skysight-inc/HackerNews huggingface dataset:
What I think is that Open Source needs less of these sort of "Open Source companies". Especially the kind that are mostly focused in abusing open source to peddle their proprietary software.
787's were grounded in 2013 for battery related issues, when it was a new airplane make/model. There were emergency landings, but no crashes. Here we have crashes, and no grounding. At the time of the grounding there were 50 affected aircraft, lasting from January to April. Grounding 737 MAX 8's would be ~350 groundings, and ostensibly could include MAX 9's.
SPF can be a massive hassle since it's based on which server is sending emails, rather than which organisation is sending emails. Change some server and your SPF breaks. In a large organisations there can be a bunch of different ways of sending emails (main app uses SendGrid, marketing team uses SureyMonkey, some 3rdparty tool uses something else, etc.) In practice, I see administrators get SPF wrong all the time, which is why it's rare to see a hard-reject policy.

In addition, the limitations of DKIM also apply to SPF:

> DKIM is useful, but limited. All it does is verify that an email which claims to be from paypal.com is really from paypal.com. What it lacks is the ability to show warnings such as “this email wasn’t signed, do you want to trust it?” and “this signature isn’t recognized, yikes!”
Rails 6 Adds ActiveRecord:Relation#touch_all – BigBinary Blog
Wait what are you talking about, 'legacies and children of donors'? I've been watching Fox News faithfully for decades and they've assured me it was only the handful of black and hispanic students who didn't "deserve" their places in college.
>Conceptually it's not hard at all. "When you send an email there is no proof that it came from you. It is easy to fake emails. When you press this button, it will 'digitally sign' the email. Now people can tell that it comes from you."

So, can they still my signature without me even knowing? Wouldn't that make it worse for the recipients, then, getting signed messages that give them a false sense of security?

And what is this PGP thing? PGP Keychain?

Hey, I updated my computer and I made a new key, and I can't read the encrypted messages they sent me anymore.
It is called "electronic flight bag" https://en.wikipedia.org/wiki/Electronic_flight_bag . I see it as a technical loophole that allows to gives handy tools to pilots and airlines with reduced hassles of certification processes.
Don't forget that ElasticSearch is built on Lucene (which is the core of their search engine) and is an Apache 2 Open Source project which existed long before ElasticSearch. So they benefited tremendously from the work of thousands of Engineers too.
You're giving the credit of automation to docker, which isn't where the credit belongs. It's pretty easy to get the same portability and testing without containers (this is what was happening long before docker was launched). Not to say that the OP shouldnt have done it, but I'm kind of tired of seeing the whole portability thing still being put up as if it's only viable with containerised solutions.
>Either you trust me, or you don't.

Can I sue you if your website serves me malware? Because that's the concern.
A lot of people would still fall for that too unfortunately. And ultimately people don't know that you can even do that. They see as authenticating oneself as proving their identity.
You conveniently forgot to mention that the captain of the flight was highly experienced with 8'000 hours of flight time.
I don't know? I didn't make such a claim, but I'll speculate a little anyway. Vote by mail is accomplished by trusting the postal service which has a good track record of not losing or mangling my messages and, at least where I live, heavy legal deterrents against tampering. I imagine a digital solution could be as or more secure, but it may not be more trustworthy. Especially if the software running it is opaque or I don't understand the math involved.
“That’s still in production” says nothing. Rarely is any code taken out of production once it’s put there in my humble experience. Not to rain on you though: good work getting a dsl out there.
Enabling VMWare Driver on Icaros
>Almost no one comprehends https either. Yet it seems to work well enough to protect people.

That's because it's entirely up to site operators (and browser/os vendors to add trusted registries) and not to the user.

If it was to the end user to install something and manage certs for https, it wouldn't work at all...
But Kubernetes still uses Docker, don't they?
You are not alone:

https://eggplant.pro/blog/make-things-easier-to-read-with-ac...

The web is made by children hunched over macbooks in coffee shops and open offices.

