skysight-inc/HackerNews huggingface dataset:
>Can you provide a software example?

Amazon are already very, very close to that state of play - developers within Amazon are required to design their infrastructure based on standard APIs, to facilitate the commercialisation of those systems via AWS. Chinese walls are commonplace in any kind of reverse-engineering as a protection against claims of copyright infringement.

>For Apple, that's a fictitious loss and their actual cash flow is a positive $0.25. For Spotify, that $0.05 represents an actual nickle they have to give someone else. Apple can continue on doing that indefinitely while Spotify can't.

That would constitute predatory pricing, which is illegal under EU competition law.
There are tools out there - https://webaim.org/resources/contrastchecker/

Google actually added a new 'AAA' contrast checker to Chrome 73 in the devtools ('AA' was already there). https://www.youtube.com/watch?v=uddZX9ZK6wY
The crux of the problem is that the NG/MAX isn't certified to fly with malfunctioning alpha vanes. On the NG and MAX the effort required to move the control column varies based on the angle-of-attack (a.k.a. elevator feel system). On the MAX the airspeed calculation is influenced by the AoA and MCAS is triggered by data from a single alpha vane with no sanity checking.

Functioning alpha vanes are critical on the MAX and NG.
sandboxed file system access. People use electron because they need things like registry keys, reading/writing files from anywhere on the system, interaction with specific kernal functions, and tons of things browsers cannot give anywhere the same flexibility to without becoming a major vector for malware. Not to mention a lot of electron apps, like Spotify, use their own c++ libs, like Spotify json, because browser perf sucks.

You cannot sandbox and have native access, full stop.
That's not a fix it's a workaround. The pitch being off is the problem. Turning off mcas solves it but it does no4 fix mcas
Take a look at Google's user-directed legal jargon.

They have slimmed it down to only a few pages and now have very simplified statements.

Obviously every statement is now very carefully worded...
Do you/anybody know of any solid project that aims at porting/re-developing in Go at least some of the statistical learning tools that we have in python? I did not find much when I looked last time, but it might have been more than a year ago.
Java has had that feature for.. 3 years? out of 20?

This is not about Java, this is about a multitude of languages having these features and Go not having this is a valid criticism.

I'm not saying you're wrong that there might be good reasons for it to be focused on different things, but I didn't read OP as "meh this is not Java" at all.
Online Course Help
I'm a moderator on a Discourse instance and while it's not perfect, it's pretty dang good. That said, it's more oriented toward discussion than link-sharing. Do you plan to be more Reddit-like or forum-like? (Of course, there's overlap between those categories, but generally speaking.)
> Copying is encouraged. Like I said, having the algorithm there is a good way to make it apparent what the code is actually going to do and the associated cost of the solution.

It's also a good way to make bugs proliferate throughout your code base. IIRC bug count correlates well with line count regardless of the language(!).
Same for Java - it was invented for applets and ended up being used for everything except applets.
Look at the linked patch. They use the UMA histogram reporting mechanism, not Chrome Sync.
I am not saying there are not different definitions of race. I am saying that there is an overwhelming homogeneity in the definition of race that has and does structure modern social relations, and that it is simply unhelpful to use race in a highly atypical way to study biological populations. See, for example:

https://www.scientificamerican.com/article/race-is-a-social-...
On the model of plane they were flying that isn't possible. There was a firmware upgrade which compares the input temperature to the temperature detected by a probe on the engine feed and if they're too different rejects the input temperature (which subsequently means the plane acts as though you didn't input a temperature at all, disabling auto-throttle) but their airline had not yet applied this optional firmware upgrade.

The larger answer to your question is Raymond Chen's standard explanation on the The Old New Thing. By default no features are implemented so by default that's why your preferred feature isn't implemented.

The accident investigation was more interested in the other thing, given that for whatever reason the plane's acceleration is inadequate, why don't we realise and abort before V1? Humans turn out to be bad at this, so not much use asking the pilots. Airbus have built planes that measure their own acceleration and warn if it seems too low. So maybe that's the future.
Mozilla launches Firefox Send to send files in encrypted way with self-destruct
> Two I'd recommend looking at: FTL and Into the Breach.

Was about to post this :)
I've used jack_iodelay to do the exact same thing, and it works great.

More information on it and audio latency in general can be found in the Ardour manual here:

http://manual.ardour.org/synchronization/latency-and-latency...
Bookmarked for the next time I plan a get-together!
Why do you think that only one of the four raspberry pis is running Plan 9? My understanding is that, with Plan 9, you can run it on multiple networked computers, and mount CPU servers, RAM servers, and disk servers from other machines onto your terminal. They seem all set to do just that on this setup.
No, Q as in the letter after P.
I don't believe this to ever have been the case.

