skysight-inc/HackerNews huggingface dataset:
What's the industry 'standard' nowadays? I assume SHA-256 would be decent but I don't really keep up with that stuff.
I work at a major bank and for the US Army. Both of those organizations are hyper sensitive about security for good reasons. Unfortunately that hyper sensitivity often results in really bad decisions and gross misunderstanding of software.

Publishing software is not a security violation in greater than 98% of cases. The only valid exceptions are protections of trade secrets and cryptographic information.

I am not counting software with embedded credentials, embedded business data, or other bad practices. Those are security violations regardless of public exposure.

Trying to explain this to security sensitive organizations is painful. I am confident in the stupidity of this conversation as somebody who has been writing code for more than 20 years and passed the CISSP exam the first time back when it was a 250 question paper test.
Do they?

If you reverse engineer a system and write a spec using clean-room technique, it's going to be massively easier for the team to do it if they have lawful access to the no-longer proprietary source code.

And wouldn't that be the method to re-create your own copyrightable implementation of GPL code too?
Nobody is obligated to work on FOSS unless somebody is outright paying them to.
The article is mostly true. But it missed the fact that most coding jobs are the 21st century equivalent to factory line work. There's a lot of mind-numbing repetition that needs to get done at the fastest rate possible. Coding pays well but there are better careers in tech that will be less punishing on your mental health.
Does anyone use Sway (or a tiling wm) mostly with graphical applications? Sway is tempting since it supports some niche features other Wayland compositors may never support, like cursor hiding à la unclutter and real redshift. I use a terminal everyday, but I don't mostly use a terminal.
I agree, NBC is pretty much on the left. If they're calling the plane safe, my conspiracy theory must be bunk.

Thanks.
Any plans to move the source code from github to sourcehut?
PPIO Press Primer
We are PPLabs, a global technology group dedicated to creating PPIO, a decentralized programmable storage and delivery network based on the blockchain.

It works by splitting, encrypting, and then distributing your data across a decentralized network. Any amount of data can be stored and you can have access to it at a lower price and faster rate. Our goal is to create a robust and efficient alternative to current centralized cloud storage providers like Amazon S3.

What’s wrong with the current system? From alarming data breaches and grand scale data outages to the rising costs of storage, centralized storage has a number of things wrong with it. We can create a better system that’s faster, safer, affordable, and decentralized.

Sounds good but why you? We’re spearheaded by Wayne Wong and Bill Yao, co-founders of PPTV, a P2P storage and transmission network used by 450 million users worldwide. Having built one of the largest distributed P2P distributed networks, established a strong founding team of 30 people, and secured seed funding, we believe we’re the best group to handle the task of decentralizing storage.

Which stage are you at currently? We formed in June 2018 and have already released our whitepaper, our TestNet, and published our SDK/CLI. All available on our website and Github.

Do you have plans for an ICO? At this stage no. Right now we are focused on building our decentralized storage platform so it’s the best product possible.

What’s next? Completed versions of our SDK and MainNet are scheduled to go live this year. Then we’ll continue developing applications that best utilize our technology.

How can I support your project? Visit our website, check out our TestNet, and join our community on Discord. We’ve got a developing community that’s open to everyone.

Contact Us
info@pplabs.org
Shanghai
>That is effectively a monopoly.

Monopoly on what exactly?
What is your business model if your platform is free? Either that price has to change, or you plan on making money on the same thing all other free services run on: data.

The site isn't very upfront about it, which is the sketchy part. Other than that, it looks much more straight forward than other options (I did watch the youtube tutorial). I like the idea, just question the motives.
Airflow and Dataflow are not related.

Google open sourced dataflow as Beam - https://beam.apache.org
Pinched nerve, more likely than the Toradol.
Show HN: My 7 Days Startup
Hi, creator here!

Recently I came across 7 Days Startup book, and wanted to see how it would work in practice. Being a part of YC School, and also working in a shared startup office - I often heard how hard it is to find a product-market fit, ask customers for their opinions, and get first leads.

