skysight-inc/HackerNews huggingface dataset:
> Almost no one comprehends https either. Yet it seems to work well enough to protect people.

HTTPS is notoriously difficult for users to understand. Most people don't even know what a server is. At least with emails you have analogies to do with sending paper letters to letterboxes that map pretty well.

I think the big push for HTTPS from the last few years is in part because Google claim they now give you an SEO benefit from it, HTTP2 (i.e. for better performance) requires it and Google + Firefox show more scary user visible warnings than they used to for non-HTTPS sites.
I wish Servo was mature enough to serve as Electron replacement.
That's because a fathom is a unit of length (or depth) so 4 in to 1 obviously isn't going to work.
Yeah the exact circumstances are not known but it was clear after a couple of days that MH370 did not fly its designated flight plan and instead flew a different path and actively avoided detection.
Have written down my experience with Desktop PWA update: https://news.ycombinator.com/item?id=19377170
... then you’re not an insanely rich douche?
For me it boils down to simple time availability to invest. Can’t speak for everybody though.
What are insider's views on the MAX being the new MD11 cargo, which had a similar software solution for stretching-induced aerodynamic instabilities?

https://www.pprune.org/rumours-news/619272-ethiopian-airline...
A Universal Truth of Life: Failure
In fact, potentially for political reasons, an intercepted communication between Russian rebels in Ukraine and Russia based military was released within hours of the crash on youtube

It was released so quickly that some even thought it was Western propoganda, but all evidence points to the plane being shot down by a BUK
At which point why would wouldn't a new company form to compete with them? They probably couldn't kill the market forever, and it would be very expensive to try this and fail.
The title used to say "The Founder: how the creator of TrueCrypt became a criminal masterming". I just fixed the typo to "mastermind". Thanks @bryanrasmussen !

Edit: It has now been updated by the mods to its current title. It went through "The Founder", "The Founder: Interview with Evan Ratliff, author of The Mastermind", and "Inverview with Evan Ratliff, author of The Mastermind", and probably manually demoted from the #1 spot.

I understand the rules of non-editorialization of titles (unless you're the article author, the you can click-bait as you wish), but it seems even the mods understand the need to provide context.
The 3-in-1 full-stack developer
Him being behind TrueCrypt is only speculation. There is no proof that it was him, and he denies it himself. There's only some limited circumstantial evidence.
They were in cruise, which means the flight plan was already set and can be viewed on the MCDU. Sure they lost a fancy map on the ipad but that doesn't mean they suddenly don't know where to go.
My email client (geary) makes it pretty easy to add and send from aliases. If I ever need to explain this to someone, I'll keep a demonstration of this in mind :)
Bitcoin Coders Send International Lightning Payment over Ham Radio
How is dark more enabled, do you know? Is it automatically enabled while under Mojave dark mode, or? Thanks!
Oh I see, thanks for your answer. It's mostly a developper issue for you then, and it's your sysadmin job to provide you with the right tools ; but he probably won't take "just install debian everywhere" as a valid suggestion. A sysadmin just needs putty and then he'll build his infrastructure to make his life easier. He will never write or run code on his own machine, but on a machine similar to the production target. And he will rarely write code himself to begin with.

You can ask your sysadmin for a FAAS (such as jupyterhub, or anything that you like) to be deployed on machines that are iso-prod. You can also ask him to provide a proper ci-cd toolchain (start small with the minimum, git to build to test deployment to unit tests). And of course matching your dev machine with the production will be beneficial if you can't get a FAAS, but your native OS may still be windows or macos, simply you will use virtualization or docker to make it compatible.

As a sysadmin I face this problem a lot here. I work with python or R dev and we are providing them with server-side IDE (RStudio and JupyterHub), otherwise they will have something running on their windows laptop (provided by external teams, we have no control over that nor the right to change it), and expect it to run the same in production.

But as a sysadmin I don't face the problem myself, because I don't develop much, that's why I didn't get the initial comment.

