skysight-inc/HackerNews huggingface dataset:
High-assurance security:

https://dwheeler.com/essays/high-assurance-floss.html

The INFOSEC field was invented by people doing such things, they solved many root issues back in 1970's-1990's, were ignored, mainstream reinvents stuff at a trickle, and niche in CompSci and government doing high-assurance are gettimg more results than ever. I stay promoting it since our critical systems and infrastructure being bulletproof is unserved need. I also design ways to approximate it at lower cost and talent required.

And it's really draining. I just do it since it's both an interesting subject that's also a social need. Seemed like right thing to do.
A mobile interface for Emacs will be killer. I heard about Orgazly and tried using it but it's a very slow interface. A mobile first design even with limited features will go a long way.

Mobileorg was that app for a while but it's development stopped and it's no longer usable.
Show HN: MVP’s Build Without Code
Stackery Rolls Out Freemium Option for Serverless Development
Greener Childhood Associated with Happier Adulthood
Related in name/title only, but just seeing the word gave me a happy memory of my favorite web grimoire to date: http://grimoire.computer/ (https://github.com/lifewinning/grimoire.computer)
What I've learned building low latency systems
If you are having trouble wrapping your head around WASM (it is a bit funny -- almost but not quite analogous to several more familiar paradigms), I highly recommend this series of posts: https://hacks.mozilla.org/category/code-cartoons/a-cartoon-i...
Remember the time Google Image search started mistaking black people for Monkeys ? I am worried about Algorithmic judges for the same reason that minorities might get into trouble here.
Check out plaid.com (I have no affiliation)

It’s an api service that integrates with most major banks.
Right!? How is chicken rice not on here? It’s the single most common dish in the city so far as I saw. Kaya toast makes sense, never seen that anywhere else even Malaysia, clearly the toast is directly British.

I had a great tasting chicken rice, but it lost a couple points for having a head and spine laid across the side of the plate. Fine, just wasn’t expecting that!
That doesn't seem like a strong argument for wanting to fast.
Well, the government-controlled media pushed pretty hard for a "yes" vote. That's unfair, but it's less than vote fraud.

The examples in the article sound like the vote count was reasonably accurate. (When someone against attends the vote count at their precinct, and says that it was 400 for, 25 against, and the official total says 86.85% for, that's probably an un-finagled tally - unless the ballots were stuffed before the count.)
> You can find real balsamic vinegar at virtually any grocery store

...in a white affluent neighborhood. The real stuff is way too expensive to stock in the Sav-a-lot, to say nothing of even big chain stores. It would be like stocking $100 bottles of champagne.
When you have tons of disks you notice how often you have whole disk failures
I wish I was as discerning a buyer. I send back half of what I get off of Amazon, something like once every other month. By volume it's a lot more than I return anywhere else except for games impulse purchased and "returned" to Valve on Steam.
Rather than defaulting to English, why not default to whatever the browser's OS is set to?

As someone who develops multi-lingual web sites, I can tell you this doesn't work.

It should work, but it doesn't. We test with actual users in their home environments, and... people are messy.

- The vast majority of our users accept the default language (English) when setting up their computers, even if they don't speak English.

- In households where the parents are immigrants, very often the children set up the computer, so it's set to English, which is the child's preference, even if the parents don't speak English.

- Poor households often share a phone or a computer, and each person may not speak or prefer the default language that was chosen by the person who set up the computer.

In the idealized world that Silicon Valley imagines where 1 person uses 1 computer with 1 owner and speaks 1 language, it's fine. But in the real world, it's just a mess.
Closed governments can more easily manufacture consent than open ones. In open societies, it costs a lot more, but the victims gladly pay for it. But manufactured is manufactured, either way.
What's to stop the government from forbidding a company from removing their canary?
If you want to get plastered, you can buy absurd amounts of alcohol by volume by purchasing cheap vodka and making it palatable by running it through a water filter to remove the bitter contaminants, then soak fruit in it to give it some flavour.

For 30$, you can make yourself enough very nice booze, flavoured to your tastes, as you would be able to get for $300 or so at a bar.

As for the direct question: different bars have different purposes, which is why there are so many different types.

Bars in the financial district are often vehicles to waste money as a social display. Bars in the artistic sector are often vehicles to meet likeminded poor, but cool, artists and misfits. Bars in residential areas are normally places to relax and have a few pints. Bars in the nightlife areas are normally places to meet people. Some bars have good food. Some bars have cheap drinks. Some bars have great music. Some bars have familiar staff.

There's a bar near where I used to live that offers manicures, male model servers and foot rubs. A few streets down is a sports bar which seems to employ exceptionally chesty waitresses. As you might imagine, the target demographic for each is different.
Just like beginner developers who never sanitize their input, there are also people who never validate their inputs. Just like exploitation of programs, there are people who exploit the behavior of other people, giving them input when what they really want to do is to run their code (buy the product / believe in the psychic).