I thought this could be a great problem to tackle, and may be solved fast enough. Since I am not personally or emotionally involved in other founders’ projects, it is much easier for me to survey potential clients about their honest opinions. Using my network, plus the 6 degrees of separation, I can easily reach professionals across different fields - and collect their opinions on project pitches - for 20-25% cut for their time.

Over the week I built Blue Delivery Imp - very barebones, but allows startups to post surveys, and me to deliver them in PDFs (plus a free demo!) - its now in a usable state, so I’m curious if anyone is going to find it actually useful?

Its a bit of manual labor, so I was thinking of subscription model $59/mo. - making it around $15 or less per report. I think it may save many new startups a lot of headache and time in their early days, and be more reliable than Google Ads.

Would love to hear your opinions!
An exposed database tracked whether 1.8M Chinese women were “breed ready”
Oh boy do I have a bridge to sell to you!
and no one gets to make money except Amazon.
Things I've managed to avoid buying:

- A standalone olde-style jukebox machine.

- A half-sized Street Fighter arcade cabinet.

- A split system air conditioner.

- Numerous power tools.

- An inflatable water slide.

Currently fighting against buying an 8-camera home security system to upgrade our dodgy 4-camera one.
Is NBC that far left? I felt like MSNBC was further...
> We need the web to be taken out of the hands of gov. and big corps.

Interesting use of the passive voice there. Who exactly is going to take the web out of the hands of gov. and big corps? Technologists?
Two words spring to mind: Streisand effect.

https://en.wikipedia.org/wiki/Streisand_effect
> Is fb actively stifling competition?

If they're suppressing the debate, then yes, they are. When it comes to political speech, the democratic governance process is definitely a competitor.

> Is there a market failure?

As long as Facebook is the go-to platform for political advertising and they use their position as the market to influence market positions, then yes, there is a failure. Imagine if the NYSE chairman picked the stock winners every day, not because he's a prophet, but because he literally decided, in advance, who's going to get to move shares today.
I am reminded of the scene in the movie Fifth Element where Leileu puts a pill in a bowl, pops it into the microwave and 3 seconds later pulls it out full of fried chicken.
Singapore just grounded all their 737 Max flights. Aeromexico and GOL grounded their 737 Max planes today. Soon we’ll (U.S.) be the only country left flying these.
Hmm. I'm at my second a16z funded startup and they have been tremendously helpful at both. Their briefing program is unique and genuinely helpful, and the firm has been very useful with introductions and helping find executive hires. I'm sure there are founders who haven't had good experiences with them; but I know a ton who have.
Definitely worth reading
NutsDB (kv store) v0.3.0 release, Support ACID transactions
NutsDB is simple, fast, embeddable, persistent key/value store written in pure Go. From the version v0.3.0 , it supports ACID transactions 。Before the version v0.3.0，NutsDB uses in order to improve the write performance use mmap, current version v0.3.0, discard mmap package (this package maybe has bugs about Flush function)，it will be supported in future releases.

## github link

https://github.com/xujiajun/nutsdb

## motivation

https://github.com/xujiajun/nutsdb#motivation

## Feature

* Simple and Fast

* embeddable

* persistent

* Supports transactions

* Supports many data structures like redis such as list, set, sorted set

## benchmark

https://github.com/xujiajun/nutsdb#benchmarks

Welcome contributions to NutsDB. thanks.
Isn’t the reason to fax not privacy from the government but rather that phone communications are subject to wiretapping laws that email/the internet isn’t so you have more options for recourse if someone non-government actor intercepts the message? At least, I heard that something like this was true.
You're incredibly naive and I hope you don't end up feeling screwed over by one of the big companies in a few years.
Successful writer knows other successful writers who make lots of money. Sounds like selection bias.
Memory Footprint of the JVM
Regulation of voluntary market interaction doesn't work because one-size-fits-all solutions don't work. You cannot anticipate all permutations of a class of interactions and preemptively prescribe optimal processes for each one. Doing so will massively inhibit innovation.

