skysight-inc/HackerNews huggingface dataset:
Here's my experience with Fastmail:

-Web client is excellent and truly fast. I'd rank it better than gmail, though prior to the latest redesign at gmail that made it an order of magnitude slower, gmail was tied or better. Haven't used their mobile client, but the reviews for the Android version are pretty grim (but the service works flawlessly with the gmail app, and presumably any other IMAP client).

-I've yet to have an issue with using any email client.

-Only needed to contact support once, but they got back quickly: less than an hour, despite being on the other side of the planet from Australia.

-No issue importing, at least from gmail/gsuite.
Nothing about this surprises me. Just another thing in the long list of ways that wealthy people are able to keep their wealth, and pass it on to their children.

I had college paid for in full by my parents, and they also were able to provide a good portion of the down payment on my house. My parents aren’t exceptionally wealthy, but they have been able to give my siblings and I a very good head start on life. And if they were wealthier, they would have been able to provide even more advantages to us. The whole system is rigged, and has been for a very long time.
https://github.com/switch33/sha2592 something I just coded wondering how it measures up.

and i made another one too: https://github.com/switch33/sha29893

and a third one: https://github.com/switch33/sha5987

and an even better one: https://github.com/switch33/sha2999999

and maybe the best for quite some time: https://github.com/switch33/sha130000000-
And how does that work with Firefox Send? Isn't the key somehow in the payload or the URL?
That seems unfair to the students who apply for admission: if supply was high the previous year and low the current year, a student in the current year may not be admitted even if they demonstrated identical academic performance (assuming "academic performance" just means standardized test score here) as an admitted student from the previous year.
There's a reasonable compromise to be found to live in a modern digital society. Otherwise, just move to a deserted tiny isolated island in the Pacific. One with a bit of higher ground. Climate change, et al.
> that is the standard now, lower scores for certain demographics

I was talking about the opposite case: belonging to a class whose scores are artificially raised. If I can get excellent scores and get admitted by myself, but then everybody thinks that I got admitted due to my ethnic background, not due to my merits. Infuriating!

> it kind of sucks, but that is the world we now live in.

That certainly does not seem to be the case in Europe.
Species Sleuths: Amateur Naturalists Spark a New Wave of Discovery
You probably dont want to listen to Captain Warren VanderBurgh on YouTube, then. Iirc, his idea of the most common phrase in the cockpit is, "What's it doing now?"
Already accepted students on first pass are likely not then questioned, so make up majority. The Deny/Check students that are affluent are subsequently 'reviewed' and allowed would be a percentage of the 75%
You mistake me -- omitting parentheses and semicolons was very, very easy to get used to. Too easy, in fact. It was very hard to get back to putting them where they are required in C++. I was continually omitting them. (Maybe an IDE would have helped.)
If there’s a remote code execution vulnerability, normal users will update but you won’t. If you are voluntarily replacing automatic updates with manual processes, be sure to update Signal before using it each time, or a nation-state can tap a zero-day to infect all the experts who know better than to leave auto-update enabled.
These are the not that well designed scenarios, when the status pages are hosted on the very same infrastructure that suffers an outage. This is a common pattern across cloud providers I have seen happen.
Who pays the utility bills? Professor and administrative salaries? Is anyone allowed in just due to having a diploma? What keeps rampant cronyism and end of year cost splurges to keep high budget levels for the next year? Who sets the budget? How does enforcement work, government employees doing enforcing?

In short how do you pay for it given the already spiraling out of control costs of higher education?
Respawn Responded over Fortnite Season 1, Battle Pass, and New Legend Leak
US refuses to ground Boeing 737 Max
If someone doesn't attend or do anything why does it mater. If they never show up then they take no space and they use no teacher time so they cost nothing to "educate"
The next time government shuts down, keep it closed
Trends in Categories Using NLP on Twitter
Are you you saying the work of Valter Longo on repairs, increase autophagy, etc... during long fasts (6 to 10 days) is not valid?
I would rather hear from an admissions offer from HYP and Stanford, where average admit rate is 5 to 6%. This guy worked for schools whose admit rate ranges from 60 to 75%; so, the target for such schools is different from that for HYP.
All fairly simple issues that many countries have solved.
Sounds awesome.

