skysight-inc/HackerNews huggingface dataset:
I'm trying to understand your point. I agree with the basic premise that most pieces of code that end up not getting exposed are not sensitive, but building guardrails to ensure people who aren't security minded ask the right questions and get closer to 'default correct' ends up being a requirement in major banks/government organizations. The number of times someone has done something completely silly like include API keys in a public package or Git repo is reason enough to care. Being beholden on an external system being secure and up to standard ruins pretty much every category of a risk analysis, especially when you end up with gold like this article or the PHP PEAR hack.

Then there is always that part of the organization that isn't judicious about keeping packages up to date, and these kinds of package exposures expose their negligence.

Then there is the other piece of my systems being dependent on your systems in a sometimes inappropriate matter if precautions aren't taken. 'Oh I just added this dependency' is a quick way to an outage if rules aren't set.
10 or 30 seem shorter, no? I don't have anything to say about 10 or 30, but 90 seems too long in my opinion.

I understand the need to keep logs to thwart abuse, but with longer lengths you're just helping law enforcement.
Both have better networks and features though. Sometimes you get what you pay for.

Cloudflare is the Heroku of the CDN space. They are easy to setup, they give away free or cheap accounts to get people on their service. Once a company gets big and starts having real traffic they move off of Cloudflare to a better provider.

Akamai isn't competing with Cloudflare on price, much like The French Laundry isn't competing with McDonalds on price.
Is it typical to not only ground a plane in your country, but to also ban overflying?
Largest-Ever Gene Study Brings New Answers for Alzheimer's Disease
> FSB (Russian FBI) had problems with receiving bomb threats coming from Protonmail addresses

Source?
https://cloudsmith.io/l/npm-repository/ - no?
When trying to port my web app into a Chrome app I had to rewrite all localStorage to be async because the Chrome app localStorage was async ... After a few weeks I gave up as there was too much work to make it into a Chrome app, but I kept the storage async in the web app. It seems that CPU memory is the new RAM and RAM is the new HDD, so it makes sense to make everything that access RAM async ... But then when everyone use async abstractions like "futures" it becomes a net negative in performance.
But that's not what it means to have competition.

Walmart is still Amazon's competitor, despite being much cheaper in many cases.
Personally, I believe the problem is too few sensors. Don't make it 3 or 10, make it 10K sensors. If 10% are off, you can simply ignore them, and not even alert the pilot.

Living beings have millions of sensors for most input and are able to work with conflicting sensory information because of this high redundancy.
Use MPEG-DASH and have CDN's deal with it...

This is CERN, the people who made the worlds largest particle accelerator and can do data aquisition at speeds that would make other's eyes water. I'm sure they could do this.
HN: Why is Firefox preventing protonmail log in page?
i get this when i try to log in:

The owner of mail.protonmail.com has configured their website improperly. To protect your information from being stolen, Firefox has not connected to this website.

This site uses HTTP Strict Transport Security (HSTS) to specify that Firefox may only connect to it securely. As a result, it is not possible to add an exception for this certificate.
openid, is that you? welcome back!
Hmm, that’s not my impression. I’m constantly seeing YC startups “in the wild” that seem pretty damn niche. Maybe they did pitch with some path to a billion dollars but it’s not at all clear how that would ever realistically happen.
Yes it's time. Google is way beyond a bad actor and monopoly at this point. Im actually concerned that G will find this post and penalize me for speaking up. Google is openly behaving as a technocratic control system
I'm still not sure on how TikTok is different from Vine...
Google Search, Yahoo Search.
Our Boss Will Call Your Boss
Getting fit in middle age as beneficial as starting early – study
Exactly! But for some reason young people moving to CA to "make it" wouldn't dream of living here.
> (And it shows another negative side of federated systems, like E-mail.)

The obvious point of comparison would be with a centralised system, but I can't see any possible way that would be better than federated in a situation like this.
If it makes more sense to keep these tech giants as conglomerates then there exists other methods of using the resources more economically. For instance lowering their transfer payments(raising taxes on their activities in classical economics.)
I’m not saying that answering the question is mandatory. But if they’re cruising and everything seems fine, or if they’re mid takeoff and everything seems fine... probably the sensor which is indicating a nosediving is probably fine.