Free market disruption will do much better to check larger players than easily captured regulatory agencies which are much more likely to become protectors of incumbents in industry and unions than check abusive power.

If the government wants to limit abusive corporate power without setting the dangerous precedent of violating private property and contracting rights, it can fund open source development, like the EU recently did with its funding of Proton mail.
Then maybe FOSS was a mistake.
Where Did Boeing Go Wrong?
Open source and venture capital do not mix well. I’m not sure I can think of any positive examples outside of OS vendors (Redhat), but there are many negative examples come to mind, going all the way back to Eazel.

These debates go back decades.
News article about the grounding of flights in Singapore [1]

[1] https://www.straitstimes.com/singapore/transport/singapore-t...
The discussion is about visibility, not viability. The opening post says:

>open source is not that visible in the graphics/animation space
I think Amazon does a much bigger disservice.

> but enough open source will ensure that software licensing is not a sustainable model to seek rent

So your solution to this is to just make it so no one can make money doing work.

Except Jeff. Jeff gets all the money.
Please post some contact information. No idea what your geography is but I am very interested in chatting with you about some roles that I have that may be very well aligned to the skills and interests you are describing.
This has been my experience with I'd say 80% of the "Enterprise SAAS" outfits I've interacted with.
They can always scan them and send you the image.
> It makes smaller scale open source more commercially viable because you won't attract the attention of the providers that would come in a take your business.

Small scale open source isn't technologically viable.

> In the past they haven't seemed to be willing to contribute to the OSS

They are extremely hostile to the idea.
Technologists have been not only exceptionally ineffective at preventing this dystopia, they've been instrumental in creating it.
I wonder if Facebook's opensourcing of BPF [1] 4 months ago
had negative affects on F5's competitive advantaages.

BPF allows to run user code in kernel modules, so things like packet rewriting and traffic shaping are possible.
[2]

[1]https://news.ycombinator.com/item?id=18337429

[2]https://facebookmicrosites.github.io/bpf/docs/bpf-docs#tools...
Original title: "US arrests cryptocurrency exec over 'multibillion-dollar' fraud"

Subtitle: "OneCoin was allegedly an elaborate pyramid scheme.

From the guidelines https://news.ycombinator.com/newsguidelines.html

> Otherwise please use the original title, unless it is misleading or linkbait; don't editorialize.
They don't care about violating patents but they care about open source more than the general population. Taking a look at the stats from a large private tracker, a huge chunk of the users are running firefox on linux and the forums are full of open source talk.

FLAC tends to be the only allowed lossless codec over all the proprietary ones.
> It was very telling about how much time was wasted throughout the day.

Depends on a type of work that one does, for many office jobs today more hours spent working doesn't always translate into more work done. I personally find that taking frequent short breaks surfing web, reading news, checking FB and YT, etc. helps me keep focused and way more productive.
Honestly, if the open source project we maintain ever becomes popular enough that a big company like Amazon puts effort into supplanting us, great.

We'll be known as the team that created and grew the project, and we'll have a guaranteed job at Amazon and a bunch of other places doing something we have unique experience with.

My goal isn't to leverage open-source software into enough of a moat to build a billion dollar company. If it was, then I might be unhappy if Amazon broke that moat.

I'm totally happy building a sustainable small business. Maybe even one that won't last forever. Our team is small, our costs are low, and we are comfortable. We are growing, sustainably, and providing real value to our customers in the process (or they wouldn't pay us the rates we require to stay in business).
> software that you build with it, other than applications.

I'm no lawyer, but this sounds like complete nonsense.
I don't think it works like that.

This is a copyright license at its heart. It is a contract between the copyright-owner and the service owner. The end user is just 3rd party.
New Chip Design Approaches at 7/5nm
You may be the most reasonable conspiracy theorist I've ever met.
Will Elizabeth Warren's antitrust law, or Facebook be more likely to exist 50 years from now in parallel worlds? Facebook itself is being disrupted by Instagram. If it wasn't for the right PM at the right time at Instagram, Snap might have become the dominant social network. Social networks are flimsy entities.

