skysight-inc/HackerNews huggingface dataset:
I'm actually at option 2 right now but don't know how to put my skills to use in this area.

I'm in my early 20's and have reached a breaking point where I'm genuinely willing to drop everything including quit my job to help towards a realistic solution.

I'm very concerned that climate change will seriously effect us in the near future and I don't see change being made quickly enough.

I know I'm in the minority but we number 2's do exist.
Not really sure, either. But also the running assumption that `blue=good` and `red=bad`. I mean, otherwise trains and bicycles don't emblazon "bad" to me... I don't get it.

It seems telling to me that someone would make out that one frame was inherently "good" while the other was inherently "evil".
Credit card technology transition is trying for travelers
> I'm a little appalled at the general attitude here. "These issues are probably nothing," is just not a good approach to security. "My app only exposes port 80 so I don't care about local exploits," is not a good approach to security. "Docker images always have a bunch of junk installed that you don't actually use," is not a good approach to security.

We aren't saying that it was the good approach to security, we are just saying that fear-mongering articles like that aren't the good approach to security.

That remind me of the anti-virus software that listed each cookies as a virus.

If to exploit a security vulnerability in a software you need a security vulnerability that give the same right as that software that contains the vulnerability... yeah you don't have to care about this. I would be happy to be shown wrong on that statement.

Does that apply to all the vulnerabilities they count? Probably not, but it certainly inflate the number, just like cookies in an anti-virus count, both give a wrong idea of what's actually happening and aren't the solution to a safer world.

Am I crazy to think that we don't have to lie to give security suggestion?

> If people out in the world can't install your software because it's not compatible with a library they have updated to patch a security vulnerability, they you will hear about it, and maybe get a patch. If people just install your docker image... eh, it works, why bother looking behind the curtain and see how?

That's your definition of a good approach to security?
>But if history shows it's difficult to implement something without creating vulnerabilities, and there are alternatives which are less prone to mistakes, it should be retired and discouraged to be implemented.

>Also, CBC itself is not an actual problem, but CBC in TLS is authenticate-then-encrypt, which is how the vast majority of problems are created.

Oh definitely, GCM (or another AEAD cipher) is a much better choice - I wouldn't argue in favour of CBC in production TLS cipher suites. I just wanted to comment on the technical details of where padding oracle vulnerabilities actually arise.
> For example: Coudfare (sic) HQ may not know what their workers in France are asked to do.

IIRC this is one of the things that the Chinese surveillance law includes, that it may force individuals at a company to provide them with information without alerting the normal channels in the company.
Give people a useful tool (npm) and they will muck it up. This is both the best and worst part of the general node ecosystem. The issue is people saying things like "that's just node". It is not node, it is the ease of use and popularity meaning there will be more of these examples. If you care to make high quality use of the platform and tools you can, but that means not following the crowd.
Thanks for an excellent answer!
Companies are still migrating from IE 8 to IE 11 on their RFPs requirements list, and WebAssembly is at 1.0.

Flash will come back rest assured.

I am already using pure browser versions of WebEx and Citrix.

While Autodesk customers can play with their AutoCAD projects on the browser.
Cookie Autodelete is a step over that, it will automatically delete cookies from a site after you close the tab.
I’m guessing this depends on the judge? I was in traffic court and one of the lawyers argued that the statute did not explicitly say what his client did was illegal.

I don’t recall what it was, but he read the statute and explained the technicality and the judge agreed with him.
I am so confused why the 'good old days' of php is a good example of how to do application development.

Every php framework got away from that for really good mesure, including not having your logic in the server document root.
Who cares who wins game, you learned you have a bad choice in friends, change that.

