was supposed to happen in each case, then figured - why not put it on-line?

So I did. I might look to expand it, but I thought I'd mention it in case someone finds it a useful companion to the lunk article.
> With a single random password most people will write down their password, so anyone who can read what was written down gains full access. With a random username and a user-chosen password most people will write down their username but not their password. Clearly this approach is more secure.

I don't believe this is grounded in evidence. You are basically saying that given two hard to remember strings, most people will write down one hard to remember string and not the other hard to remember string. Why?

> I don't see how relying on haveibeenpwnd can be considered secure. Many people use the same password for different sites. If your site's login credentials are just email+password you are relying on the security and honesty of all other sites that use the email+password combination.

I think you are missing the point of the haveibeenpwnd service. The point is to block people from using ANY password that is listed in the haveibeenpwnd database, thus denying attackers from using that dictionary of known passwords.
Hi.
Simple weekly SQL Challenges in your email to help you get better at SQL.
Z (fast shell jump) and ripgrep + FZF are among my favorite niceties.
Not essencial, but so much more joyful to use.
It's not about not caring, it's about realizing being the one person who cares in a company who doesn't isn't helping anyone, and that you could better apply your time and skills to one that does.

If there are a lot of people in need of medical attention, the compassionate doctor stops working on the dead one, and saves those she can. We're all trying to tell you your patient is dead. You loved your patient, but it's too late, and now it's time to move onto another.
Good thing nothing bad ever happened because someone ran an EXE they downloaded off a Web site...
Rack: Queries
SSH too. I found both Python (v2.7.13 and v3.5.3) and Perl v5.24.1 on the thing. After running ‘cat /etc/GLOBrelease’ (where glob is that pesky asterisk), I learn that it’s Debian 9, but according to ‘uname -a’ it’s Ubuntu. Fun!
2019 Cloud BI and Analytics Predictions [pdf]
Netflix actually did pay contest participants a lot of money ($1MM) to solve the problem better, at scale. But they didn't end up using the resulting algorithms.

https://www.wired.com/2012/04/netflix-prize-costs/
Amazon got massive backlash in 2001 for messing with prices during shopping experience. Some companies do it, but customers and news media hate being toyed with, and loss aversion bias means they tolerate "wait! Before you go!" discounts but not price increases.
Such a breath of fresh air from the "russian collusion" narrative.
I'm going to try this - I really hope its good. I've spent a lot of days trying to get k8s working with a cheap home server. With VMs and docker conflicting networks its a nightmare. Upgrading is worse.
That looks great. What I really struggled with was capturing 95% of use cases accurately without complicating the story so much that no-one could make sense of it reading relatively casually.

I skipped a bunch of detail as a result, like other options available, and bash_logout.

It feels like quite an art to get the balance right for pedagogical purposes!
There is a difference between killing people and continuing to make cryptographic signatures that even the most densest of judges should recognize.
Kefir is really easy, as it works at room temperature.
I'm just saying I might have read the article if the headline explained using fewer buzzwords.

[pithy word].io, democratize (that doesn’t mean anything anymore), AI (everything is AI these days)

Without more descriptive words, it seems to mean simultaneously a whole lot and not very much.
Personally I get along with nmtui from the command line (as user) but I appreciate the desire for a tray icon of some kind.
I've been thinking lately about an introductory programming environment (similar to computers of the 1980s) that uses lisp or scheme instead of basic[0]:

1. Boots directly into the REPL.

2. Built-in drawing commands, but no GUI.

3. Memory mapped screen / sprites (with multiple graphics modes). With peek and poke like functions.

4. Has an enclosure / keyboard similar to a C64. A simple all-in-one look may make the device more approachable.

5. Simple/constant CPU to provide a path to learning assembly. The reason I'd want to avoid an FPGA is that it'll eventually lead to fragmentation, which means that peer-based learning becomes more difficult.

6. Socketted COTS chips that are well documented and will likely be available for a long time.

7. Open source, with all code available on the machine. I'd like to encourage curiosity as much as possible (and not being able to read the source is an instant blocker).

8. HDMI output.

9. Included joystick with a potentially non-standard port (x2). This is to permit the sharing of games with minimal fuss. Alternatively, use the port from the first xbox.

10. A similar environment / emulator on regular computers, to help the student transition to regular programming.

11. A good manual that explains how the machine works, gives examples, and provides possible avenues of exploration for the curious.