If you can't read 8pt Helvetica, maybe it's time to give up the web and take up bridge.
sachin tamang
dipesh tamang
The only question is how to have Docker Compose like functionality without Docker.
Thank you for sharing! The module is based on the inspector native module to get internal properties.
>All I can say is OMG yes. I've been meaning to write the exact same blog post. How is it we're at 2019 and email clients don't demand some kind of signature?

So that you have a false sense of security when the keys have been stolen from a clueless user you correspond with?
Inverview with Evan Ratliff, author of The Mastermind
> With that said, I think it makes prudent sense for other countries to ground their 737 MAX planes since they simply don't have the FAA.

If a plane has enormous costs for maintenance then it should be justified for grounding or prevent them from buying.

This is very similar to cars. A car which is very costly to maintain but very reliable does not inspire much confidence for me when I am driving in remote areas. A car which is easy to maintain, reliable and with low costs and big service network with plenty of spare parts inspires a lot of confidence and I will take it anywhere.
"It's the key exchange that's difficult."

That's just the tip of the iceberg in difficulty.

There's also:

0 - understanding the web of trust

1 - verifying that the key you exchanged actually belongs to the person/entity it purports to be from (ie. verifying identities of keyholders and verifying key fingerprints over an out-of-band communications channel).

2 - keeping your own secret keys secure

3 - making and keeping offline backups of your keys

4 - understanding why, how, and when to issue and use key revocations
"A good alternative" according to what criteria ?
"Ansible annoying" according to what criteria ?

Ansible always win: no agent, works over plain ssh, gazillion of modules ...

It just takes a little while to learn to be efficient with it apparently.

The people i found "hating" ansible just didn't know the few options they needed to understand what's going on.
Their whitepaper is an interesting read.
Most projects that try to build dynamic data on top of merkle trees / dags seem to be using Conflict Resolution Data Types (CRDTs) (peer-crdt, orbitdb, gun, repikativ, dat), instead they have gone for a Replicated State Machines (RSM) with a lisp/scheme like DSL.

This seems like an interesting alternative provided that there is a way to resolve conflicts when multiple peers add to the same graph. Conflict resolution doesn’t seem to be an issue for radicle as the owner of the repo (if I understand this correctly) is the one that needs to accepts patches and will have to republish on IPNS, thus simply appending new nodes to the DAG after accepting the patch instead of using the ones the contributor created. (I might really be off on this but I’d love to get how conflict resolution works if someone understands this better).

Owh and I love the ability to use the same language to query the RSM as well.
This seems like a stolen article. The URL should be changed to the original blog post: https://www.viva64.com/en/b/0615/
maybe im just getting old but i cant really understand the runaway success of discord, it seems awfully similar to IRC to me
But that's exactly my point. As a passenger, it matters if the calculation of how safe your journey is is wrong. And the calculation is wrong if it doesn't take into account how long the drive is.
A typical webpage is something like 2MB

A typical cert is 0.1% of that
You know we're living in a dystopian future where the first complaint against an open source project is that it provides too few tools for censorship.
I hope they add this to the Web Speech API in Chrome. It doesn't have punctuation right now and that's a killer for me.
Pedantic correction: Daggerfall didn't use a raycaster, it was a full polygon engine (although with sprite characters).

Its predecessor Arena did appear to use one though.
Yes, it's specifically pixel phones.
Actually many ORMs are way too complex and if you only need 3 selects + 2 inserts than yes avoid the ORM.
We sharded a queue to be fair across tenants (using redis)
And Obama once said there were 57 states... gaffes are gaffes
Stop worrying about code and get that distribution channel
Private use? yeah, not so great with the current state of software for it. Company environments: that's what sysadmins are for. You see the occasional company where everything is signed with S/MIME.
Kubernetes relies on containerd which works with docker, rkt or anything that works with containerd.