When this happens to me i laugh and engoy the game, then i dont play with the cheat anymore.
I remember reading post from some startup founder talking about how he dont hire those who came in suits - because that shows they are all about how people look instead of substance etc. Oh well ... suit is general advice, knowing not to wear it requires subtle knowledge of how people should look ...
Huddersfield vs. Wolves Live
https://qiita.com/TuscaPlus/items/0e65c111c7a10c3f19c1

https://qiita.com/Kobor/items/76d8a9603f7db42313e8

https://qiita.com/Office/items/c386efb3880af80fa536

https://qiita.com/Syrup/items/efb390a8c5e323282deb
The problem with these kinds of bans is simple: if you don't use the same judgement on all hate speech (which they don't), you aren't banning for hate speech, you are banning for political speech.
I think it's important to be careful with drawing conclusions about what might or might not be used by whatever is running in your container and exposed to end users, if only for the simple fact that it might not be too obvious how a particular vulnerability gets exploited in the wild. CTF writeups often illustrate very nicely how there are quite creative ways to exploit vulnerabilities. It's not safe to assume you can predict every scenario. The path to an attack can be very complicated (but easy to execute, once the exploit is scripted).

I agree that the article doesn't emphasize what is the actual important point here (it is clickbait-ish), but the numbers they're presenting should (hopefully) trigger people to actually think about putting "continuous eyes" on the container images they're using. Just like you should continuously monitor your code, your application's dependencies, and your host system libraries.

A hacker needs to be right once, you need to be right 100% of the time. That's not marketing.
What the article is getting at, is that the service makes promises based on the assumption that later subscribers will show up to provide enough data to satisfy the SLA they give to the early subscribers, before those early subscribers attempt to "call them on it" (by i.e. actually attempting to use the less-common data sets in production.) If the later subscribers don't come, the service will eventually be found useless for the early subscribers, and so they've paid in for nothing.

Thus, like in a (complete-knowledge) Ponzi scheme, the early subscribers have an incentive to get later subscribers to sign up for the service, so that it can be more useful for them.

But, unlike in a Ponzi scheme, the later subscribers don't have to wait for subscribers even later than them, before they can benefit. The later you subscribe, the more immediate value the system has to you.
Your link says it has not been sold for human consumption for 15 years. And LFTB has not been used in fast food for five years: https://www.snopes.com/fact-check/legal-separation/
>>No, if you find something you're welcome to share it.

Proves the futility of your sources for evidence. Ergo, accept whatever evidence the world is providing you.

Good night!
It was called PNaCl.

WebAssembly only exists because Mozilla went with asm.js instead.
Deploying a Text Classification Model Using Flask and Vue.js
Not a ponzi scheme...just fraud. Not sure why they went with the clickbaity title.
CBC has a fundamental weakness in that you can toggle one bit at a time and get a predictable change. Encrypt-then-authenticate would obviously resolve that, but that's trivially broken by breaking SHA1/2 ;)

Of course a problem with encrypt then authenticate is that you can verify the identity of the sender without decrypting the content, which is of course why A then E happened in the first place - the threat model turned out to be incorrect. For messaging platforms I would still lean towards authenticate then encrypt as I think the attack model is different.
The one area I have found useful is employing a junior group in operational roles where they are tasked with repetitive but skill-requiring tasks get to show that they are:

-- conscientious

-- innovative

-- communicative

-- ambitious

You can almost immediately tell who has ideas, is interested in the work, and stands out from the rest.

A responsible corporate leader then offers the opportunity to advance from this beginning having proven their adaptability. Honestly, it is too dangerous / risky to hire people from "unusual" backgrounds into much higher responsibility roles.

This is the old type training environment that companies used to have, especially in manufacturing for example. But with the decline of that, and the offloading of expensive training and apprenticeship to a contractor-run world, this gateway for people to prove themselves is becoming rarer and rarer. And it is a failing of our society to take up that slack with enlightened public policy that realizes this is happening. All we seem to want now is to have someone else grow the crop, and we pick and cut the most attractive.
The fake water there is very cold.
> While smaller units are almost universally better

I completely agree. In my opinion it should go down to the individual level.