Not only is Google's indexing infrastructure not that fast, but they deliberately don't do that because some poorly designed sites have passwords or unique keys in the URL that should not be used to retrieve content for the public search index.
It is indeed a great (and time consuming approach). Other VCSs have gone a little further than Git though, simplifying their workflows or the GUIs and CLI commands to make their use more intuitive like https://www.plasticscm.com/ and others.
I have really mixed feelings about Go. 2-3 years ago we went on the train and (re)wrote a bunch of stuff in Go.

We absolutely 100% loved it for small contained pieces like monitoring checks.

When doing a basically boring API with user management some of us found it ok at best, others (like me) really hated it with a passion. Every task that should take 20 minutes and 20 lines of code in any web-first ecosystem (php+symfony, rails, flask) would take 3x as long with 2x as many lines of code, also because of "if err != nil". Sure, a lot of it might have been "Go beginners" but it just never felt smooth for controller-heavy web development.
This is the future I want: tools so anybody who has the inclination can publish interesting things for anyone to see.

Imagine if web servers were just standard containers and services which anyone could upload applications to. That would take us to a decentralised internet once again. No more centralized, fossilized, web application with stacks that are impossibly complex that only the original developers could change. All the power and innovation would be put in the hands of the content creators once more and the internet would just be infrastructure. Sound familiar? I hope so.

Time to program like it's 1999.
It's saying, you have an extremely important job for the functioning of the Internet, that everybody has to blindly trust you do right.

The moment we see a small sign that you don't do it right in some detail, then that trust is gone.

Consider all the details in the spec to be Van Halen's brown M&Ms (although that had no functional effect, and losing a bit of security does). They knew that if people did that right, then they could trust that they also read the details of the rest. If Google gets this wrong, we can't trust on that.

That's not a slippery slope argument. That'd say, if we allow this then you would then do worse things because we let it go. But that's not the argument.
>And yet Go pretty much ate the lunch of C# and Java when it comes to backends and devops, despite the fact that both had a decade of head start and generics and large dev teams behind them.

This is simply not true. Go is nowhere near that even when only new Greenfield projects are considered. I see many of the start-ups using it but most new projects are still in Java or c#. But go has captured the Dev ops tools area quite a bit.
> not that they were less effective, but that they couldn't prove efficacy

Could you explain the difference?
We have both in Poland - they're pretty minimal unless you're running a business in there - then the latter shoots up roughly 30x[0].

[0] Provided you dedicate at least one whole room for commercial activity. If you don't then apparently there's no additional taxation. I am not qualified to give tax-related advice though, so don't quote me on that.
There just hasn't been a big killer app for VR, and it's pretty expensive to get into it for any serious usage. Beat Saber [0] appears to be among the most popular games, but I don't think many people are playing regularly. Anecdotal, among my friends, people that own VR rigs don't use them very frequently either.

The big problem is that even doing something super simple takes a fair amount of effort. Even watching a 3D video requires sourcing content and then finding a compatible video player.

[0] https://www.youtube.com/watch?v=gV1sw4lfwFw
Before Google, you just had to know the www address of the sites you could be interested in.

It was terrible. We only had Excite, AOL, Yahoo, Lycos, Alta Vista, Hotbot, Ask Jeeves, and MetaCrawler to choose from.
the problem is not the division of a monolith into microservices but the over-engineering of those microservices.

No you dont need docker. My recent .net core project had 3 projects (FE - API - Dashboard). Each one was deployed with CI to their respective server but deployment, qa etc was done all outside of a docker env because there was nothing the env can alter.
We knew we develop in windows 10 and deploy/qa in ubuntu xenial.
the CI was configured around that and then send the dlls to the server and restart apache after deployment.

The only thing that I can see for the need of docker is if you want to include your database inside also, but we opted-in for an on cloud db (azure) and each service had its own.

Once again we go to the discussion in which the problem is not the technique (microservices) but the over-engineering of such solutions.
<deleted as I misunderstood the parent, thanks for pointing it out>
I find the title is misleading, it did not "extract" Bitlocker keys from the inside of a TPM at all, but merely sniffed the key material on the bus. I was so excited to see the title, and so disappointed after reading it...

Sniffing keys on the bus and extracting keys from a TPM are very different scenarios. If you can "extract keys from a TPM", it means you must have found a way to tamper the chip using a piece of semiconductor test equipment and to obtain it from the circuity via a microprobe (or somehow injecting a spurious signal externally), bypassing any verification and self-protections of the chip.

TPMv2-like security chips are usually implemented by a secure microcontroller core. The internal is mostly a secret, and there is little public information about its internal construction, public audits on their actual resistance against various forms of attacks is almost non-existent. Even obtaining these microcontrollers are difficult, usually even the basic datasheet is beind multiple NDAs, and their availability is usually highly restricted, they don't sell these microcontroller cores to ordinary people.