The prefered alternative to docker is rkt.
> any observer can go and read a variety of perspectives on it

Never heard of the controversy and the link went to a low quality video blog, which was also rather loud, so I did what you suggested and went and checked other sources since I wanted to know what the evergreen + Weinstein controversy was all about.

"Once a year, Evergreen State University (located just outside of Seattle), allows the students of colour to take a day of absence, so that their importance and contribution is felt at the University. Bret Weinstein, as a progressive, was and has been on board for this for a long time.

A year ago, they flipped the logic. Rather than telling people of colour to stay away for the day, they told white people that they are not welcome on campus for a day. Absence wasn’t compulsory, but highly recommended."

Those two paragraph tells me everything I need to know. stcredzero is commenting on the political climate in academia. Not a comment about racial differences, nor race relations, but about the politics in academia.

If this was gender politics it would look like this:

Experiment 1: A day that allows women and only women to take day of absence from daycare, so that their importance and contribution is felt.

Experiment 2: A day that declare that men are not welcome at daycare.

Could anyone imagine either of those experiment going well? Imagine for completeness if we also did the same for a male dominated profession. I could not even imagine such social experiment getting a pass of approval from an ethical board, and I can't find any reference that evergreen requested one.
This question has a simple answer.

Regardless of your situation consider the "time required to release" and "how often we release" as two important metric of efficiency. Try to reduce them as low as possible.
Jails do not have the same feature set. Orchestration is still need to be managed somehow.
I can't paint, but I do enjoy it, so my advice may not be of any help.

It is not so much about learning how to apply paint to canvas, it is much more about learning how to see, how to take what is in front of you, and strip it of concept, that's not a door, it's not even a square, theres something lighter there, something darker there, maybe there's a gradient going in that direction.
Deconstruct until it becomes raw visual.

Then buy some paints (I suggest acrylics, they smell nicer and are more forgiving, and come on! 100 years lifetime is quite enough for our paintings!)

Buy some canvas, the cheap stuff.
Buy some brushes, any set will do, but you should have large and small ones.
You don't need a palette, a piece of cardboard is just fine.

Have fun! The process of applying paint to canvas is interesting in and of itself, so do that for a while before
trying to make anything that looks like something.

I'm a somewhat frugal person, so my emphasis on using cheap stuff may not be relevant to others, but for me, it lowers the barrier of entry, because I'm not "wasting" good materials, it makes me able to start a painting with less of an idea, which means more often than I would otherwise. The blank canvas is perfect, nothing has gone wrong with it yet, it is not tainted by idea.. Smearing paint onto it is destruction for a while, I will be destroying the canvas, and wasting paint until it is done, and at that point, it will have no more potential, whatever it is, it is, and it will always be less than its potential, someone better could have done much better with those materials, so they were wasted, and that is why I need to use cheap stuff, to feel less guilty about wasting them. Because I waste them purely for my own pleasure.

Here are my pictures: http://chromophiliat.dk
Meaningless Growth Metrics
>There is no ‘promise that users will support the maintainer’ and never has been.

Certainly not officially...

>Open source was originally about developers sharing code with each other and jointly contributing to it, to make their lives easier. Look at all the original GNU projects, they’re almost entirely developer tools, shared infrastructure and games. The core right of open source is for users to modify the code, because in the GOL no distinction is made between users and developers, they are the same.

I would argue that _is_ the promise of supporting the maintainer ;)
Not 1 in 18 quintillion to 1 in 9 quintillion? I think you've got your binary math wrong.
There are quite a few open source framework for all/many of these.

Mastodon, Scuttlebutt to name a few. They are somewhat popular, but they are bad at many of the things I described.
I've been upgrading my OVH dedicated server once in a year. So far it has been possible to get a little bit better server for the same price from their black Friday sale. Thanks to a simple bootstrap shell script, docker and docker compose I'm able to migrate my ten random services and two KVM VMs in two hours (copying /data directory takes most of the time obviously)
Rust Evangelism Strike Force
While it's true there's currently no easy way to do that, we've made the machines (the name we use for each instance of an issue, project or patch utility instance) upgradable by the maintainer [0], and each submission is already signed. So if it becomes a big problem, we can write up a little expression that adds banning, rate-limiting, or removes certain content, from the materialized view, and anyone who wants to use it can.

