skysight-inc/HackerNews huggingface dataset:
> There's almost no words there that would gel into comprehension in any way for average Joe and Jill.

Hardly. The first paragraph is easy to understand -- you tell them that "there's no proof it came from you" and that "its easy to fake emails" and that signing the emails digitally helps prevent that. Everyone can understand "there's no proof it comes from you" and "fake emails" follows on from that. Everyone knows what a physical signature is and how it helps identify that something was written by you and can imagine the concept of a digital one, even if they have no idea about the mechanics of one.

That goes a long way to describe at least why you would want to digitally sign emails, even if it doesn't tell you anything about how it works.
What a good website, other articles are even more interesting to me. thanks
How to Record Screen in Ubuntu
Why Business Analysis Is a Treasure Trove in Software Development
> they should make it law that your kids can't attend a university if you've donated there.

Wow, not so fast. I'm a Stanford grad and I donate a bit of money every year when they ask. Should my future kids be excluded from admissions? There's a world of difference between donating and donating to get your kids admitted.
The EU has a lower salary threshold - €27,500 I think, though it isn't explicitly listed on the site (https://lambdaschool.com/eu/)

EDIT: Not sure if you were referring to US or EU, since you mixed around the $ and € sign a little!
There's also the 'smart border' issue.

At the start pro-Brexit politicians were saying the border issues can be resolved to a large or at least good enough extent with technology. Number plate recognition cameras, better IT systems, pre-registration, trusted trader schemes. A bunch of stuff together that'd mean no need for a hard border of the sort of that would set off the IRA blowing people up again.

The EU dumped all over these ideas very publicly, laughed at them, described them as "unicorns", told the UK to get real etc.

Two problems with that attitude:

1. It was a lie and they knew it was a lie. Barnier admitted it would work just a few months ago, after holding the position for years that it wouldn't. France just announced a very similar set of measures to handle the France/UK border. Borders experts had testified that the schemes were workable. The UK doesn't care if there's some leakage anyway so it doesn't even need perfection.

2. It has reinforced the idea in the UK and amongst the population that the EU is willing to go to any lengths to get what it wants. It has literally said to the UK: we insist that the price of leaving us is either terrorism and deaths, or annexation of large chunks of your territory. Entirely reasonable attempts at finding compromise were all rejected with insults and arrogance. This behaviour has not surprisingly infuriated many people, including many members of Parliament.
This article really annoys me.

It's "Rage Culture" or maybe just front-page seeking by the author. The problem with that is that it makes people desensitized because if everyone is screaming all the time, one should just shut their ears. We have real issues to discuss and this isn't one of them by a long shot.

Reducing the search space from 64bits to 63bits is of no consequence because if an attack on 63bits was feasible, it would mean the same attack would work 50% of the time on 64bit (or take twice as long for 100%). That wouldn't be acceptable at all.

Sure, 64>63, but at the very least it's not "A world of hurt"
Cut the Science Budget? Not So Fast
Cheaper GPU offering for one. Feel free to add.
In Fedora, we have a web form configuration with a basic bug reporting template in the Red Hat Bugzilla (which we share with Red Hat, since it's useful to cross-link bugs between RHEL and Fedora).

In addition, we created the Automatic Bug Reporting Tool (ABRT)[1] to handle program and system crashes and report them so developers can look at them.

We have hooks in various parts of the system to help generate useful bug reports of serious issues with crash data, machine information, and so on. They get submitted as private bugs by default to the bug tracker, and the Fedora retrace server[2] kicks in to request the debuginfo data remotely to get traces as needed and include those in the bug report. ABRT also helps you strip sensitive data (if any) from information being sent remotely before sending it.

You can see pretty charts about the crash analysis too: https://retrace.fedoraproject.org/faf/summary/

[1]: https://abrt.readthedocs.io/en/latest/

[2]: https://fedoraproject.org/wiki/Features/RetraceServer
> The appeal of the 737 MAX for airlines was that it was intentionally made so that you could take crews with a 737 qualification and put them in.