Just like educating beginning developers in the important of security, we should educate children to sanitize their inputs, validate things they are told, think critically, and realize the code that others are trying to run on them.
Funny how so often gatekeeping involves rewriting history to ignore anything older than modern nation states :)
I think I would prefer a system where Algorithms decide not to charge a person. Only those to be charged go to a real court.

Also, all plea bargains must be algorithmic so that narcissist DAs can't browbeat ordinary people into accepting guilt.
And why can't you observe a psychic? And write down what they say/predict? And make tests based on that?

If we can interact with something, even indirectly, we can perform experiments on it.
Midnight Lizard extension uses similar trick:
`brightness(0.9) hue-rotate(180deg) invert(1) brightness(0.9)`
This way resulting colors will be at least similar to the original ones and contrast ratio is also better
I was just trying to say that there's a lot of general skill set overlap between being a programmer and something like a plumber or electrician.

It's mostly breaking down problems, having a general curiosity on how things work and being able to read documentation. The only real difference between an electrician and a programmer is the context of how they apply those skills.
> Or reviews that were transferred over from other products. Here's a case in point:

> https://www.amazon.com/dp/B07MH9HPTR

> Over 3000 reviews... most of them for products completely unrelated to the one on sale. I see reviews for a bicycle lamp, a phone screen protector, and a voltage converter.

And it's "Amazon's Choice for 'iphone headphone charger splitter'"!

Archive link in case the product morphs again: https://web.archive.org/web/20190226210646/https://www.amazo...
I think in general, once you're no longer in danger anything you do to the attacker becomes assault instead of self-defense.
> With that said, what do you make of the point that things that are clearly not suitable for production (and sometimes labeled accordingly) have a nasty habit of making their way into production anyway? Do you think it has salience here? You're clearly a thoughtful person with your hear in the right place, so I'd very much like to hear your opinion.

I don't think I have a good answer. I'm currently serving a little over 6 million requests a month for a service I never advertised yet some non-zero number of developers copied code from stack overflow or wrote based on my github project to hit an endpoint that was just a demo. Since it was un-authenticated and I didn't notice the traffic until much later I have no good way to shut this down without pulling the rug out from under people. Eventually I will have to but since it's not costing my anything extra really I've left it.

Now I put a warning on it when I noticed the traffic but that was 3 years and 2 million requests less per month ago so...

I guess yes, we, as developers, should be better about putting warnings and the like on our projects but by the same (if not greater) token, people using existing code/services bear the responsibility to vet things they use. I don't know how to fix people to vet stuff better. Hell, I don't know how to make myself do that. That said you take risks every day, you risk your live when you get behind the wheel, you risk security holes when you don't vet code you use or build upon. I've weighed the risks of driving against the rewards and found the risk acceptable. For a lot of software I use I've made the same decision. I just don't have the time and energy to vet everything for myself and timelines and other pressures at work make it equally impossible there.

At what point do you say "Ehh, it's secure enough below this point"?

* npm library with 1000's of dependencies?

* npm library with no dependencies

* npm

* nodejs

* OS

* Hardware

I honestly don't know a consistent/standardized way to handle it.
> The odds of the next baker you higher knowing SQL and emacs? Pretty low... the odds they know Excel? Probably higher.

Odds that you can teach them the basics of SQL and Emacs? Pretty high. At the level needed here, it's just UI like any other. Journalists are routinely taught SQL as a part of their studies, and secretaries and writers are known to use Emacs.

As for your points for tech projects, I really dislike the emphasis on (3). It sounds reasonable from business perspective, but business is always hoping for candidates who already know everything they need to be 100% productive from day one. It's an impossibility, and structuring your workshop around such requirements only drags your project down - because instead of using the right tool for the job, you end up using the lowest common denominator tool.

It's kind of like refusing to use excavators, because not everyone knows how to operate them, but everyone knows how to use a shovel and shovel wielders are cheaper.
Red Balloon Security 'hidden interview' process was pretty interesting, and fun! Too bad I wasn't good enough to go past a couple of stages, but to me it was the epitome example of your question.
> Even if we can’t make discriminating classifiers through technology as of yet

Doesn't the existence of GANs restrict the space where discriminators can win to NP problems?
Alternatively, coercion:

"Dissidents, who were divided between those who advocated a ‘no’ vote and those who called for abstention so as not to legitimize a process they deemed a fraud, reported a few incidents across the country of members being temporarily detained or harassed."
Not the parent but when you click it slides out a sidebar to show the discussions, covering the content. The annotations also take up a lot of space making the text smaller.

