skysight-inc/HackerNews huggingface dataset:
The thing that worries me most is that, based on mere amateur observations in the media, the number of incidents involving user interfaces, repeated changes to procedures, and software fixes to "unexpected" corner-cases seems to have been in the increase.

To the uninitiated, it seems that problems in airline incidents used to revolve around mechanical failures, bad wiring, sensor malfunctions, toasted electronics causing smell of smoke and such. Plain and simple. Issue a fix in the design and apply to all planes of the same type, and you'll end up reducing the failure surface bit by bit.

I might be totally wrong about this because I don't track actual data. But if I've spotted the trend right it's scary because the problems are shifting into our space, i.e. software engineering. And being a software engineer, I know we're pretty much fucked at that point. We've only ever managed to write reliable and trustworthy software when we've split it into very tiny pieces that we can verify and kept the number of pieces small.

Maybe aviation computers used to be much simpler that they could be verified more throughoutly. Maybe airplanes used to have less features and they could keep the complexity sufficiently down and functionality orthogonal. Maybe there was enough human glue in between the systems so that there was a live sanity-check during flights and pilots could react properly if the computers didn't agree on something.

But now I sense a new category of error conditions that are eerily similar to what we've had in non-critical software for decades where assumptions are laid on top of other assumptions, and when they fail the whole stack comes crashing down. Only this time there might be a whole plane coming down instead of getting a curious SIGSEGV on the screen with a blinking cursor. It might start as an innocent "couldn't access flight plan because of wifi went down" but such interdependencies between certified and uncertified systems grow exponentially and this will snowball into the unmanageable very soon.
Random Acts of Kindness to Lift Someone's Day
Potential Risks for Applications Built on Serverless Architectures
If one plane crashes every year, it would still be safer to fly than to drive a car.

Even if boing is at fault, and FAA failed in their validation process, I doubt there is any evil doing in any way. Indeed, they had a fantastic track record for decades compared to pretty much any other industrial equivalent.

As an european, and as much as I would love boing to take a hit in favor or EADS, it would be unfair to them and the FAA. They have been doing a great job for so long, on so numerous complicated systems we forget that as human, we can fuck up.

Nobody can guaranty to ever do perfectly fine all the time, and certainly not in such a huge endavour. Of course, the outrage is understandable given mistakes cost lives, so the situation sucks for all the sides in this story.
transcript not accessible for nojs. any alternatives?
> I've observed that saying "uh" and "um" is actually a good habit ... Without them, others interrupt or assume you're not listening.

I have a little theory about interruptions. Humans are a social animal and people tend to listen very carefully to apes higher up on the social ladder. Grunts don't interrupt generals. Peasants don't interrupt the president.
Hence, if you are being interrupted when silent, it is information to you that the person who interrupts you think you are lower on the social ladder than they are.

More important, however, is that you, by ignoring interruptions, are saying to the listener that you are equal on the social ladder and expect to be listened to. There are many ways to handle interruptions. If you are presenting to a group, one way to do it is to simply back up a few seconds and keep talking where you were at the interruption. Search will give you more tools. https://www.youtube.com/watch?v=JSWVAUqqQ6Q

So, be silent, demand respect from the listener, and stand your ground.
If you go back in history, I believe you'll find that most socially advantaged people simply thought they were inherently better than others.

That's true now, is it not? It's certainly a common view. People who are rich deserve it; they are more deserving. They're better people. They must be, because how else would they be rich? In the US meritocracy (and indeed, many others), anyone who has done well must have done it through merit because that's how the system works, so they must be a better person.
> full response was "sometimes we are victims of our own success"

A very French reply
Amazon Free Gift
free shipping ,we just need review of this product
And I appreciate you sharing this. We are looking into this internally. This _should not_ happen.
In either Signal or WhatsApp you have no verification whatsoever of the true sender unless you meet them out of band (preferably in person) and compare codes that summarise the public key identity value.

Signal does make a bigger deal about trying to get you to verify, but in practice for both systems casual users don't do it. Most of my Signal contacts aren't verified.

Without this step an attacker can MITM these protocols because the identity problem is hard and cannot be waved away.
"practice, these planes don’t fly differently."

Until they crash and kill hundreds of people.
Thanks, I'll be adding location search in the next few days
What is the last version you tested that with? I had that issue months ago but it was also fixed months ago for me.
Proprietary chat servers were only "protocolized" after reverse engineering. I don't think any were ever openly soliciting other clients to connect to their network. There were also occasions when third party clients got locked out after a protocol change.
When was the last time that two brand new Airbus planes of the same model crashed in similar ways and the EASA didn't ground the model?
As I see it, it's as an extension of the SpaceX smear campaign which, crazy as it sounds, seems like it's a real thing.
Many virtualization technologies use hardware acceleration supported on modern server grade CPUs. It's not like running on "bare metal" but pretty close. One use case for VM's is running obsolete software, like some old proprietary OS, it's a weird feeling when the software run 100x faster then the hardware it used to run on.
In support of your argument; Look for example at the Dockerfile for the official Golang container. They pin exact sha256 hashes for each architecture, and the source release in case you're on an un-binary-released architecture.