I think you could make the argument that Facebook finally allows for more niche politicians to reach meaningful chunks of niche audiences compared to TV ads. Whether you like them, hate them, or hate one of them, Trump and AOC would not be where they are without Facebook or Twitter. We can only pontificate, but this might also apply to Obama too. Fake news, filtering, and smear campaigns are a phenomenon that existed way before Facebook was created:

http://www.cnn.com/2008/LIVING/wayoflife/08/22/mf.campaign.s...
Before anyone comments "fusion is always 10 years away" I'll just say that we've made significant progress in the last 40 years (energy generated by fusion is on par with moore's law) and it is simultaneously the single hardest and the most rewarding engineering problem ever attempted by humans. Any news on this front is good news.
I guess we will find out if you can defend your APIs using copyright in the Oracle vs Google case
I've been thinking about the walled garden thing recently. Several of my friends who are /long/-time users of FB - thanks to its ability to gather scatterlings from across the world - have started talking about creating (logically) local and durable (not lost in the ad-injected update feed) content, memories and information.

As someone who long since gave up trying to provide that type of thing (because corps did it better/faster with no learning curve, excellent reach, etc), I find this shift interesting. It speaks of non-technical people wanting to have real control of their own content; not some token effort that ultimately enables monetization.

To me, there is still value in the ideas behind older unix services and protocols; things like gopher, old-school blogs (pre mega-corp platforms), irc chat, usenet, etc.

I see ActivityPub and IPFS as interesting developments; I'd love to know what other tools we could string together to help create other (presumably connected but distributed / federated?) spaces that aren't backed by a monetization engine.

It would be neat to see a "distro" that stood up a node with long and short-form content, chat, news and "groups" capabilities. Something a keen but inexperienced individual could spin up on AWS / GCP / DO / Azure, etc.

Am I crazy?

PS: Wasn't chat solved by Jabber (now xmpp)? IIRC, Yahoo and Google at the time didn't support it (other than by using brittle bridges).
I made a similar open source verification gateway recently. It supports emails and you can write other providers as plugins.

https://github.com/knadh/otpgateway
And you also get some benefits: enough internal bandwidth to allow every input port to cut through at line rate, and a single buffer to prevent starvation (the tomahawk chip has 4 groups of ports, each with a separate buffer).

Also, you can run cumulus on the switch, which is pretty awesome.
What an awful metaphor – "contain fallout" – for the NYT to use in its current online headline. ("Boeing Scrambles to Contain Fallout From Deadly Ethiopia Crash")

It makes it sound like there's some toxic debris Boeing is still racing to clean-up, when in fact the story is just about financial/reputational after-effects.

(NYT's original print headline for this story, "Crisis for Boeing As Safety Worry Grounds New Jet", at least avoided the problematic toxic-debris implication – though it somewhat implied the jet was grounded everywhere, or by Boeing, when it's just been grounded by some jurisdictions and carriers.)
I see it on foxbusiness.com, but nothing on foxnews.com's front page until I scroll maybe 4 pages down. This is on a mobile...maybe their desktop site has a sidebar?

It is front/top on NYT.
How’s Apache doing these days? Haven’t looked in a while
> For many things Aldi are also clearly better than both brands and other supermarkets on quality (e.g. bakery, chocolate)

The minimum standard for baked goods and chocolate in Germany is far higher than in the U.K. What’s the reverse, where you just couldn’t sell it in the U.K. but in Germany you’d just occupy the low end of the market?
Okay, are you glad that Amazon now owns Elasticsearch?
BPF is 12 years older than Facebook :)

People don't buy individual pieces of technology, they want packaged solutions that come with support. Tech almost matters less than good support
I’m 26 and I already have some tinnitus and I feel like some hearing loss. I’ve listened to loud music since high school every day.