If you have broken it, it would be the breaking news in the infosec community. It means you would be possible to completely decrypt the entire harddrive (if no additional key is used) given a random computer without preconditions, and everyone would have an idea about how secure these chips actually are.

I suggest changing the title to "Sniffing Bitlocker Keys from a TPM".
Almost nobody would pay $3 either, so $19 could be optimal pricing. (i.e. 1 in a million people pays $19, but only 5 in a million pays $3).
That's just because few people use Linux, not because Linux has some inherent ability to stop people downloading malware. In fact it has less than any other major OS. Mobile OSes have vaguely curated app stores and proper permission systems. And Mac and Windows have at least attempted to help with their code signing systems (even if they are pointless and annoying).

Linux has "run this `curl | exec` command as root".
Back in the old days search engines didn't have compete against an entire SEO industry that's trying to game the system, so the results were much more useful.

It seems that Google is losing this arms race.
Most of my struggles here have been when consuming /existing/ json blobs, specified elsewhere: 3rd parties, other internal services, "versioned" json blobs, and the big one... consuming json structured logging.

So I think we could both be right.
It could just be that VR at Gooogle scale is not ready. There may still be a huge part for VR to play in "niche" markets like games, training simulators, data visualization etc.
The site generates revenue by providing a service. That's why people visit it and that generates the revenue via ads. E.g. an independent news site provides news articles and people visit it.

People won't pay for many small sites separately, so until we have a viable alternative (e.g. automatic micropayments) eliminating targeted ads would effectively eliminate independent journalism as well (regular ads pay much less) and we'll only have sites financed by big corporations pushing their agendas.

I'm not a fan of targeted ads, but I rather have them if they allow independent publishers to operate, than having only new sites financed by big money.
Alipay Partner with Barclaycard as Chinese Tourism Blossoms in the UK – Pandaily
Tesla tuner develops Model 3 mods to improve drag, efficiency, and range
It seems that with VR the technology isn't really there yet, especially at the price needed for mass adoption. It's not clear to me that any company is really ready to put in more money to move it forward right now. But at the speed things are moving, it wouldn't surprise me to see another push in 2-5 years.

AR is the more interesting space right now. On the consumer side, Pokemon, Ingress, and the new Harry Potter game are doing ok from what I can tell. I'm not sure when we'll really get to a wearable AR device that is popular (Google Glass obviously wasn't able to meet people's needs).

Microsoft is still investing in AR, but they're focusing on business use rather than the consumer space. I'm not sure it will really take off with the HoloLens 2, but another iteration that improves the field of view and if they can bring down the price (the newest version starts at $3500) they might be able to manage broader adoption. But even that is likely to be a couple of years away.
If it can happen, it will happen.
As an aside, you may be interested in this article from The Atlantic:

https://www.theatlantic.com/science/archive/2018/04/the-scie...

It basically makes the case that things like Jupyter notebooks are the future of scientific publishing.

And here's the accompanying HN discussion for convenience: https://news.ycombinator.com/item?id=16764321
GDPR has become the new Godwin's Law.
Just skimmed through it but the main thesis seems blown out of proportion IMHO; Google still works very well (read: better than all its competitors), what bugs me a bit is that it tailors result to my previous history hence if I look for something that is different from what Google is expecting from me results won't be _that_ good.
There's also to consider the fact that people have learned how to game the algorithm through SEO techniques and that's not a problem with Google itself but it something that could be applied to every search engine (at least with the underlying Information Retrieval theory that we have now).
You can break up the monolith, use a message broker or even let the services communicate via http but you do not need K8s. Its pointless unless you want to orchestrate multiple vms/images and your infra scales to that of more than 10-15 servers/containers etc.
What a poorly formulated opinion.

If you want to whine and moan about Google’s Search, I’m sure you can do so around a better article.
Looks like designers at Google are more used to iOS than to Android...

That dialog has little to do with Material principles...
The world is what we make of it. There is the shadow and there is the light. Still I believe our natural state is that of love, before all concepts of anything that is all there is.
I have seen the server-side infrastructure, and can say that the data, if it arrives on a Google server, is typically very carefully handled. Claims like "your browser history is available to every employee and sold to partner companies" are categorically wrong.
I didn't realize quite how bad it's become until I recently set up a small static site for a relatives two person business.

They had no web presence and a very unique name.
The site quickly became the first result for a search on the company name in Bing and DDG.
On Google its on page 3, behind all the auto generated business directories filled with google ads.
Google has picked up all the Schema.org information from the site and indexed that and is using it in Google Maps.

My conclusion is that Google now gathers information for internal use. But only wants to share that information when it gets paid for it with ad views.
Breaking a monolith application to micro-services looks very enticing. Teams initially benefit from the rewrite and refactoring process. But in the long run it can run into same issues of monolith application and maybe more.