If they respond with “no” then they should be given maximal control of the aircraft with the computer not restricting control or making any large scale adjustments itself.
Ask HN: Just enough math to read computer papers?
I've recently been reading papers on computer science topics. I find the math hard to understand -- it seems like what would be a clear function, taking a page of code, is turned into a single mathematical statement (or, perhaps, a handful of them). Clear variable or function names become latin and greek letters with adornments, for loops become sigmas, etc.

I really have the feeling that often these aren't as hard to understand as the math makes them out to be.

Is there a good way to learn just enough math to understand these papers? Something that recasts mathematical operators in code?

(I've been reading up on computer vision -- classical image processing, and more modern machine learning -- and kinda get it (although I only understand, say, the surface level of how the Harris Corner Detector works). When I was reading up on fluid dynamics -- oh, my, goodness! That's a lot of unfamiliar math!)
They have an SF office
I wonder how this will affect the Raspbian as default Raspberry Pi distro...
On iOS having a file manager web server is a common workaround, some apps like VLC even have their own. The only issue is that the server stops if you switch apps. There's also iMazing which uses the iTunes protocol and is pretty good, but unfortunately is paid.
I think Syncthing has a good model for this sort of thing. Anyone can stand up a rendezvous (and/or relay if you want) server which joins the network and starts helping people traverse NAT.
This question comes from a position of good faith and mere curiosity, but I've always been intrigued how Sam became prominent in YC so quickly (part time partner to running things in 3 years)? I know he founded Loopt but that's all I knew about him before he became a partner. Did PG just really get on well with him and saw someone capable to help take things over? It sorta feels like an inspirational story worth knowing more about.

(As I say, this merely comes from a position of curiosity. Sam seems to be a very capable guy and seems to have done a good job.)
Read what I posted again.

The number of security vulnerabilities due to PHP's crappiness is two orders of magnitude greater than all of nginx vulnerabilities combined.

Yet PHP is a memory-safe language.

Memory safety won't fix anything by itself, it will just shuffle the shit into some other place.

Now if you're claiming that if you take nginx developers and force them to use Rust they'll somehow start writing better code, then that's a valid point. Although I'm in extreme doubt that it is realistic or even true.
There are very few of these in Europe currently. The UK has just grounded them, though.
Two different incidents of a similar nature in the span of six months suggests that there is something wrong with the aircraft. China may be playing politics, but the operators have zero incentive to do so. The FAA should begin an investigation and ground the plane if necessary to do so ASAP.
No, that's a straw man :). My claim was not "just because the action makes sense means it supports open source software", it was "Elastic on balance is one of the most pro-open-source companies, and recent events should be interpreted in the context of the existential threat posed by Amazon using Elastic's open source contributions to compete with Elastic".

Given that and the fact that Elastic is the primary sponsor of the ElasticSearch open source project, it is obvious that this action actually is in the best interest of open source, as it allows Elastic to continue sponsoring ElasticSearch.

Most of the criticism of Elastic in this thread seems to be predicated on the purist notion that proprietary software is the antithesis of open source software. That's obviously untrue, and we really need to disillusion ourselves of this.
All My Secrets
YC got much bigger, funds many more startups per year

It’s not clear that this is better from YC’s perspective (or more importantly, from their LP’s perspective)
Sure. If aircraft are falling out of the sky, it poses a risk not only to people in the air but to those on the ground, especially in a densely-populated country like the UK.
How to get featured by making Apple look good
Spring Cloud: Service Discovery with Eureka
That's what panic and confusion does: you stop thinking and cling to reflexes.
Well I don’t care to speculate but the first officer had only 200 hours of flight logged and the captain had over 8000. A lot of captains will let the less experienced first officer fly take off and landing if it’s favorable conditions and easy terrain to give them more experience. I don’t know who was flying the plane but it certainly could have been the fo because it was vfr conditions and seemingly favorable terrain. As to your flight you should probably be fine as there is a us rule that the fo needs to have 1500 hours to be qualified. That coupled with the fact that the pilots are now keenly aware of the failure mode of the 37 max means you are probably fine.
That may be the perception, yes, and many people will go along with that. I disagree.