Who gets into Harvard?
> I was talking about the opposite case: belonging to a class whose scores are artificially raised. If I can get excellent scores and get admitted by myself, but then everybody thinks that I got admitted due to my ethnic background, not due to my merits. Infuriating!

I think I follow you...that must not be fun...having everyone think you didn't deserve the spot you earned because of other undeserving "diversity applicants"

> That certainly does not seem to be the case in Europe

I was talking about the U.S. because the author of the article was talking about the U.S...I should have been more specific
Great stuff, how do you improve the trends?
Moreover, a Biclique attack against AES exists, by saving some meet-in-the-middle computations, it has already reduced the full 10 rounds, 128-bit AES to "just" 126-bit (25% of 128-bit) of security. Is it a clever attack? Yes. Does it mean the security of AES has been reduced to 25% of the original security level? No. Does it practically matter? No. This is exactly why 128-bit security is seen as a minimum standard in cryptography - it can provide a more-than-adequate security margin which renders all minor speedups in cryptanalysis irrelevant.

If the 64-bit random serial number has already provided an adequate security margin, it should be that no action needed for all existing 63-bit certificates. But it seems the choice of 64-bit here is arbitrary without good justification...
The test also means next to nothing. I know people who failed badly at the test and still got in to uni.
I've updated the article to emphasize that this is indeed something we're experimenting with, and explain a bit more how built-in modules go through the standards process (in general and in Chrome).
Maxmind (and others probably) regularly publish lists of IP blocks mapped to the owning ASN.
Basically geoip but instead of mapping to geographical regions, maps it to ASN. If you want to roll your own, you can probably start from a public route reflector and go from there.
I'm Not a Good Cog
Drugs are a public health problem.

The drug was was a colssal failure. Having the police roll around the neighborhood and harass junkies helps no one. In fact over policing decimated these communities and vanished a huge part of the population into prisons.

It filled prisons with non-violent offenders which were now sucked into the whirlpool of incarceration. It created a massive prison industrial complex with perverse incentives where the business of locking people up became massivly profitable.

From the start, it was an authoritarian policy designed to make it easier to harass dissidents. [O]

0: https://harpers.org/archive/2016/04/legalize-it-all/
Effective for passing a test, maybe, but in my view 'passing tests' (that can be prepared for especially) is well down the list of 'important life skills.'
Like Eminem many famous/artist disappear spending time with family
Flexible metal cooling prototype demonstrates extreme efficiency
It depends on country. In Czech Republic, what's popular is Messenger. In western Europe, WhatsApp is quite popular. In eastern Europe, people like Viber (and some people Telegram).

I am living in SEAsia now, and here it also depends on country. In some countries, WhatsApp rules; but in others, Line (weird Japanese thing) is popular. In Vietnam, where I am now, Zalo is popular; it's basically Whatsapp-but-Vietnamese; people like it, because it has Vietnamese stickers.

Of course China has its own ecosystem.

One of the features that determine how a chat program is popular are stupid stuff like localized stickers, or how well is the whole UX localized to the given language. (And how much is the program blocked in the given country.)
My god that's brilliant. Cows more efficient than the combustion engine?
I don't think it will really happen, but I can at least hope that this admissions scandal will shine a light on the scam that the "meritocracy" is, and I say this as a Harvard alum.

At any of the most elite universities there are many more qualified applicants than there are spots. For example, Harvard could fill its undergrad ranks with valedictorians alone, twice over. Thus, the fair thing to do would be to either (a) drastically increase the size of the incoming classes, or (b) set a minimum level of objective criteria (e.g. test scores, class standing, etc.) and then just run a lottery from those qualified students.