Let's say China had independent states/countries per province. And, they all agreed to a set of laws individually but disagreed as a collective set of laws.

This would mean that most citizens would suffer as the laws are (at best) an average of the opinions of all citizens of China.

Being an average, most people would have at least one disagreement on how a particular law should or should not be. There will be of course some some people that lie on the exact average. These lucky people would be 100% fairly represented.

In order to be fair ultimately law needs to favor the individual, not a country, state, or other larger group.
I know nothing about soy sauce or brewing in general, so naturally I will now prescribe improvements to the process from my perch on HN:

Why not get rid of the ridiculously complicated (but truly beautiful) barrels, and instead use pieces of kioke wood, maybe from actual kioke barrels, in stainless vats? In other words, brew the soy sauce in stainless vats, but seed the cultures using pieces of wood that harbor the microbes. Why does the wood need to take the form of a barrel?

This would be similar to how I make traditional kefir, or how my mother makes kombucha. We just put the stuff in a glass jar (milk for kefir or tea+sugar for kombucha), and add bugs. In this process, a big piece of koike would serve the same purpose as kefir grains or a kombucha baby; it would supply the biology, and the brewing process in turn would feed the microbial colonies in the wood, the same way making kefir feeds the bugs in the kefir grains so you can keep using them indefinitely.

To anyone who actually knows about brewing: does this sound remotely plausible?
This reminds me of the time I used Python to fill out my Wife's 4th grade report cards. She kept all the records in google sheets, so when it came time to do report cars, she already knew what all the grades should be. But the school only provided a terrible app where you literally had to make three clicks with a mouse to enter each grade. Each kid had about 20 grades to enter, and there were 30 kids. That was a lot of clicking and a lot of RSI.

The app had no import/export, but it turned out you could save your work in progress to a proprietary file format. I figured out the format, and then figured out how to basically take the data in google sheets and munge it into the save file format.

It took about 3 hours to enter all the grades manually, and it took about 3 hours to develop the app. So for the first time we used it, it was a wash, but then we got to use it twice more.

Sadly, then they changed report card programs and the new one used a binary file format. At least the new program allowed keyboard input with shortcuts, so it wasn't as a bad.
> Like sugar causing hyperactivity in children.

I don't know about children, but its vaguely true about adults. Increased sugar intake alters the fat burning process with the gift of quick energy followed by a period of depression, a sugar low, that impacts body energy and mental concentration. The resulting behavior is slowed/faulty decision making and a desire for napping.

I suspect if this same metabolic change occurs in children it would slow a child's mental concentration thereby allowing less controlled behavior, which may present as hyper activity at the loss of self-reflection.
The article presents this as some kind of difficult decision, but doesn't adequately explain why this should result in anything other than an answer of "no", with a side order of "hell no". Mozilla is under no obligation to add any particular organization to its list of trusted root CAs, and users rely on it for security. Some bizzare notion of "fairness" to a known bad actor doesn't seem like a remotely strong argument to me.

Play stupid games, win stupid prizes.
Oh wow, you're right about suits.

I've read Wall Street people are great at figuring out who is wearing a suit the right way. I truly can't tell the difference between one off the rack at a department store.

The subtleties of suits can be certainly turned into a shibboleth as well, and have been on a regular basis throughout history.
Agreed, but for whatever reason it seems more prevalent in the node ecosystem than in others (even when comparing high-profile projects).
Definitions stolen from Wikipedia:

Conspiracy - In criminal law, a conspiracy is an agreement between two or more persons to commit a crime at some time in the future. E.g. the court (judge) and the seller.

Fraud - wrongful or criminal deception intended to result in financial or personal gain... for example making untruthful claims for the purpose of continuing to sell a product under false pretenses.

Mail and Wire Fraud - Fraud by facilitated through the mail system or via electronic means.

Can you elaborate as to how a compelled untruthful (electronic) declaration for the purpose of continuing to obtain sales of your product is NOT (wire) fraud?