Edit : just to clarify a point. Just a few months ago when I arrived, it was indeed really painful to see people write python or R code on their windows machines, and not be able to run their code on the server. Some of them even asked to have windows servers to get rid of that issue. That's the type of miscommunication that I'm talking about, because on the other side of the email, someone gave them the windows servers, not understanding/caring about their actual need.

It was obviously the wrong solution but, in desperation and with the incoming deadlines, it became the right solution. So the problem isn't CentOS vs Debian vs your laptop, it's really about consistency in the toolchain and pipelines. The exact tool doesn't even matter (as long as it works).
Please, respect other people's choices.
I'm not sure what are the benefits
going `FROM alpine` and installing
nginx, than just starting `FROM nginx:alpine`.

The former hands your balls over to Docker Inc and the "Alpine Linux Development Team".

The latter hands your balls over to Docker Inc, the "Alpine Linux Development Team" and a guy or girl called "jkilbride".

Edit: No, it does not! See toong's comment below.
> Did the E.U. ground the A320 when the Germanwings suicide pilot crashed the plane in the Alps, killing 150?

Was there a similar-seeming crash of the same model a few months before?
this is dope af!
https://q8l48rwk49.codesandbox.io
Cool!

Perhaps you could also support real-time sensor data? Services as Luftdaten.info would love to have these visualizations.
"It depends"

There is a sister standard to DKIM called DMARC that lets a domain publish instructions for what to do if unsigned emails are received. It can run in allow, report and deny mode. Report is useful, it asks the recipient to send it back to the domain which is helpful for large networks that may have many people and services sending mail on their behalf.

You can use this tool to compare gmail.com (ignore failed signatures) vs google.com (reject)

https://dmarcian.com/dmarc-inspector/

Thus google.com i.e. Google employee / service email is protected from From header forgery, but consumer Gmail isn't (too many people sending mail from non-Google SMTP servers).
Thank you, emoji was added for no reason, article have been updated.
yes .. so the problem this module tries to solve is an easy extensible way (via templates) to transform JSON schemas
Successful Businesses on Instagram – What They Do Right
Open Source Rapid Hardware Prototyping
Is it still a choice if the user didn't think about choosing?
Aviation doesn't work that way. If a moving plane screws up in any way (too close to another plane, wrong taxiway, botched takeoff/landing, etc) it will be noticed. The US also has the widely used ASRS system for confidentially reporting safety issues/lapses of any kind for everybody's benefit, and most other countries have similar systems now, although I can't vouch for Ethiopia specifically.

https://asrs.arc.nasa.gov/
As aosaigh said, it's the same author interviewed on the podcast. In addition to the Atavist magazine's publication, his book came out a few weeks ago.

I had never heard of the story before, and now I can't wait for biopic :-)
They don't have an easy time getting away with it because they're largely a community project and exist with the aim of doing better. That will remain the case - even in the unlikely future where they'll be in the lead. In the present day, however, we don't even need them to be in the lead - they just need a somewhat significant market share.

Furthermore, trustworthiness is a spectrum, and Mozilla's issues are still peanuts compared to Google's. It's a valid stance to criticise those issues, but it's flawed reasoning to use those as a reason to jump to Chrome.
Do you realize this will kill developer wage?

All this will overload supply side and the demand isn't increasing much and developers will be on the whims of companies.

This is already so so bad
Well not _all_ the bits. We do want the serial numbers to be non-identical because you need a way to talk about specific certificates for validity checking. Once upon a time bug reports would have focused on certificate serial numbers, these days they're more likely to be crt.sh links but arguably we should discourage that because crt.sh could go away some day.
Spare me. The pilots themselves have stated that they were completely unprepared to fly the plane safely in any condition with 0 training or warning.
> Microsoft, if not checked with antitrust investigations, could have shoved Bing (or Live, or MSN Search) down everyone's throat. Just like Google tried to do with Google+. So to credit Warren's point, without antitrust case, we could be living with Bing (or Live or MSN Search).