Really? Everything I heard so far sounds like the 737 MAX has a few new, unusual or counter intuitive features that require extra training, and that training material skimped on training for that.

> "just old 737 nothing new here hop in"

Am I correct in understanding that was a blatant lie?
Silicon Valley’s Worst Nightmare Is Ready for Her Next Act
There's a Slack protocol plugin for Pidgin (and other libpurple clients).
https://lambdaschool.com/eu/

TUITION OPTIONS
- 0 up-front + 10% of salary for four years (£25k GBP / €27.5k EUR maximum total payment)

- £16k GBP or €18k EUR up-front + no income-based repayment

PAYMENT CAP
£25k GBP / €27.5k EUR maximum
Nothing that another crash and huge human toil can't fix.
There is plenty of human or mammalian behaviour that we don't view as axiomatic virtues in the way you do, and take steps to curb or change them.

This is one we can and should change.
Things You Must Know About EOS
Show HN: I made a web-app to help me keep track of the books I'm reading
I would read it the same way, but personally I would want to attach an additional qualifier: It's likely that this is one of the causes.

There may or may not be something inherently problematic about the way the MCAS works, but more thorough training would likely have lowered the chance of these accidents happening - having the same type rating was one of the root causes for the lacking training
Through the usual keyserver network, keybase and my own web server.
Just thought I'd share a little something I've made over the last week while learning React and Node JS.

Hopefully I finish more books now and I opened it up so you can too.

Cheers!
JIT-Less V8
Spotify Files a Complaint Against Apple with the European Commission
If the Max was built by Airbus rather than Boeing, more likely than not the U.S. would have grounded it by now.
That's what I thought. But after 5 years I gave up and do not sign my emails any more.
Exceptional write up and mobile presentation. Thanks for posting!
A New Study Says the Arts Contribute More to the US Economy Than Agriculture
Aren't you talking to complete strangers right now? I can't say I remember meeting you :)
Rewarding Neglect and Punishing Investment in Struggling Neighborhoods
That is just regular DAM (Database Activity Monitoring).

I know few companies use it on even fewer DB's but it can really help to identify "rogue access" to your data. It takes (a lot) of time to tone it down to your specific needs and DB access, but once it is up and running it can trigger at the right time (as in the article).

There are different kinds of DAM, inline just reading the network traffic, missing the direct access accounts would have from the DB server itself, and the ones that monitor the DB service memory directly. Of course you could start way cheaper / simpler with some proper logging from the DB software itself.

It is a growing security area that is a nice (once tamed) additional information source.
Yes, and this is in line with the article we are commenting, which talks mostly about authentifying the sending organisations and not individuals.
I wrote "If that exists" because as you see in my first sentence, I agree with you - I don't think it exists at all.

Instead, I'm pointing out that if there's a social contract one way, which places expectations about what upstream must do for downstream, then it also must be read in a reciprocal way.

I called out to esr to emphasize that we're talking about "open source" and not "free software". Raymond is one of the group who decided to use that term in 1998, and one of its most ardent early proponents.

His writings include "Homesteading the Noosphere", where he talks about the gift economy of open source. Quoting http://www.catb.org/esr/writings/homesteading/homesteading/ :

> There are reasons general to every gift culture why peer repute (prestige) is worth playing for: ...

> Thirdly, if your gift economy is in contact with or intertwined with an exchange economy or a command hierarchy, your reputation may spill over and earn you higher status there.

This is an argument that open source gains reputation which gains "higher status" in an exchange economy. (Meaning 'control of things (not necessarily material things) to use or trade', including money.; quoting http://www.catb.org/esr/writings/homesteading/homesteading/a... )

Other examples of people suggesting that such a 'promise' exists are not hard to find. For example, "How contributing to open source can help you land your first job; Six compelling reasons why, warm fuzzy feelings aside, contributing to open source is good for your career." https://about.gitlab.com/2018/04/06/contribute-to-open-sourc...