Not trying to be an ass, I'd just like to understand.
If there are people who are unable to live in a home, there is not enough safety net. Housing should be a right of citizens, as well as medical care. Private property has allowed wage inequality to increase with no end.
There is subjective evaluation as a necessary reality and there is flat out nepotism. The line may be fuzzy at times, but the above sounds like the latter with no doubt.
Until flashlight apps stop trying to request location data, I do not feel it's safe to assume the industry has no data
Probably a coincidence, this article likely wasn't written in a day, and I doubt NYTimes and Last Week Tonight are talking to each other.
or, the person who should do it should do it and not rely on others to do their job for them?
This is really cool. I recently learned from an HN comment that you can actually get mini laptops that are this size and even smaller, e.g. the GPD MicroPC which is cheaper than my cell phone and only slightly larger while having more ports than a Macbook Pro. In terms of whimsy they don't compare to this though
One issue (the openssl one I think) wasn't a different error message, but rather the different delay in time to closing the connection. The end result is obviously the same, but it's important to remember that it's not just a matter of returning the same error code, but rather having identical termination characteristics.
Neonazis/Daily Stormer was a canary.

I think back to the Skokie Nazi trial on how this should have played out. The Constitution wasn't for protecting when times and situations were good, but when they were off the rails and terribad. https://en.wikipedia.org/wiki/National_Socialist_Party_of_Am...

Cloudflare tried to be this impartial "we're only a data delivery agent - we make no ethics claims of anyone who uses our service - we're a common carrier like service".... Except when it came down to the hard decisions, they sided in smashing the canary into tiny pieces.
Didn’t Snowden reveal that government agencies routinely break the law?
Well, "better" is a loaded word, and you need to remember that C++ is not a superset of C. The two languages intersect in a fairly large subset of C, but there are parts of C++ that are not the same. I would claim that C++ is remarkably less safe than C because of the crazy games some people play with what's laughingly called "template meta-programming." You can abuse the C preprocessor, but not to the extent that its C++ mode permits.

That aside, the comparison of programming languages to automobiles still holds: C is a Formula One race car without seatbelts. C++ now resembles Ada in terms of size to the extent that it's a large staff car that comes in only one color. Java, which originally seemed to be a sane C++, is sort of like my father's Buick -- it looks nice but when you really need to do something slightly out of the ordinary like carry skis you can't do it without an accessory. That's right, it is a proprietary language (hence C#)
Ugh. I’ve been shafted by all of those ideologies.

It turned me grey, bald and cynical aka experienced in every possible way to fuck something up. That turned out to be quite valuable!
It seems to me that for any nerd subject, when talking to someone, within 3 sentences you figure out whether somebody is in or out. No need to look at clothes.

At the same time, somebody who knows a lot about a nerd subject is generally respected, whether dressed the part or not.
> But I do think that adding sugar in things is only legitimate when you are limited in the quality of things you get. It makes sense if the food supply is limited for example: you have to do with what you have, so let's make it taste good.

Walk into any michelin star restaurant, and I can guarantee you they'll be using sugar in a variety of ways. It's not because they're lacking quality ingredients.

I don't care where you buy or grow your tomatoes, if you're making a sauce or soup, it's going to require seasoning.

What about if I'm caramelizing onions for a dish? I shouldn't be using sugar, I just need better quality onions?

And using this logic I'm also wrong to salt a steak, right? I should instead find better quality meat?

We season food to make it taste better, and we also buy better quality ingredients because they taste better. And, if we want the best tasting good, we use both quality ingredients and appropriate seasoning, which may include sugar.
Really? That Model 3 is kind of a POS and I wouldn't want it as my daily driver. Those stupid door handles don't pop out in the cold, firefighters can't extract crash victims without jaws of life. That's a shame, too, because those batteries go up like roman candles in many crashes, immolating the occupants. Now I don't feel so bad for the virtue-signaling adults, but the kids trapped in the back seat are innocent victims.