But instead, the admissions offices at schools run a system much worse than random. It's a system that's highly subject to pay-to-play access (and usually not the outright fraud kind, but more the endow-a-chair kind) while at the same time allowing the universities to keep up the charade that it is all merit based. Even if there weren't undo influence, the current efforts to maintain "diversity" (and not just the racial kind, but the kind where we need 5 cello players and 7 chess club champions, etc) means the admissions criteria is already completely arbitrary if you meet the basic (albeit still tough) academic requirements.

The reason this won't change, though, is the primary purpose of today's elite universities is to maintain social stratification. If universities did the fair thing and had a lottery for all qualified applicants, it would mean they would have to admit that they are not the objective arbiters of "potential" they purport to be.
that's from theoretically possible to theoretically possible.
Cranfield University Selects Cloud Data Management Company, Rubrik
> An aspect of Docker that I don’t really like is that inside the container you are root by default

PSA: everyone should turn on the userns option in docker daemon settings. It messes with volume mounts but you can turn it off on a per container basis (userns=host) or arrange a manual uid mapping for the mounts.

https://docs.docker.com/v17.12/engine/security/userns-remap/
I don't think it's you who made it legendary. I think it's the HN commenters who keep linking to it who did that (myself included, since yesterday).

And, well, you may disagree but to me it definitely reads like a proper rant :-)

Please note that I chose the words "legendary rant" with all the love imaginable and I had hoped you'd interpret it as nothing other than a compliment. I much appreciate your contributions to HN and the internet as a whole.
Major Bank Publishes Private NPM Package – Oops
Well, it depends on what you mean by "hack."

The attack that we're talking about here isn't breaking a signature, but relies instead on being able to manipulate certificate data to generate a certificate with a known hash. That hash must collide with another certificate hash, which would then let you generate a rogue certificate.

A team demonstrated that this attack was possible by being able to issue a rogue cert by being able to predict the not_before and not_after on the certificate that would be issued, predicting the serial of the issued cert, and finding an input for the rest of the cert fields which caused a collision.

https://www.win.tue.nl/hashclash/rogue-ca/

So, yes 128 bit serials would be better, but we should be safe even at 63 bits of entropy.
That's more likely to be a function of: what proportion of the time is the planet within X distance of the earth, though.
I've noticed that a lot of authors complaining that the lack of diversity in web browsers will lead to developers only testing in one browser aren't actually web developers themselves. As a web developer: I don't want to have to check my work in 3 different interpretations of the spec.

If you don't like Google Chrome then you're welcome to use many of the other usages of the open source Chromium
Nobody. It gets shut down and turned into a museum of historical examples of corporatism.
> dairy prices in Canada are several times what they are in the U.S.

I visited Ontario earlier this year and it didn't seem that way to me, at least in milk prices. I bought 4L (approx 1 gal) of organic milk in Real Canadian Superstore for something like CAD 10 which is USD 7.50. A gallon of organic milk costs around USD 6.50-7 in California, at the low end. So Canadian milk is only about 15% more expensive, it would seem.

I think cheese might be more expensive than the US, but that's not the worst thing in the world. Cheese is a bit of a luxury. Your kids don't need to drink cheese every day; you don't need to put it in your tea or coffee or protein shake.
Cloud computing simplified: a Berkeley view on serverless computing
Well, it will come out who was using it since they will have to disclose this.

I don't think Digicert/Symantec are using it
While Amazon is most definitely not the best messenger to be delivering this message, they're correct in drawing a bright line between what is open source and what is proprietary.

From an open source contributor's point of view, if Elastic is just going to exclusively license your contribution under their proprietary license, then you're just doing unpaid labor for Elastic and all its customers with no benefit to the open source community.

From an open source developer's point of view, you want to make sure that if you do use Elasticsearch in your software, you absolutely don't want to subject the rest of your software to Elastic's proprietary license just because of confusion around what code is licensed with what.