Stallman and the FSF's view of free software and the mechanisms for funding such are different than those expressed by the major open source proponents, so I don't consider it useful to point to the original GNU projects for a discussion of the implicit social contract described by open source proponents.

FWIW, my projects followed the free software path for nearly 10 years, until I could no longer support my (growing) family on the "incidental side effect commercialisation" of that movement.
Which fleets do? Southwest and American don't, 5% and 2% respectively.

Norwegian is 11% and have grounded their planes. Air Canada 10%. China Southern 3%, Air China 3%.

FlyDubai seems the largest, with 14/62 planes (23%).
> It seems to be that the crash situations are way too complex to blame a single party.

It seems to me like Boeing is very much intent on blaming a single party, ("3rd world pilots/airlines").
Best All Supercars Engineered for GT Racing/Formula Competitions in 2019
Combing Through the Economics of Baldness
IMHO I would say start simple and work your way up. Begin with doodling and then progress to more careful drawing. It's often easier to copy another artist's work or to draw from a photograph. One advantage is you can draw lines over your reference imagine and make measurements. From there you can practice shading and get a sense of tone. Don't try to cheat by smudging with your finger. It may sound stupid but make sure you have a full set of pencils as you'll probably want to go darker that you can with a regular pencil. Once you're somewhat happy with that I would then move onto acrylic paints. You can draw out the image as before with measuring and then use that pencil drawing as a guide to paint over the top. Be careful when using black paint. It may just be the paint I used but attempting to make darker shades by mixing black would just give black. Once you're happy with acrylic paints I would then move to oil paints. Oil paints take longer to dry than acrylic paints which can throw you off. One of the great things about paint is if you make a mistake, you can simply paint over it :-) (though with oils you may need to be a little more patient). You may want to take what I've said with a pinch of salt as I've not painted in years and I'm out of practice with drawing. I still make collage-type images in Gimp though :-)
The Nadir of Surveillance
It’s all hype coming out of Google. Most of this stuff is meant for foisting overpriced solutions onto unwitting GCP customers who get burnt by vendor lock-in and don’t have enough in-house expertise to vet claims about e.g. overpriced TPUs or overpriced AutoML.
Vote by mail is accomplished by accepting that a number of households/groups will cast a unanimous vote that would have been different votes if they happened in the enforced privacy of a voting booth.

That might be an understandable opinion if it is accepted as a conscious trade-off, but if you pretend that it will never happen you are just lying to yourself.
There will be a point in time when CEOs of those airlines in the US that do not ground 737 MAX planes get into a lot of trouble if something happens to one of their planes. Then they play with jail time instead of payments to victim relatives.
I don't think that's a problem. IPFS is content addressed so each added commit/issue/whatever added to the chain of a repositories state changes the head address. IPNS is then used to update a pointer to that head so you can address the whole repository with a fixed name. Only the owner of the repository can do that. Here's a bit more about how all that works: http://www.radicle.xyz/docs/index.html#radicle-p2p-architect...
That sounds like a good setup to keep things where they belong. Thanks.
This is actually the case in Fedora, too. That's why we created Pagure[1] and HyperKitty[2].

Pagure provides a service similar to GitHub and GitLab, while also supporting mostly offline workflows. Pull request metadata, issues, documentation, and of course the code, are stored as Git repos. You can clone them, do work, and push them back, and Pagure will act on them appropriately. Or you can operate from the web UI if you prefer, and ignore the fact that the data is stored as Git repositories internally.

HyperKitty adds web forum-style conversation views and functionality to a mailing list, allowing people who are uncomfortable with handling everything by mail to still follow and respond to threads and be part of the conversation.

Both of these show it's possible to support the old guard while making it possible to welcome fresh blood and adapt to their preferences.

For better or worse, it's an "adapt or die" situation. Debian isn't adapting, which is not good.