What kind of "free" country is this where someone can ban things they don't like? Answer: Not a free country at all.
The advertiser / webpage owner is free to prevent me from loading his webpage, and I will happily accept the rebuke.

They are not allowed to simply track me and serve me ads regardless, though. I pay for an email provider specifically to avoid this, and I pay for magazines and books as well.
...and they want that for transparency, not for nefarious reasons.
Show HN: Find files (ff) by name
> World War II ended only 74 years ago

NATO was founded 70 years ago

The EU as we know it was established 27 years ago

NATO, despite its faults, has done more for European integration and peace than the EU. It carried Europe together through the stark darkness of the Cold War; how would the EU fare against such an existential threat?
No I'm sure this article was many months in the making. What I'm wondering is if it was always planned to come out today, or if they had to rush to an early finish because of Oliver "scooping" them.
A Bumpy Ride to the Moon: Israeli Spacecraft Hits Technical Snag
People in this thread are way overly negative. I understand this tool as something to be used for prototyping and locally-only but everyone is jumping on how insecure it is or how it's got a bunch of dependencies, or it's just express, etc. None of that matters if you aren't exposing this to the internet. This is a really neat project that lets you play with something right away and a lot of you all are bashing the author for things not even in the scope of the project.

Lastly this has so many upvotes and is #1 on the front page because it's cool, fun, and perfect for a little prototype or POC. There are a number of positive comments buried at the bottom but the highest comment is about how this is a "Security Nightmare".

Edit: Typo and I wanted to add: Not everything posted on HN has to be battle-tested, scalable, parallelizable, profitable, cloud-ready, secure, etc. It's the kind of attitude in this thread that keeps people from posting their own work at all. No one want's to get torn apart, back off and provide constructive criticism or keep quiet. (Note: advice I have not always practiced in the past)

Edit 2: Show HN rules (https://news.ycombinator.com/showhn.html), I think this makes my point better than I can.

Show HN

> Show HN is a way to share something that you've made on Hacker News.
The current Show HNs can be found via show in the top bar, and the newest are here. To post one, simply submit a story whose title begins with "Show HN".

What to Submit

> Show HN is for something you've made that other people can play with. HN users can try it out, give you feedback, and ask questions in the thread.

> A Show HN needn't be complicated or look slick. The community is comfortable with work that's at an early stage.

> If your work isn't ready for people to try out yet, please don't do a Show HN. Once it's ready, come back and do it then.

> Blog posts, sign-up pages, and fundraisers can't be tried out, so they can't be Show HNs.

> New features and upgrades ("Foo 1.3.1 is out") generally aren't substantive enough to be Show HNs. A major overhaul is probably ok.

In Comments

> Be respectful. Anyone sharing work is making a contribution, however modest.

> Ask questions out of curiosity. Don't cross-examine.

> Instead of "you're doing it wrong", suggest alternatives. When someone is learning, help them learn more.

> When something isn't good, you needn't pretend that it is. But don't be gratuitously negative.
Reminds me of some of the excellent advice in Bret Victor's essay about global warming:

http://worrydream.com/ClimateChange/

The investment is not only in the machinery, but in tools to model, observe, and predict efficiency.
One reason to suggest a smaller max character count is to assist those with impaired vision. I'm highly myopic and, while my lenses correct for it, I still seem to get eyestrain when using the default font/sizes in most IDEs. Bigger-screen monitors counterintuitively seem to make this worse, not better.

I can only imagine that this would be even more important for individuals with more severe vision impairments.
You're right, of course. To be clear, though, the "doom principle" simply says "encrypt then MAC or die". TLS reverses the order (it was designed before this problem was seriously studied). TLS's CBC mode is flawed, but CBC mode in general --- I still wouldn't use it! --- is basically OK.
I've always struggled with the application of Jevon's paradox to decision making. Does it mean we shouldn't try to make our usage of scarce resources more efficient?