Pin specific versions of your packages, coupled with caching and you're sitting pretty.
MasterMing the merciless? a funny typo.
https://pastebin.com/gkjf9CWD
I'm not convinced the complexity is really independent from the size of the map. With large emptyish maps the rays can travel a long distance before they hit something. And tracking the ray is linear wrt its length.
> they can't envision how it's done on email -- they need to log in first, after all

By now every single email user with an email address that has been exposed to the internet has received untold amounts of spam emails with their own address spoofed as the sender. The only question is if they've ever noticed it.
The Psychology of Colour: A Guide to Power Colours in Marketing
Interesting episode of a podcast I love (although it's more targeted to technologically interested but not too knowledgeable people).

I don't think they ever mentioned TrueCrypt in the episode.
> When I initially set up my servers a few years ago I did have an issue where I was getting randomly corrupted packets on a few of my instances.

I had the exact same issue, and found at least two reports of similar issues on public sources. This was very frustrating, as configuring the server over SSH was basically impossible since the sshd would drop the connection as soon as it detected a corrupt packet (invalid MAC), resulting in dropped SSH shell every couple of minutes.

I contacted support multiple times. I even pointed them to resources showing that this was likely an issue with their hardware, and some other guy had had the issue resolved by moving the instance to a different rack. Their support's reply was basically telling me to try to re-start the server as many times that it would spawn on a working rack.

Needless to say I had very little interest to continue working with them after this experience.
A relatively secure way to check if your passwords are in some online database
Absolutely amazing work! If it can be made reliable enough, this may be just a key stepping stone towards actually useful IoT.

That said, I can't wait for a open source/open hardware on-premises alternative - because there's no way in hell I'm running something like this through vendor's cloud. They deserve credit for not sending raw sensor data to the cloud, but vendor lock-in is still vendor lock-in. N-th-order sensors should be products, not services.
I assume the OP meant less environment damage from building roads, not that flying cars would be produce less CO2 than land cars.
Nobody can guarantee absence of errors, but you can stop using machines where you have good reasons to believe that something is wrong until you've figured out what's the problem and how to fix it.
OP can now deploy all of his websites
onto another server instantly

By running the docker specific setup files he describes in his post?

He could have just written a setup script that installs the needed services on any machine.

Without adding all that docker specific complexity described in the post:

Moving to Alpine
Building his own Alpine image
Building 9 more Docker images
Orchastrate all the docker images
Sign up for Amazons container registry

Now additionally to the host OS, he has to maintain 10 frickin docker images.

Seems totally insane to me.
Why the College-Admissions Scandal Is So Absurd
So, is Gordon alive?
You might be right on this. In my mind one of the key properties of decentralized systems/networks is censorship-resistance, which (again in my mind) means that everyone always has access to the full set of data and not a cut-down version that the "property owner" decided to arbitrarily allow.

Decentralized systems do still have benefits even when they can be moderated. I wonder if there are many projects that actually allow that?
DKIM is for an entire domain, not individual addresses, though.
European Central Bank brags about creating money on Twitter
Couldn’t you just solve this by requiring submissions to be signed with a key signed by another chosen trusted authority. This authority could either be the maintainer, or somewhere else which charges a nominal fee for a certificate.
This was looked into. This apparently occurred in early 2017. This is a not a sales practice that we endorse and I'm sorry it happened to you.
Security of stretched aircraft using software workarounds
There are people offering IIT jee scores(usually at really
expensive coaching institutes). hell the best IITJEE instructors take the test every year(to see the difficulty changes) and manage to get roughly the same high score everytime
Hello David,

Very interesting project. If you improve the design to something more modern it will attract many people. But still, I found it very interesting and learned some new things by checking the average life expectancy :)
So you are saying they don't have data to rely on, then? Finally it's the same information US and EU authorities rely on: Two incidents with planes in short order where the manufacturer withheld crucial information. I think it's fair to say that either the EASA or the FAA decision was politically motivated.
Not quite. You do need _a_ way to get the IP to the other party. How, that's up to you, the developer.
In-container upgrades seems to be an issue for many, we've had this issue at $work.

From what I've seen, the is no consensus on the "right" way to do it.