On the plus side they (Fermat's Library) converted it to text, where the PDF versions are all image scans.
That is actually a remarkably good idea. Now if we only had a tool that could cope with such a format and parse sentences and paragraphs out of it. When I run my thesis through grammarly I had to remove all the superfluous line feeds for it to correctly determine the actual sentence structure (which it did then well enough for me to do this semi-automatically for 200 pages).
I'm an engineer in the aviation industry and I stick exclusively to DD-MMM-YY (26-Feb-19). Too many different formats used globally.
A heavily intertwined single market is not something to celebrate or look forward to. It's something to reverse before it's too late.

Optionality is king. I'd rather have twelve options than one.
> see the "correctional" system as primarily about retribution

I generally refer to American prisons as "penitentiary" for this reason. Of course there are scenarios that require 3 life sentences (e.g. serial/psychopathic killers), but they really are rare.

I agree with you regarding the zeitgeist, but I strongly disagree with the content of it. IMO a person understanding their actions (thanks to reform) and regretting them, for life, seems like a more vicious form of revenge or retribution. I'm not sure how I'd feel if I were a victim, but I'd like to think I could maintain that thought process.
Thanks, much appreciated! Prefer this to all that JS non-sense.
This isn’t true, the study of applied economics (new Keynsian) saved the US in 2008 when the Fed decided to shore up liquidity and helped bail out industry in concert with the government. Austrian policy would’ve let the entire system collapse and rebuild itself to avoid the construction of perverse risk incentives and the zombification we are seeing in the economy today. You can argue which would be better long term (I think Austrian) but short term we needed Keynesian measures to save jobs and lives from being consumed in a downward spiral of debt chain triggering and collection.

Productivity has a precise economic definition - ratio of output to inputs - and correlates highly to standard of living. We don’t fully understand how and why technology advances, but we measure increased technology through a variable called the solow residual. Economic policy can help lead to technology breakthroughs that increase productivity and the standard of living. It’s very shortsighted to dismiss economics out of hand as something we don’t understand. A lot of it is politically motivated but let’s face it politics is what happens when groups of people get together and try to collaborate. There’s a lot of important work to be done around productivity economics and I’m glad it’s getting more mainstream coverage
Not displaying properly for me.
Increased mental clarity, energy and feeling of wellbeing is quite real. What exactly are you expecting to happen within 24 hours? Super powers? 10 years increased lifespan?
"the BEST" version of something is probably not that much different from the merely good versions. But, for example, real olive oil is fairly different from canola oil dyed green.

I've found for me it works somewhat in reverse. The good version of something is good but not amazing- but then after I get used to the good version and I eat some of the crummy version I used to eat, I find it disgusting.
Italy. Factually it is like that, the law was meant to protect against unfair dismissal but over the years it has become quite clear that if you work all the time you're meant to, and you don't intentionally harm the company (or its business) you're very unlikely to be fired. And if you are, you can sue the company and AFAIK most of the times (I have no direct experience though) you are likely to win.

This law has been modified and partially canceled in 2014-2015, but people that has been hired before that date still benefits of this law.

EDIT: Look at third page (numbered 70), second column half way, to get a better explanation.
https://preserve.lehigh.edu/cgi/viewcontent.cgi?referer=http...
Companies from the YC Winter 2019 Batch Part 2
Adobe has a standalone program called Flash Projector that can load swf files. That's what I'd generally recommend for viewing Flash content, though you do need to isolate and save any swf files beforehand.
Identifying Cobalt Strike team servers in the wild
You mean just in general or do they have a page listing important PDFs or do you mean you find copies of books there?
Very resourceful for those looking to see how the risks many of us take can end up. Hope to see the website populated further! Thanks for showing :)
Of course this is more or less what the NPC meme is about, insinuating that others are on autopilot and swayed by fake news.
As one of those hobbyists, I can say that the thing I wish most for was an easier way of "getting started". I mostly hack around in python, or arduino c, but I really wish that it was easier to write a script and actually give it to someone else, and actually have it run.

The feature I like most about excel, is that it is practically ubiquitous. If I give someone else an excel toy workbook that does something, they can run it without needing to "manage the environment". If I write something in Python/numpy/pandas/Jupyter, it is actually pretty difficult to make it useful to anyone. Portability just makes the whole hobby programming thing much more fun.
Turn on CUA mode to get the traditional shortcuts, don't hide the menu bar and toolbar - and now Emacs is being operated exactly the same as any other programmer's text editor out there.

The reputation of user unfriendliness is undue, and based mostly on looking at how pros work with it.
Congrats to Dyneti Technologies, Point, Traverse Technologies, MyScoot, Sunsama, Postscript on getting in!

Skill-lync looks awesome, nice to see more startups in the education/training space: https://courses.skill-lync.com/
This is the “cost” of DMA with untrusted external connections. If you’re basically allowing some device to sit on your PCI bridge, that’s an insane amount of trust of course. But we live with it because we like performance.