Bing started in 2009. Google was already amazingly dominant at that point. What did the previous antitrust cases have to do with Bing's success or failure?
India's starry dwarf frog, lone member of newly discovered ancient lineage
> Not sure if it's a true story or not (can't be bothered to check) - but seems like a good illustrations of the problems that are faced.

This exact sentiment -- that the truth of some tidbit of anecdata is not only unverified, but it's verification is irrelevent and should be treated as backing up a larger position regardless -- is one of the core problems with the current discourse.

As other commenters point out, not only is it not true, but such fraud is accounted for and mitigated in the existing procedure. So this is a bad illustration, it should seem like a bad illustration on the face of it because it hasn't been verified or contextualized, and in general we should all be suspicious of simple, pat little anecdotes that validate our assumptions about how the world is or ought to be.

Sorry for the rant, but I'm going to downvote this lazy thinking every time I see it. I hope we all aspire to better analytical thinking about the world, given that most of us here have to write software that interfaces with it.
>When PayPal or your bank or another large organisation send you an email it should be signed. Then you can verify it is from them.

The problem for the layman user though is that PayPals.com (fraudulent) can also sign their emails -- and they'd be conditioned to equate "signed = legit" (and can easily miss misspells, alternative domains, etc).
1555013: B737 MAX First Officer reported feeling unprepared for first flight in the MAX, citing inadequate training.

1593017: B737MAX Captain expressed concern that some systems such as the MCAS are not fully described in the aircraft Flight Manual.

Edit: A CSV of all incidents that include "MAX" in their report text: https://pastebin.com/ezhffWRn
It's not great, when it will result in huge decline in wage to level of janitors then you guys will realize what LambdaSchool is doing.
I agree that decentralized systems should make things more open/free and censorship-resistant.

However, cryptography can certainly be used to restrict access or add moderation features.

For example, here is a demo of a P2P LinkedIn with ACL: https://www.youtube.com/watch?v=ZiELAFqNSLQ

Moderation powers scare me, but I do know that notabug.io , d.tube , and the upcoming HackerNoon 2.0 have this type of feature. Except it is called "curation" (technically, content can't really get deleted, but a curated homepage can certainly exclude content).

The good news is that the founders of all these apps are working towards user-configurable curation, so you could override who/what/how curation happens. I don't like moderation, but opting into a web-of-trust is, I think, an interesting area to explore.

No matter the good I want to come from decentralization, it certainly can be used for bad. However, its abuse should be less than centralized system, so hopefully that means real progress is happening.
I'm writing German science fiction novels as a hobby that are around 700-800 norm pages each and learned the hard way that at least in the German publishing market there are virtually no program places for science fiction, very few agencies accept manuscripts in that genre at all, and publishers rarely accept novels larger than 400 norm pages from a first-time writer.

I'm currently sitting on 8 manuscripts - two of them are actually 1400 norm pages each. I'm writing on my ninth novel now and will one day give away all of them for free. The problem is that correcting and finalizing them into book form (e.g. typsetting in LaTeX) takes too much of my spare time.

I'm just writing this as a friendly advise. At least for smaller markets like the German one, do not ever expect to be able to make any substantial amounts of money from your writing hobby. The trend is against it, and it's much cheaper and less risky for publishers to get a successful US writer translated than to accept a new local one. People are also reading way more English originals than they used to. Besides, agencies are looking for urban fiction, "novels for young women", gift books, etc. (Before you ask, agencies have attested me that the quality of my writing is fine, but what they say and what they think are two things and this may also play a major role.)