That said, the already-accepted content will still be in the logs of the machine, even if it doesn't show up at all in the materialized state.

[0] This is based on the eval-redefinition we describe here: https://ipfs.io/ipfs/QmadmGA6mBWZ93Wv4XKuCu9wdPf7Da8pjH3Corz...
There are file sharing use cases not covered by Google Drive or Dropbox. Briefly:

Google reads (and censors, not that that would be an issue) anything added to Drive (and uses that data to target ads at you). And Docs is primarily aimed at collaboration rather than secure file sharing. And revoking permissions isn't easy. And it's all tied up in to Google identities, which may or may not be a recipient's personal Google ID rather than their professional ID - everyone has a separate work email, not everyone has a separate work Google ID.

Dropbox is designed to synchronise a folder between two devices. You can use it to share documents, but that's not what it was designed to do. And if someone deletes it off the shared folder, it gets deleted for everyone... not ideal in this use case. It also creates a dropbox folder on the user's hard drive, and will automatically upload anything in that folder, and copy that to everyone else sharing that folder... it's democratic when this use case needs to be authoritarian.

Does that make sense?
Agreed, seems like people are just too scared to reject potentially broken email.

If your mail server receives an email that claims to be from paypal.com, but it's not dkim signed (by paypal.com) it should be rejected.

But even paypal.com, likely one of the top phisher targets publishes their DKIM signature with:
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=mail.paypal.com;

I'm surprised that even internal email systems inside of companies regularly accept email from allegedly inside the company, that are forgeries. You'd think ibm.com (just an example) would A) sign ALL outgoing email B) check DKIM for all incoming email C) reject anything claiming ibm.com, but without the ibm.com signature.

Seems insane that it's so easy to send email as a companies/organizations management.
I would imagine that to be Firefox itself and Firefox for Android/iOS. I've seen people easily set up syncing on Google Chrome because they already have a Google account to which they might even already be logged in, while they're completely unaware that Firefox has a similar feature.

If you already have a Firefox account, the barrier to using Firefox Sync is lower, and with that, the barrier to using Firefox for Android/iOS is lower.
Just create a user in the Dockerfile, change to him and chroot the container application directory to the created user
It's not about whether it compromised security; it's that they didn't adhere to standards. If you're a certificate authority, you need to conform to standards. If you're not, you SHOULD get evicted as an authority, like DigiNotar [1] was for example.

[1] https://en.wikipedia.org/wiki/DigiNotar
Colorblindness is the veganism of the web.
That is a great opportunity to creat a list of packages that are working with Musl.
It is all PR and public perception at this point.

I feel that the US have lost in reputation here while, e.g. China has gained. It didn't have to be that way.

China was the first to ban the 737 MAX. When they did it people could counter that it was political. But since so many countries, including some of the US's closest allies, have followed suit then they have come out as being serious and safety-conscious.

On the other hand, by refusing to ban the US are seen as putting corporate interests above safety.
Some more details:

The problem being solved:

Current AR objects don't utilize the physical space of the real world environment.

- AR object placement in the physical environment is obstructive, often blocking the user’s view of the physical environment.

- AR objects appear to "float" and not look natural within the real world environment.

- Occlusion helps to convey immersion, but the AR content still doesn't efficiently utilize the physical space of the real world environment.

The Solution:

Exanaview is an Augmented Reality Spatial Authoring Technology that applies real-time modeling to the real world environment along with occlusion effects to create AR spaces that are embedded in the structures of the real world environment.

- This allows AR objects to be inserted into the authored AR regions to correctly utilize the real world environment's physical space.

- The AR objects are embedded into the physical structures of the real world environment and don't block the user's view of the physical environment.