Is it too late for me? Would my hearing recorder if I gave it a break?
I don't know what the industry actually does, but what it should probably do is use bcrypt.

https://en.wikipedia.org/wiki/Bcrypt
It does look possible that the anti-stalling software new to these planes has a bug.
How to Jailbreak iOS 12.2.2: Beginner’s Guide for Cydia Install
> I'm not sure of all the details, which wouldn't fit in an HN post anyhow, but the short version is that if they are picking and choosing what can appear on their platform, they're also liable for it.

You might be thinking of the pre-CDA rule suggested by the Stratton Oakmont case. But Congress specifically removed that rule!

https://en.wikipedia.org/wiki/Stratton_Oakmont,_Inc._v._Prod....

https://en.wikipedia.org/wiki/Section_230_of_the_Communicati...
I agree. So what does MSNBC say about it?

Personally I doubt a strong correlation will be found, other than the American/foreign media dichotomy.
They wouldn’t believe it’s real at $35.

Maybe $35/byte. Then the lawyers could haggle, get it reduced to $35/non-white space byte, and feel like they accomplished something.
A word of caution on this - I too have some tinnitus, and I asked Lauren Dragan (she does all of Wirecutter’s headphone reviews) on Twitter if she was going to review these headphones. She responded[1]:

> I’ve tested a few pairs of those kinds of headphones already, actually. Even, Beyerdynamic, Nuraphone, MEE... if you have ok hearing, they aren’t worth it, and possibly problematic if you already have hearing damage.

> I’d spoken to an audiologist who is an expert in noise induced hearing loss, and he said that with no AMA oversight, there is no way of knowing if the raised frequency ranges could cause more damage on top of existing. The accuracy of the tests and programs on these vary wildly.

In other words, by boosting the volume of the ranges you’re having difficulty hearing, it might actually increase your hearing loss in those ranges. I’m not an audiologist, but that makes a lot of sense. I’m steering clear of this class of headphones until there’s more known about them.

[1] https://mobile.twitter.com/larrywright/status/10048423527777...
IIRC that's not quite how it works. It can be complex but one element often involved is whether the third-party had an objectively reasonable belief that the employee had the requisite authority. Who else than a software engineer would be uploading to a code repository?

That said, that relates mostly to vanilla contract and agency law. Copyright law can add its own twists.
They just said "Fuck you, we have more money so we own you now".
As mechanical engineering students at my college, we analyze failures of engineering ethics in the past to better inform our decisions in the future. We analyze a number of situations, always the culpability of the engineer is placed first and foremost to us. Whether legal culpability falls on the engineer, we are taught that the moral culpability falls on us as the arbiters of safety. I can already see that the 737 Max failures will be taught 10 years from now in the ethics classes I currently take.
Today was the first time I ever checked the type of plane on a flight.
Extensive discussion: https://news.ycombinator.com/item?id=19363561
A crime was alleged, not discovered.
I look at this in the same light as Tesla and their autonomous driving systems. When software becomes sufficiently capable, there is a tendency for people to put too much trust in the machine to make the right decisions. And in such cases, the software may react badly to corner cases that were not addressed in testing.
Treasury bills. Very short-term government bonds that don't pay a coupon, just typically sell at a tiny discount to face value. Little risk of any kind (default, interest rate), pretty much the most secure security there is.
It seems like VC funding is the real key to changing the calculus. If you get as much money as Elastic did, you damn well start digging that moat and get to monetizing.
Amazon should pay money to the people who create the open source. Not necessarily because a license compels them to, but because it's the right thing to do. If they don't, then the ecosystem collapses.

A good example is RedHat. There is basically no money in simply selling operating system licenses anymore, but someone has to keep developing it. Amazon makes lots of money off of EC2 instances. They could easily throw a few million a year into paying kernel developers. But will they?
Are they just going to be a free rider, while keeping anyone else from being able to make any money too?
I cannot seriously believe they are rolling the dice for the second time.
OneCoin isn't a cryptocurrency. Where is the cryptography? It is/was a ponzi scheme masquerading under a crypto-tangential name and shouldn't be called a cryptocurrency.
Providing an API doesn't mean open sourcing the data. Because the API provider can very well restrict who can use it, and how it is used, and throttle it.