There is nothing wrong with monetizing open source software (people need to eat, after all), but claiming software as open source while having a very nebulous code licensing situation is not open source at all.
From a comment on the Elastic post earlier today:

"We build something on Elastic - and trying to work with them to get licensing was at best a major PITA. In ~2017 Elastic decided they wanted to go Enterprise Only. They started to charge $100k for x-pack, though one could get a dev license for $50K.

We quickly built a SQL parser for Elastic, an alerting engine, some other bits. These are all bits that just went poof yesterday when Amazon released opendistro - and I couldn't be happier. Sure we'll have to slice out a bunch of code, but at the end of the day it didn't have value to our core business."

https://news.ycombinator.com/item?id=19370085

The trouble is, once an open source company puts essential stuff under a shared source license, and calls it open source, you don't know if that's all they're going to do, or if they're going to keep charging more, or putting more essential stuff under a non open source license.

The simplicity that drew people into using the open source product is gone, and there's an uncertain future.

It's hard to find an open core product that has only enterprise features in its enterprise offering. For instance, in Greylog2, views and a user audit log would be useful to pretty much anyone. [1] And people would probably be happy to implement and contribute it themselves. And the company wouldn't merge it in because it competes with their enterprise offering. With nginx, a feature whose usefulness is not limited to enterprise that is only in nginx plus is dynamic reconfiguration, which can be used to implement rolling restarts. [2]

[1]: https://www.graylog.org/products/open-source-vs-enterprise

[2]: https://www.nginx.com/blog/dynamic-reconfiguration-with-ngin...
On my Pixel 3 it's more like a month. All expired in the next few weeks, when I updated one it moved the expiration date to 4 weeks into the future.
> Concerns about server going down or changing cloud provider imo is not particularly interesting or even useful advantage to mention for personal infrastructure.

Why? Personal projects aren't more stable or bound to a single provider. If anything, personal projects may benefit more from a deployment strategy that makes it quite trivial to move everything around and automatically restart a service in a way that automatically takes dependencies into account.

> Considering that it's likely we might change our personal infrastructure less than one every year

In my experience, personal projects tend to be more susceptible to infrastructure changes as they are used to experiment stuff.

> and I've never got a case when an unmaintained docker setup can run 6 months later,

The relevant point is that the system is easier to maintain when things go wrong and no one is looking or able to react in a moment's notice. It doesn't matter if you decide to shutdown a service 3 or 4 months after you launch it because that's not the usecase.

> I'm not sure if the value for portable is that high.

That assertion is only valid if you compare Docker and docker-compose with an alternative, which you didn't. When compared with manual deployment there is absolutely no question that Docker is by far a better deployment solution, even if we don't take into account the orchestration funtionalities.
From my experience, lots of people have a Facebook handle, but don't use the "news feed". Just Messenger and sometimes groups/events.
I suspect very very few people pay to have a smart phone and don't get it on WAN or wifi at least once a month.
I blame the government for fighting it in the wrong way, by locking people up (which costs several times more, and turns non-violent offenders into violent ex-cons who can't get a job because they're ex-felons), instead of fighting it with drug treatment programs.
> will have trouble attracting skilled developers and maintainers in the future

Maybe it will in the future, but it doesn't now. New members added in 12 months (data drawn from https://nm.debian.org/public/people):

2018-03..2019-02 80 new members

2017-03..2018-02 59 new members

2016-03..2017-02 87 new members

2015-03..2016-02 68 new members

2014-03..2015-02 49 new members
Yes. False memory on my part it seems. I was very clearly wrong. The current SAT is clearly selective enough for my very popular scheme.
TLDR; The admissions are heavily affected if students expressed need for financial aid. The OP worked at two schools, one that had little endowment liberal arts college not requiring SATs. This one doesn't surprise me. The other one is state college with 75% acceptance rate for in-state students. This one doesn't seem like problematic. OP isn't clear which school he/she is accusing of.