You could run the upgrades in the container and lose them when it's re-upped, or, you need to continuously deploy the containers.

This alone is one major reason I'm in favour of statically linked binaries in from-scratch containers, where possible.
The average life expectancy page is excellent. I'm not a design person, so I have nothing useful to say about that aspect of the page, but the information it presents is mind boggling. I really want to know what happened to Algeria in 1849.
Amazon has forked more than the community version of Search Guard, see by yourself:

https://github.com/floragunncom/search-guard-enterprise-modu...

https://github.com/opendistro-for-elasticsearch/security-adv...

They just forked the full code base and tried to remove any reference of Search Guard.

I am not sure what really happened here but this smells fishy.
Leadership skills: The 3 roles of a boss
Another proof that a talented person is talanted in everything.
DKIM proves that it's someone with access to your domain, not you specifically.
Web browsers already implement a ‘near miss that’s probably intentionally confusing” check on domains, and the code is readily extracted and shared (I know about it because someone extracted it and added it to Emacs a couple years ago).

This seems like one of those cases where more large infrastructure people need to say “don’t let the perfect be the enemy of the good”.
Having just switched from Online.net to Hetzner, I vastly preferred the Online.net service.

However they were none too pleased when my machine Tor Exit node was listed in some email spam list, so I had to move.
>Photoshop alternatives ... are not designed to handle animated GIFs.

>Which means ... it looks like I’m stuck in that ecosystem for a little while longer

Gimp handles animated gifs just fine imo.
Calculator has been around since ninteen-eighty-something-or-other[0] and this seems to be a revamp of the base code, with a XAML (read: WPF) wrapper[1].

Aside from the obvious answer of them using C++ based upon "using something you know and that works", why shouldn't they have used C++? (Genuinely wanting to know/understand.)

It would seem like a monolithic task to rearchitecture the entire app versus just dropping the code-behind into a new UI wrapper, yeah? I'm not excusing it, to be sure, just explaining the potential ROI perspective they might've had when they stuck with C++.

[0] - https://en.wikipedia.org/wiki/Windows_Calculator#History

[1] - https://en.wikipedia.org/wiki/Windows_Calculator#Windows_10
That site really is stripe.ian.sh like the certificate says.

It really is for Stripe, a real US company.

That the US (and every other county we care about) intentionally lets crooks run companies in order to defraud the general populace is a problem you could try taking up with your government. Although in the US that's currently led by a career grifter and a bunch of crooks so your message may not get through.

But the Web PKI did everything it could here, don't blame us.
You have been on this crusade for a long time now and you have posted this link often, I just realized that keybase is not just a GPG replacement and that using it with my smart card is not a good fit and not the problem they want to solve. So I just accepted that and actually tried to figure out what keybase is actually doing and why rather then demanding they do what I initially wanted from it.

They have been focusing on a per-device key system and its not really a gpg front-end. NaCl is a well known library and what they do is based on it. Saltpack is an open library they use and they use other open libraries as well. I happen to like the how the keybase security system works and I think it has advantages over the GPG that I like.

If you don't want to use the evil centralized system at least spamming the same issue every-time Keybase comes up. If Keybase is not the solution you like then just move on with your life.
The Atavist magazine version of this is available at: https://magazine.atavist.com/the-mastermind
It's a fantastic (but long) read, I highly recommend it.
How to Master Product Virality – Mixmax CEO
if you haven't yet read The Mastermind, it's a real treat of excellent writing and journalistic skill: https://longform.org/posts/the-mastermind
> My company's error rates have increased on the "common fleet" by almost triple.

That is Terrifying. It seems like the FAA has optimized for allowing the Manufacturers and Airlines to streamline changes and operations while slowly letting safety deteriorate. Perhaps these accidents will force what seems like a needed change in type ratings.
Everyone keeps recycling this story, it was originally done by the Atavist magazine, it is an incredibly rivetting read.
https://magazine.atavist.com/the-mastermind
In my country anyone can get a free certificate from the Royal Mint. But few people uses them for email due to lack of support from webmail providers, as you say.
All edge cases have very little chance of being true, and I would hazard a guess that most of a developers time, and most code is spent on edge cases.

So I'm not sure you can argue against a piece of code on the basis of likelihood.
> When you press this button,

That has not been my experience signing anything. I cant judge about the math behind the encryption, but the interface side of things has always seemed ... lacking.

Use PGP for this. No, now it is called GPG instead. We thought it was funny. Pass this optional command line argument if you want extra security. Why would we want that as a default?. Enter a passphrase - it is recommended! Except no one uses them. Or they do. Have you installed gpg-agent? Ok so you have a public key now. Before you send stuff to this person you should celebrate a Key ceremony with them and interchange keys physically. Now add your key to your program. Ok so your commits are signed using your key now. If you want to sign a tag, however, you will need to pass this extra flag when creating the tag.