As an aside, Debian nearly did deploy Pagure. The community voted for it, and then the DSAs (Debian System Administrators) decided on using GitLab using GitLab Omnibus (not even the GitLab packaged in Debian!) anyway, which upset a fair number of friends I have who are Debian Developers. But all of them said that they were powerless to influence change, which seriously speaks to some kind of broken process here, where the "most powerful" group of people in Debian feel powerless about stuff like this.

[1]: https://pagure.io/pagure

[2]: https://hyperkitty.readthedocs.io/en/latest/
Spotify Files EU Antitrust Complaint over Apple’s App Store
> he found it problematic that inside the Docker container, everything runs as root by default

That's technically right, but not what you'd expect. Docker runs root in a few restricted namespaces and behind seccomp by default. The syscall exploits people are worried about are often simply not available. Even then it's easy to take it another step and create new users. You could even have root mapped to a different user on the outside if you prefer that.

That shouldn't be an issue if you're coming from FreeBSD - https://www.freebsd.org/doc/en/articles/new-users/adding-a-u...

> If you did not create any users when you installed the system and are thus logged in as root, you should probably create a user now with ...
Yes, the chicken and the egg problem seems huge - both for user acquisition and retention. I have at least 30 ideas that would be great "if a lot of people were using it" :D
And per aircraft flying hour?
Microsoft only further proved that Skype and the team building it suck and everyone should continue not using it.
If leave won again, we'd definitely definitely have to leave.

Leave already won twice. In the first referendum, and then in the general election called by May in which the Lib Dems ran on a "cancel Brexit" platform and lost most of their votes as a consequence.

What we now see is that many of the politicians who claimed they supported leaving the EU and would work towards implementing Brexit have turned around after winning re-election and announced they had lied, they would work to stop the UK leaving. MPs who said "a second vote would be undemocratic" are now saying "we must have a second vote".

The brutal reality is that there is no difference at this point between Remain as a position, and supporting the formal end of democracy in the UK. If a certain argument wins a referendum and then a general election in which both main parties claimed to support it and then Parliament simply tears up all the manifestos, public statements, conventions and speeches, people will conclude there is no democratic way to ever exit the EU and thus the country has been conquered by a political class that is apparently impossible to remove - because if they are willing to lie about their intentions to win election, how can you be sure you're voting for a "real" Brexit supporter?

If even 1% of the people who are watching their winning votes get torn up stop believing democracy works, and turn to extremism or violence, there could be massive problems for the UK. But the EU as an ideology has a sufficiently powerful grip on most MPs that they are apparently willing to take any risks, do anything at all to ensure its victory.
I got in touch and their reply was as follows:

--

According to a security issue about your account, we would like to verify your identity to unlock the situation.

For this we will need you to send to this mail address XXXX the following document :

If you are are an Individual , we invite you to send :

* A copy of your ID
* A picture of yourself holding your ID

If you are are a company, we invite you to send :

* A business Certificate

We will process your document as soon as we received them and will make contact with you.

Why asking you these documents ?

As you know some swindler steal the identity of other people and use their credit card number getting them in unscrupulous way.
By asking you these proof, we will be all protected from these people.

The process link to this identification request as a goal to fight against fraud and unpaid bill.

All the document which will be sent will be received by departement taking care of fraud.

--
Australian Alps Walking Track
this reminded me so much of a post (now lost) about "first MMO games". The gist was that everyone remembers their first MMO game (regardless of how technically crap it was) with huge nostalgia, and regards every game since as sub-standard. Even though they no longer play the original game, and actually play the newer, sub-standard games.

I had this exact experience with DAoC and WoW - DAoC was a total grind, while WoW was a much better experience, but I still feel nostalgic for the experience of DAoC. I even tried going back to DAoC, but the grind was too much and the magic was gone.

I guess what we miss about "the old days" is not so much the technology, but the experience of being new at this, and the excitement of having this whole world open up to us.