Overall, its well known fact that rich people's kid can chose great college as they prefer. Everything from Stanford to Harvard have seats reserved for donors.
Yes, there's two settings in maps under offline maps. You can set it to auto update and download if you wish.
What if the data is send by something other than keyboard though? :)
My family was part of that "full pay" segment of the population, at least when I was in school - it makes me wonder if my skew to private college (vs public) acceptances could be part of this, since I was an average student.
Does this actually count as 3D?

I thought 2.5D was the term used for 2D assets used in a way to appear 3D.

Pardon my lack of familiarity with game engines if I miss-understood this.
whois -h whois.radb.net -- -i origin AS20473 | /usr/bin/egrep '^route' | awk '{print $2}'
A lottery will never happen as you laid out here. Not because it’s not a good idea but because it tarnishes the pedigree of the school. Being selected to attend Harvard and winning the lottery among those qualified to attend are so vastly different in the mind’s eye that there’s no way they’d take up this system.

Fundamentally, it risks their brand.

I think the real answer may still be the open sourcing of curriculum and teaching through online courses. Completing an education at Harvard should be inherently valuable whether or not you were selected for it. This is meritocratic but also realistic, I think.
They get taken off the roles, lose any student privlidges like their amazon prime discount! and in the vietnam era would be eligible for the draft.
Is there a way to help? The brain power going to waste is awful.
Show HN: use Excel to read Shared Open Database
Nope. Seems I was wrong.
VVPAT is a nice feature for EVM verification. India has gone full electronic for the national election happening this year with VVPAT for all EVMs.

https://en.wikipedia.org/wiki/Electronic_voting_in_India
Writing Tools That Rule the Content Marketing World
Your critical thinking mind doesn't see a difference between
"Disease, starvation, predation, accidents" and farming? Same goes for "getting chopped up by farm equipment"?

I'm sure you are slaughtering yourself due to necessity or true accident. If not, you might think less condescending about those lazy vegans which are actually making a tiny effort in their lives to choose things with less animal suffering involved then you are when there are alternatives.

Apart from that choice (mostly in the supermarket or shop) I don't see any reason to think you are better than "them" in any point of life. There might be even some which are more productive in the way you think matters most.
Neither my Android 8 Gboard. Maybe it's only for Pixels or Android 9.
Despite Amazon's posturing about its care for open source, Elastic's response was pathetic. If Elastic doesn't like their Apache 2.0 software getting forked, maybe they're the ones with "fake altruism or benevolence" (their words). If Elastic is feeling threatened by AWS, they've chosen the wrong business model.
I think people need to keep in mind, that "disconnect it from the Internet, it shouldn't have been on the internet" doesn't fix this. If the injection works from USB devices, then the typical field engineer is not going to scrub their USB before downloading the field upgrade. Almost everything worldwide now uses USB as a field-upgrade path. Maybe as a cost cutting and simplification method this was ok, but the risk side? way way above the benefit (in my opinion)

What mitigates this (if anything does) is signed code on media you have to work harder to program. Rather than a USB device, this should be some form of media which doesn't present as a bootable device to a BIOS/UEFI. The field unit should have signature checks over images based on PKI. This is what a lot of things do, but somehow it seems not the ones which matter here?

Field upgrade by kermit or xymodem would be better than this, in that narrow regard. -The risk of an unexpected packet hitting the code path is lower if the code upgrade is reading a byte stream for a hash/sig check, compared to mounting a USB device, loading drivers, enabling HID mode ...

I deliberately avoided working in engineering contexts where the risk was above my comfort factor. It ruled out industrial process control, health, civil engineering and a host of fascinating fields, but I was just too worried about the liability side and my own competency to work in these areas.

I did not foresee (inter)net technology becoming so critical it exposed all of these risks, in my core competency. I still feel inadequate to these risks, 37 years later.
yup, most striking sentence to me as well. If you donate an entire building, it's fine and legal. Smaller payments in the form of money, is fraud.