To be fair, that last one is mostly git CLI being consistently inconsistent [1]. But it still another spoke on the wheels.

Encryption needs to be easy in order to be mainstream. Otherwise it will be relegated to the minority which can jump through its interface hoops.

[1] Yes, I am going to be eaten by a hobgoblin any second now http://stevelosh.com/blog/2013/04/git-koans/#the-hobgoblin
While Windows does allow for code signing of executable files in general, I doubt Signal is using their system. The official windows store would probably work similarly to how Apple and Google handle updates, but Signal doesn't use it either.

You can always implement signing yourself, though, without relying on somebody else's infrastructure. Just include the public key in the app itself and use it to verify your updates are properly signed by your private key before accepting them. I haven't checked but assume/hope Signal is doing this with their updated JS packages.

If none of this were to happen, however, then the answer to your last question is "yes", though with a caveat: If Signal's servers are compromised and push out a malicious update, then all bets are off, as the app running on your system has access to all your unencrypted messages. If the compromised server is only one of the messaging/relay servers, however, things are not as bad, as they don't have access to your keys and thus can't decrypt your messages. They can still forward them somewhere else for later decryption, but thanks to perfect forward secrecy this is currently rather unrewarding.
They usually repost their articles on Habr themselves in their corporate blog, linking to the source. It's a very popular Russian IT resource, so they do it to promote their articles, nothing is stolen, it's just reposted.
I think the same “problem”
exists with GitHub, and the same solution exists here: the repo owner/ipns keyholder can rewrite history at will. Redacting information from the authoritative copy is possible.
Is it possible for Microsoft to make EdgeHTML rendering engine open-source?
Since the announced translation of Edge to the Chromium enigne, articles about such switch harming browsers' ecosystem pop up at least once a week here, on HN. So, I think the step to donate EdgeHTML to open-source community will both address critics' concerns and give less power to Google in long-term. Does such step has any downsides for Microsoft, except some risk of finding security bugs by general public?
Does this paste [1] help? If not, I'll delete it.

It's set to expire in 12 months.

[1]: https://framabin.org/p/?fc98aeebe5cb2585#Pa6OgUybxSWBWFGHlek...
Illegal according to whom?
Are you thinking of expanding into programs outside of web development?

As a cyber security engineer I think that this is something that would really help get more people into the industry. And there just isnt enough universities that have programs. My Alma Mater is going to be starting one soon but... Looking at the class list I cant help but feel like the 4 years are wasted and a more concentrated program would yield better results.
That's still a huge gamble. What are the odds of another one crashing before April?
Of the top 5 universities in dentistry, oral surgery and medicine in the world, 3 are in Brazil and are completely free:

https://cwur.org/2017/subjects.php#Dentistry,%20Oral%20Surge...
We are not a SaaS product but a productized service - http://draftss.com where we crossed $50,000+ in revenue till date.

We started 11 months ago as a side project and validated if there was a requirement for such a service. We got our initial customers by launching ourselves on different communities. We launched ourselves on Reddit, IH, HackerNews where we got our first 10 customers. Some of these initial customers wanted to try a smaller package before moving on with the superior ones. Till date we are still retaining some of these customers.

Initially, we assumed it was the price point that let the customers subscribe for our product. But after speaking to our customers, we came to an understanding that most of our customers were founders who did not have the resources to hire a full-time graphic designer. The best part they liked about our service was designing on the go and video conferencing discussions.
Probably not, if they use any decent email provider 99% of spam gets correctly filtered and you never really see it unless you look in the spam folder, which most people don't anyway. Also, I don't think I ever received an email with the sender as one of my email addresses.
There are so many interesting approaches you could take to enjoy painting as a programmer! Welcome to the fun: https://youtu.be/Up2-myTEviE

Definitely spending lots of time with yourself and your materials, working on pictures, is the easiest way to learn and trust your intuition, and have the best time.

If you enjoy Impressionism, early American Modernism, etc. then you would probably also enjoy the range of practices that were inspired by them over the decades. Recently a rather important computer artist John F. Simon Jr. wrote a book: Drawing Your Own Path, which is great: https://www.drawingyourownpath.com

I’d also recommend looking into Harold Cohen’s work, and Casey Reas: https://vimeo.com/22955812

To go back a bit further I’d suggest the BW film Painter’s Painting, and Shock of The New, the BBC documentary series by Robert Hughes, both of which you can find on YouTube.

Just paint man and have fun exploring your emotions while broadening your knowledge of the ways others have explored theirs throughout time.
thank you for your comment.