There are EFI/BIOS level “workarounds” like on Dell laptops: they have a setting to only negotiate thunderbolt with approriate dell docks.

Sadly, their thunderbolt dock is entirely garbage because they used a really crappy USB3 controller which has the habit of dropping devices and corrupting CRC checksums on Ethernet packets. Additionally, this defies the _point_ of thunderbolt itself. But if we assume we can disable thunderbolt capability while the host OS is running then that’s already a huge win.

FWIW I already do this with USB, the ports are disabled until I run a command to enable them in Linux. Because I’m one of those “paranoid” types.
Sounds more like you'd prefer an agreed upon lingua franca.
The actual paper cites using devices with Thunderbolt 2 ports (iMac, Mac Mini both have Thunderbolt 2 via DisplayPort) to experiment on as well. It sounds like the vulnerability is in the Thunderbolt protocol in general, not just the USB-C implementation of it.
lol, that makes sense. heres another try:

ELI5 v2: you can look at the sequences a different way, like tilting your head to look at them from a different angle. and from that angle, we can more easily try every possible way of putting them together, so that we can choose the best way.
I got my wired crossed. I'll leave the comment up, as I do think that Matrix is a masterpiece in protocol design.
Awesome question! It honestly was a combination of the official documentation, articles regarding various topics and StackOverflow. It also involved a ton of trial and error through the implementation of many, many projects.

https://laravel.com/docs/5.7/
https://laracasts.com/
https://stackoverflow.com/questions/tagged/laravel
I think at this point the bridge between Apple and Qualcomm is pretty well burned, especially after all the legal nastiness. I'm wondering if Apple will move some of its chip design talent to fabricating their own modems. It seems that Apple has been trying to pull more stuff in-house for greater integration and performance (plus more profit). This is also supported a job posting someone uncovered: https://bgr.com/2018/05/01/iphone-5g-chip-apple-qualcomm-int...
Yeah, one of the reasons I switched to a low-carb, sometimes zero carb, diet is for that constant "up" feeling.

I was about to add that I've never tried fasting, but I just realised that a lot of people do this "intermittent fasting" stuff where you don't eat for sixteen hours. I normally eat dinner at 5:30 pm and breakfast around 9 am, so I guess I'm almost there? I've never noticed any real benefits though.
With the amount that drones have been increasingly used to carry explosive, I would not be surprised to see these used in a major conflict. Hopefully the technology doesn't fall into the wrong hands, but the risk will remain. Scary to imagine a weapon like this being deployed by those looking to inflict pain on civilians.
The CSS Mental Model
I'm not sure why they mentioned Flash in that press release. I suppose Adobe technically "continues to offer it" as of right now.

Scroll down a little further. There's a subhead titled "Adobe Flash marked for retirement as well"
> Of course there are scenarios that require 3 life sentences (e.g. serial/psychopathic killers), but they really are rare

This is mostly a problem with "sentence stacking" in U.S., which I absolutely think is not the "right balance" for punishing someone in a society. Not to mention how much it's been abused by prosecutors who "throw the book" at the people they want to make an example and essentially force them into plea deals, just so the prosecutors can score another "win."
The Sketch before Sketch
Asking these three questions will help you see through purpose-washing
USB-If Confusingly Merges USB 3.0 and USB 3.1 Under New USB 3.2 Branding
Interesting. So, if women entered the workforce in greater numbers after 1970, and the median wage for women was lower, wouldn't that drag down the median for all workers? That is, if you took a population of the same percentage of women workers as you had in 1970, what would happen to the median wage in 2017?

Note well: This is not a plea for keeping women out of the workforce, or even out of the statistics. This is not an excuse for paying women less than men. This is merely noting that, in one respect, the comparison of 2017 to 1970 is not apples to apples.
Also, simple stuff like the number of polio cases by year: https://i.imgur.com/itoSFI9.png
I won't receive it until April.
I’m sorry but I stopped reading after:

> Correctness and consistency were the two important metrics, rather than today’s metrics of performance and availability.

Not sure if his author has ever worked on an actual real world commercial system.
I can't speak about France, but my experience in the U.S. is that recent immigrants who can't speak English still set their computers to English.

For some it's because they're so used to the non-English versions of web pages being so bad or abbreviated that having an English page they can half read is often better than the truncated "good enough" version provided in their native tongue.
Very close to what I'm looking for. I was thinking pretty hard about it a few months ago, and I did considered that exact one. Ideally, I'd like no screen (small LCD at most); push buttons (SanDisk looks like touch, but the description doesn't clarify); SD card; standard replaceable battery (this is the hardest feature to find); ogg and flac support.

This is the closest I could find: https://www.agptek.com/?product=agptek-u3-16gb-portable-usb-...

Take out the built in USB and internal storage, add ogg/flac support, it'd be excellent.
Tutorial – Create an IoT Sensor with NodeMCU and Lua