[0] Like many on this forum, basic was my first programming language. But I recognize it is only a matter of time until a programmer needs to abandon it. Any argument to use it as a teaching language has two factors: how simple is it to learn, and how much can be carried with the student. I think lisp would be slightly more difficult to learn, but I think it offers more long term value.
Funny you mention AWS, because the strategy you describe is exactly how the Amazon Basics line is built, by usurping marketplace sellers.
It certainly makes getting into this field open to students like me. Very glad for that
Host headers are transmitted after the ssl handshake.
Deliveroo Announces “Click and Collect”
Right, but you get the idea yea? If you sat me down at the machine ten seconds ago and said "turn on the WiFi," would "run a command in terminal that doesn't have the words network, wifi, or internet in it" really be at the top of the list of things I'd try?

Edit: oh, that's some sort of ui opening command?
IMO it's questionable if a court in the US couldn't force you to continue signing it once they have the appropriate gag order, not signing the canary would be communicating to others you have a warrant with gag order and therefore not signing it would constitute speech which you aren't allowed to disclose as per gag order.
Chrome Key – Creating a Valid WebAuthn Response with a Chrome Extension
An Investigation into Jacob Appelbaum Leaving the Tor Project
This sounds like something a warehouse could afford to buy but for most people organizing their stuff properly is going to be the winner. (even at high salaries like $300k yearly 15k is still 100+ hours of your time)
High desity PCBs are a challenge. Most of the time as hobbyists or for engineering prototyping that density is not necessary. Giving yourself 10% or 15% extra space is hugely beneficial to your sanity.

Production boards are a different story, but that isn’t likely to be the first iteration.

Article:

> The details in a PCB layout seem endless, you have to check everything thrice. Even after doing so you just have to accept that there will be some small error. Hopefully something you can live with.

At the robot club I give these encouraging words to people trying PCB design for the first time: “PCB design is like golf. Low scores are better, but holes-in-one are rare.”

A couple of wires tack-soldered on can salvage most boards.
Nice name. I do something along these lines in my LaTeX source; never thought of it as a thing.
Yeah. This is pretty far-fetched.

> He argues that Coinomi’s built-in spell checker automatically checked his seed phrase which involved sending it as plain text to a Google-owned website. This meant it could have been intercepted, leading to the loss of funds.

"As plain text" here almost certainly means "fully encrypted with TLS"...
The funding plan for Mars is based on the SpaceX satellite internet business. The only way Tesla can contribute is if Musk donates his personal shares or compensation, unless somehow he can make a Mars trip profitable for the other Tesla shareholders.
> Maybe I’m just inefficient at cooking but I discovered quite quickly that cooking complex meals at home multiple times per week is actually not something I wanted to do. I found myself spending what felt like an inordinate amount of time on dinner between prep, actual cooking, eating, and extensive cleanup.

The way to be efficient is to cook in bulk so you have leftovers. I typically cook in bulk every Sunday, freeze six portions, and remove a portion from each the six prior weeks from the freezer.
In China there actually is milk (and soybean milk) sold in bags: https://static.businessinsider.com/image/4b05d2300000000000d...
You're looking at it wrong.

As much as I hate that hack Edison, he's right: you're reporting you've discovered X new ways to not solve the problem.
The Group Policy editor is a very straightforward GUI for quickly updating the registry for you though. It's no more complicated than using Windows Explorer to find your files.

Even editing the registry "directly" using regedit is very easy. Much easier than finding and editing config files on Linux because everything you need to edit can always be found in the same spot in the tree to the left, no matter what version of Windows you're running.

Meanwhile, your Linux desktop will have you entering arcane CLI commands to fix things after a bad update (which happened to me just last week on both of my Manjaro workstations).
Worse, by monitoring transactions, they know exactly how shitty (er, "Basic") a product can be before returns outweigh sales, without paying the cost of experimentation with their own manufacturing.
Relational databases are based on relational algebra which is all about operating on sets.

https://en.wikipedia.org/wiki/Relational_algebra
"why is Google in German?" Was my first thought
I'm 100% with you on this. One of my teams just spent 3 weeks ripping out all of that tedious (and error-prone!) resolver code that resulted from trying to use apollo-link-state for local state management and switching it all to redux instead.

It is insane how many silent failure modes the Apollo cache has. Performance and ability to estimate work (predictability) went through the roof since then. It's just way overcomplicating things to do state management this way - Apollo is a lovely GQL client otherwise.

I may do a write-up on this one day, as a cautionary tale. It boggles the mind that this is being pushed so hard as an ultimate solution to state management - nice in theory but awful in practice.
Fixing Buggy Haskell Programs with Go