Issues like frequent releases, downtimes and breaking changes etc can be solved by writing tests, testable code, refactoring and keeping the code clean.
My humble "ready to use" list of the best P2P websites in Europe
My wife, who is a wheelchair user, and I tried it a couple years back (when it was still named Ogo). She said that it was really nice to be hand free and while the prototype was still rough, she really liked it.

Plus the inventor is super nice and does this for all the right reasons.

We wrote a small review about it back then : https://www.iwheeltravel.com/en/ogo-wheelchair-new-zealand/
Show HN: I found my WHY, which trumps passion anytime
If you read through the text, it only mentions booting the one machine with Plan9. There is zero detail on the actual clustering part.

Just like you outline, I would expect some mention of which machines in the cluster run cpu, auth, venti, etc., since splitting those was actually one of the primary design criteria for real clusters (there used to be a nice doc on the Plan9 wiki for that).

Also, Richard’s image (and 9front’s) runs all services on the same node. To break those apart and run a cluster, you really need to reconfigure it, and there is no mention of that either.
I think some of these ideas are pretty good (front spoiler lip) but others are a bit too radical for my tastes (lowering the car). I'm pretty skeptical that a third party tuner could squeeze this much CD performance out of a car that most definitely has been tuned for minimum CD already. However, as the article states, 3rd party tuners don't have to play by the same rules as a company trying to sell a car in multiple countries to different types of buyers. And the fact that the add-ons could possibly pay for themselves over the life of the car? Wow, that's pretty unusual!
Oh wait. It's now used for fingerprinting and tracking, and Safari is removing it: https://developer.apple.com/documentation/safari_release_not...

--- quote ---

Removed support for the expired Do Not Track standard to prevent potential use as a fingerprinting variable.

--- end quote ---
You can do it in Java. I think GP is talking about the inability to do this in Go.
Maybe our positions aren't as far apart as I thought, but I do think you're stretching some of Raymond's quotes. Also not every open source pioneer sees things the same way. Bruce Perens is on record saying in his opinion forking is a fundemantal part of open source and healthy for the ecosystem, and has no sympathy for companies unable to make money off the back of it -

https://www.theregister.co.uk/2019/03/12/aws_elasticsearch_d...
You make a little enclave that (proxied through the host) gets the TPM to attest online to the relevant PCRs. Then the enclave gives the host the VMK.

Sure, one could then run this enclave under malicious control, but the attacker now has to do that live while the TPM thinks the system is okay. This requires active attack instead of passive attack. (Or it requires a DMA attack.) So the bar is a bit higher.
That's a really naive view. I take it you would support segregation in shops etc. "It's their shop. If blacks don't like it they can visit a different shop".
"They might be politicized, and of course have a left-oriented gay agenda" (said for Apple and Amazon). So Apple and Amazon have a _left_ and _gay_ agenda...

Sorry, but I don't think I need to read further after this. Non-sense started very early. Just another foggy-headed guy glorifying his vile into a freedom fighting guise. Same with countless other religious fanatics. Logic is out of the window.

pass
On the other hand, the opinion of many marketers is that the SEO battle is lost, and if you want good placement on Google, you buy some Ads.
A Privacy-Focused Vision for Social Networking – Zuckerberg's blog
Let me try putting the question a different way. Suppose there is a way that society as a whole can make some of these purchases, designed to be as fair and moral as humanly possible. Now it's possible to have individual personal sellers without needing individual personal buyers.

Now you can answer this question by itself:

Is it moral to let a multi-billionaire buy someone's life?
Perhaps the fault isn't so much with Google itself, but with its user base. Mainstream is mainstream and if you're making a search engine for the masses, you're going to get results for the masses.

Garbage in, garbage out.

Maybe we should build a search engine that produces results similar to those that Google used to produce when it was less popular. To to that today, it would have to be opinionated.
Indeed. You would think that younger generations would learn from the mistakes of their parents, but far too often they end up perpetuating those mistakes in one form or another.
Actually in a modern democracy I am owed a free lunch.
After switching to ML languages for most development tasks, I don’t think I could face using a language with so few features.

Is most of the hype from a dev ops perspective? Go looks tiresome to program in.
Somehow Americans always play the victim card. The airplane is maybe dangerous but nope, grounding it is a political move? I just wish to see the comment section of the plane was Chinese.
> Maybe there's an App Association that challenges all of these stores on their rather high recurring fees.

I think it's perfectly reasonable for governments to update their terms and agreements.
Being abandoned is a primeval fear of every child. Actually being abandoned has a tremendous negative and traumatic effect on a child.

Even not actual "abandonment", but emotional abandonment is the main culprint for borderline personality dissorder.
It will impact a person's emotional stability and wellbeing, the way he is attracted to other people, his self esteem and so on.
Two Minute Papers