Of course, it's still my favourite hobby. Once you start you cannot stop. I don't think that any particular lessons can be learned, because everybody writes in a different way and under different circumstances. The bottomline is that it's not hard to write a lot. ;)
An official docker image represents a solved problem, that is getting all the requirements of an internet service in a portable form that you could put behind your reverse proxy and host it to the world. I haven't used docker for non console or internet services. For any other desktop software package managers or app images are convienient enough for my needs.
If you can control bunch of juniors through your body language/bully character what I suppose the bodybuilder is like, you can be senior to them without even knowing as much as them.
"Integration" into the underlying OS (showing up as a desktop icon / homescreen shortcut)
You also have the choice to buy clothes stitched together by children in Southeast-Asia under horrible conditions, but we all know that a responsible consumer decision looks different.
Slightly off-topic: any ideas of other good tech podcasts you'd recommend?

I just did a HN search, but did not find any such thread.
Since the database is Chinese, it's fair to assume that the people who came up with the keys are native Chinese speakers, and thus would have translated the concept they wanted to express into English to get ASCII-only keys, and came up with "BreedReady".

It's not just speculation, the fact is the database is Chinese and the key is "BreedReady". I don't find it that difficult to understand how it could have ended up like that.
An analog signature does "prove" your identity. Not very well, of course - the amount of effort to forge it is much less than a digital signature - but that's a question of degree, not kind. They are still easier to verify than they are to forge. I think the metaphor is very useful.

It also neatly explains the concept of key sharing, which seems to present some pedagogical difficulty for some reason - you can sign your letters all you want, but if I've never seen your signature before then it doesn't actually prove anything.

Public key = knowing what your signature looks like

Private key = the muscle memory required to create a signature
This conspiracy goes all the way to the kernel!
> The number of programmers doubles every 5 years.

Source? This might have been true few years ago but there seems to be an opposite trend.
The Great Pepperoni Debate: Should It Lie Flat on Your Pizza or Curl Up?
Do you realize over the time it will result in huge developer wage drop?
It's funny, I see this comparison a lot and the people using it don't see how it misses the mark: the reason (the majority of tech) people hated SO MUCH on IE6 was not because it was proprietary, but because it was static and didn't bring get any advance, thus blocking the web's progress. Chrome doesn't have that issue, at worst you can claim it gives too much power to Google on decision about where the web goes, but not that it keeps it from progressing.

It was also not respecting the standards but only after a while (at release it was at the forefront of it), and that is also not a problem that Chrome can relate to.

I say that as someone who uses Chrome, enjoy it, but would also prefer if we didn't go back to a single engine being supported on the web (and I switched back to firefox on mobile, because of chrome lacks of support for ad blocking there).

By confusing what the fight is about and trying to make it about what it's not, I fear you make some people like me ignore it.
Ask HN: Recommended Platform for Programming Interviews?
Hi,

There seem to be a whole lot of platforms out there to do collaborative coding interview online. Many seem to look essentially the same: left side an editor, right side a terminal, and a green 'run' button to build (if necessary) and execute. Supporting audio and video is a bug plus. But I haven't found any that allow you to include things like supporting code or datafiles. I want to give candidates a chance to show how they work in a more realistic environment rather than transferring classic whiteboard problems on a new platform. Part of that, for me, involves providing some support code that they may or may not have the source code for.

Any suggestions welcomed!
So, are these "Constructable Stylesheets" a non-standard Chrome-only web feature that Google designed and implemented, or what's going on here?
Writing bad RegEx leads to Denial of Service, 143% spike in NPM packages
It is fair to point out that the negative effect of a google monopoly would be quite different from what happened with IE6
Yeah, and one of these "choices" implies not having any more choice at all
You know, it's not like you couldn't use one browser for work and the other one for everything else. I certainly don't need to inspect WebSocket frames while booking a flight, reading the news, chatting with family on facebook, or shitposting on HN.
That is a completely bonkers story, would make a great movie or series.
The government mandates that the farmers sell through these middlement, at prices that are set by the government (and gamed by the middlemen). This is a government caused problem.