I'd be interested to see if going back to before-Facebook tech will keep the magic alive? I somehow doubt it, but it's definitely a worthwhile experiment.
Customer Experience is the new marketing. Do you agree?
Paina
Thank you for sharing. Is a background in physics required/advised to be able to comprehend its contents? (My major is in economics.)
Spotify Files Complaint with European Commission Against Apple
A Dogs Golden Years
The oss ur probably got caught in preflight. We don't know how much the plane was used before that though.
Oddly enough, I believe there are a number of lessons that crossover between tech and writing.
Having written a novel, and built companies, they both require similar skills in terms of planning, patience, MVP (first draft), rushing to market, incremental improvement, shipping regularly etc.
Even so, offline AI solutions have been piss poor and Google moving the state of the art in spite of their vested interest in keeping people online is a good thing.

Yes, we want an open source solution, but I'm not going to work on it. So who's going to work on it? Are you?

In absence of resources working towards the ideal, I'll applaud any step in the right direction.
They know that they have to protect the economic interests of their companies and if that means blaming everything on '3rd world pilots', (with the implied racism and all that), so be it.
Formatting Clojure Code
How to Contribute to the Raspberry Pi Community
Where do you store who is ad admin?
Where does "jkilbride" come from ? Aren't you confusing `nginx:alpine` with `jkilbride/nginx-alpine` ?
Effective ways to build trust as a leader
7 checkboxes to compare serverless orchestration services
Right, and the departments are completely separated and don't work on a 'You scratch my back, I'll scratch yours' basis, ever. /s
It's great to see that it's still possible to create specialised social networks outside of Facebook...
Design Quarterly on “Hats” by Richard Saul Wurman (1989) [pdf]
Regarding the differences, this website does not seem to encrypt the files on the server, and does not provide links directly, so you need to provide at least one valid email address, if only to send the link to you to then send it to the party you want to share the file(s) with. It's also not open-source AFAICT.
I'm curious, in what way do you feel it's less advanced? Mock supports leveraging qemu-user-static for doing foreign architectures as of Mock 1.4.11, which I think was the only major feature that the Debian tools had for a while that Mock lacked.

Is there something else missing?
I've read the docs but there is no obvious way you can actually remove an issue or PR from the repository once it's there, atleast not with the tools provided out of the box.
DKIM and DMARC only verify the domain of the mail server ... which is something we care about only because the email clients can't do something better. A signed email identifies an individual sender. Pretty much apples and oranges.
Nope. Back in the old days Microsoft actually did tests on this in Internet Explorer, with users real banking credentials not fake ones, so that the user would properly value giving credentials away.

The only thing that actually works is brick wall UX. If you don't give the user the option to ignore the problem, they are forced to give up, which was the only safe option for them. If there's a way to continue, despite it being unsafe, users will do that.

Humans have a psychological defect in which they become rigorously focused on achieving a specific objective, and screen out indications that this is a bad idea. This is why those signs saying "Danger! Low bridge" aren't as effective as you'd expect. The human driving the over-height vehicle is focused on getting to the other side of the bridge, your warning signs aren't helping them do that, so they ignore them.

This is why a modern Firefox has brick wall UX for some HTTPS problems and would like to do it for more such problems. Only brick wall UX keeps people safe.

This is also why "bad idea" and similar Chrome overrides for their brick wall have to be changed periodically, these start a "power user" feature for people who actually do what they're doing, but quickly they spread and are used by people just trying to get things done, without grasping that now they're completely insecure.
Agreed. It's linear in the average view distance per column, which has the map size as its upper bound. I guess you could make a case for the average view distance being independent of map size for a given map style.
According to this post and all the bonus that came out in the comments, they should've been grounded before the accidents: https://news.ycombinator.com/item?id=19373216
Sorry! Looks like I can’t delete it, but it doesn’t appear to be getting any upvotes anyway. Congrats on a great looking product btw!
Cool! You might also want to checkout git over Secure Scuttlebutt: https://scuttlebot.io/apis/community/git-ssb.html