- The AR objects look more natural within the real world environment.

The Applications:

- Architecture Engineering Construction (AEC): Author and edit designs in the real world environment to validate them.

- Interior Design: Author and change floor, wall, and ceiling decorations. Author and change structures and fixtures.

- Renovation: Modify and restructure the physical layout of the real world environment. Add additional rooms, floors, and/or expand rooms.

- Travel/Recreation/Sports/Entertainment (Airports,museums,arenas,theaters): Spatially embed 3D objects and information throughout the physical environment.

See demos of the Exanaview Technology here: https://www.youtube.com/channel/UC0saGV54vMrE7CxB4hM9FOg/vid...
I am surprised to hear that. Even $50 Android Phones now has H.264 hardware decoding support, what phones are those that doesn't come with it? And likely doesn't have VP8 hardware decoding either.
> The 'trapdoor' is in the protocol by design.

Only due to ignorance. It is well known that the bases of a Pedersen commitment can and should be sampled randomly; a trusted setup is only subverting the security of the primitive.
Extended Isolation Forest
Stating the obvious but a redesign wouldn't hurt, also copy like "Make $$$ by Accepting Donations!" doesn't help.

Otherwise the visualization itself is sound, having multiple views linked is neat. But I personally would rather use an open-source JS library and host it on my own websites.
Product Pitch: letsencrypt for s/mime, would solve soo many problems. Every mailing provider could acquire a certificate for you and automatically sign it without any user interaction.
I don't think the parents are evil. But nepotism isn't a desirable attribute for society. It doesn't award innovation and fosters dissatisfaction. It's self reinforcing, which is always a dangerous attribute.

As with other antisocial trends, we just need to implement strategies to counter it. This is already something we do -- eg. scholarships --, so while it might sound harsh, it isn't particularly controversial. We probably need to intensify our efforts.
I've been customer of Online, since it opened back 10 years ago or something (was called dedibox back then), and customer of scaleway since beta.

Bandwidth has always been vastly superior to any competitor, not sure if this has something to do with the fact that the mother company Iliad also contains a famous french ISP (Free). Not to mention another sister company that sells domains without making a marging on it.

I have restarted thousand of instances, never had a problem that was not a PEBKAC. Actually, I even have a production site there since the beta and never had a problem.
What's the point of living in an artifical bubble leading people down the wrong path?

Building software doesn't guarantee that it's worth anything to anyone else. If it is and is meaningfully better than free alternatives they will pay. If not then that's literally the life of an 'entrepreneur'.

Similarly with OSS, no one de facto deserves funding just because they maintain open source software, popular or not. And if you think that companies will support you and play ball with your own whims then you're living in a fantasy world.

The crux is the naivety of the people involved. If you don't like that CompanyX will use or fork your code with no financial contributions then don't use those licenses and roll the dice to see how that works out for you like any other business.
Those freedoms they grant you are granted to everyone whether a one man band or a global enterprise.

If you want to play pick and choose then you're using the wrong definition of 'free'
I thought Amazon was open-sourcing their ElasticSearch fork? Did I misinterpret what's going on?
FWIW Romero considers Doom to be 3D [0]. Although, that is with the choice of 2D or 3D.

[0] https://twitter.com/romero/status/826494127055466497
>>Donating a building is a payment to the university.

>>It may not be meritocratic, but it's not corrupt

Its just dampening the effects a little, but its the same though. Donating X, just means the person who bought in the donation gets promoted or gets awarded some bonus or gets rewards by their employer(university). Instead of receiving the bribe directly.

This is a classic trick from corruption handbooks used by ace corrupt people.

When you trade something for something which could be wrong, only stupid people directly do it through exchange of money. Clever people trade through favors and indirect profit/help. They also call this lobbying in places like politics. In many other places they call these things incentives, commissions, brokerage or whatever.

This is really one of those classic problems with defining corruption. Books and stories can always be cooked in a way to make anything look good.