You're right that the government should instead be focused on boosting competition and supressing cronyism, but its been, what, 85 years and they're still pushing the same thing?
Ah, that should teach me to post before checking the spec. Thanks.
Not neccessarily, you can have a system where you can retrieve 'proof' of having voted in any way you want, and you can verify via some secret information used when voting, but making the UX of such a feature good enough that it's actually usable by someone in those circumstances is not at all easy.
As a german, I think the biggest market in fiction by far is the fantasy market. And there are also a lot of German authors included in that market that don't get translated but are rather picked from local. But I agree with the rest of your post, if you want to live by writing fiction, good luck, because it's going to be the steepest of mountains to climb.
That initial A320 flight was a demo flight for journalists where the pilot was intentionally pulling stunts like flying very low in front of spectators. Turns out he was flying lower than intended and basically plowed into the forest at the end of the runway. There was a long, still unsolved debate about where the A320 reacted correctly to the pilot's eventual commands to rev the engines and pull up, but ending up needing to do that was definitely not the plane's fault.
This only works if you trust all your docker images and audit them for root processes. Even then you still have setuid binaries and other privilege escalation risks, if you inherit from dockerhub images etc.
Chrome is just as bad but for different reasons. And perhaps even more dangerous (like slowly eroding privacy, or shaping the browser around Google’s revenue generating services). I think the analogy stands and the damage is similar in magnitude.
Rust will always be niche. It won't win to C/C++. Sorry mate.
It's on page 4: https://news.ycombinator.com/item?id=19281834&p=4

Click "More" at the bottom of the page to navigate between pages.
With the continued over-reach by some first world Governments, it may not need to be illegal just in your jurisdiction.
Yes - my Chrome starts in dark mode when Mojave is in dark mode.
I like "Talking Machines", about Machine Learning/AI.

Link: https://www.thetalkingmachines.com/
> Nice. The only thing keeping me away from Scaleway are several bad reviews about Online.net network. Anyone got any experience on this?

I never had any issue with my Online.net servers (one at a time, but I upgrade it from time to time) nor my Scaleway one.

> When I contacted support to ask if they have plans to mitigate this, their full response was "sometimes we are victims of our own success" (nice, good for them, but some real information would be useful).

The two datacenters they use for public hosting (DC2 and DC3) are full. They recently finished building a new one (DC5) and commissionned a first room a few months ago.
Instagram influencers are taking over the virtual world
Airbus has since updated its flight control feedback systems
Flip that around: would you expect that pilots flying a new aeroplane without any conversion training would be more likely to cause an accident.

It's a damning indictment of Boeing, and whichever authorities let them get away with it, that they pushed through an aircraft with a different pilot UI/UX knowing that pilots would then be under trained when using it: like someone said we train baristas better.

I've driven minibuses before and always ensure to get an hour of driving a new model before taking passengers.
I never understood the need for server-side speech recognition. Did an internship in 2013 for speech recognition on a BeagleBoard with Julius (https://github.com/julius-speech/julius), the thing worked with ninety-ish % accuracy (japanese language) and delay comparable to what my tablet gives - but locally.
If you want to get away from Chrome my tip is to use Opera. Same engine underneath & can handle same extensions (with a proper extension installed) but without Google.

Opera also has a battery saving feature.
Do the car incident statistics only take into account long distance trips?
Also, have you ever thought about writing your stuff in Markdown? I've made pretty good experiences with it regarding converting to epub, mobi and pdf. I'm not sure of norm page formatting though, so that might be a good reason to use LaTex instead.
Yes, it's been automatic in Chrome Canary, so it's probably gonna stay that way.
"Nobody Hates Software More Than Software Developers"

https://blog.codinghorror.com/nobody-hates-software-more-tha...
I like it a lot!

Though, I would like to share some feedback:

- Many visulization would benefit from adding an optional logarithmic scale. Or at least "per capita".

- While I love the interactivity, and other features (downloading CSV data, etc), I think the design (colors, edges, etc) would benefit from some polish.
SPLC Surpasses Half Billion in Assets, $121M Offshore
Last year, I relaunched my website with just CSS – and I'm not missing anything. JS is used just for the error pages, featuring a game as optional content. :-)