My view is that it is too early for a strong view to be taken either way, therefore differing views are likely to be taken, and I don't think either side is stupid for doing so. If the FAA come out in a couple of days time and say that they want to ground the aircraft too, I also won't think they are losing face. It simply is a process of giving out the best advice available at the time, and revising it when more information is available.

Sometimes a person/organisation picks a decision at random, with too little information. The ones that get it right are praised, and people think that they are better than the ones that got it wrong. However, if it truly was picked at random with too little information, then no one side is better than the other, regardless of which one "won".
UK has banned all Boeing 737 Max 8 aircraft from British airspace
I wasn't aware that there were so many places/communities that focused on this sort of thing. I knew of only a couple. It's exciting to look through it all. Love the list format without all the fancy images that make scrolling and eyeballing data so difficult.

sidenote: opened up the main page to hunt for RSS (or similar). Though none exist, surprised that everything was on a single line. My poor (lightweight) external editor stopped loading the page at the 50k character mark (hard limit for allowed characters per line).
Do they have Canberra office too?
I normally write API documentation as reStructuredText directly in Python docstrings which are then auto generated via Sphinx.

Because I tend to write numerical algorithms, I also embed math via LaTeX tags. Sphinx converts them to MathJax which renders the math quite nicely.

The final output from Sphinx is beautiful (I use the Solar theme [1] for Sphinx). As long as I keep my docstrings up to date, the API documentation generates itself and does so beautifully.

I’m sure something similar exists for other languages but I would agree with you that most Doxygen docs are mechanical and devoid of the human touch (most only contain method signatures and non descriptive comments if they exist at all). They are also aesthetically unpleasant which affects their usability, which in turn dampens devs’ motivation to document their code (“why document if the final output is ugly and no one looks at it?”). I wonder if a better theme would help.

[1] theme preview here https://vimalkvn.github.io/solar-theme/
The relationship between Debian and Ubuntu is more akin to that between fedora and RHEL.

Having a different focus than fedora, in fact, one could say almost radically different[1] hasn't stopped Redhat from contributing people, hardware and support to fedora -- leaving the volunteers to focus on contributions -- be it by code or as you point out documentation.

Help with 'administrative' or grunt-work tasks goes a long way in large OSS projects and Ubuntu/Cannonical simply haven't stepped up where they should have.

[1] for business vs for developers, cutting edge vs stability, ..etc
> they have an SF office

I didn’t know they had “support centers in San Francisco, CA, and Skopje, Macedonia” [1]. Thank you.

Still a far cry from proof of being “in the pockets of the US government” [2]. Signal, too, has American nexuses. That doesn’t automatically render it compromised.

[1] https://protonmail.com/about

[2] https://news.ycombinator.com/item?id=19368140
So many tasteless jokes--so little time. Also, it's 2019... :-(
> As soon as that developer is used to his half a million take home, which takes roughly three years*

*Some conditions apply
RIP Persona https://developer.mozilla.org/en-US/docs/Archive/Mozilla/Per...
Most of the coins made will circulate normally, although higher quality commemorative versions will also be available to buy.
This is neat, thanks.
"What is more striking is that, in retrospect, the core piece of the government’s case doesn’t make any sense: of course a browser should be bundled with an operating system; a new computer without a browser would be practically useless (for one, how do you install a browser?). Moreover, Apple, not without merit, argues that restricting rendering engines to the one that ships with the OS (all browsers on iOS have no choice but to use the built-in rendering engine) has significant security benefits; this is debatable, but ultimately, most don’t care, simply because browsers are means to information, not ends."

Someone may want to revisit this argument.

1. The same way Netscape achieved its original dominance?

2. Integrating a browser engine with the core operating system increases security...how?
Why would he be disqualified, and why is there pressure to choose a woman? That seems like a bad thing to do to a man who made such contributions to science.

Edit: Anyone care to comment on why you killed this?
Works fine in my Firefox. Maybe you're (un)lucky and somebody indeed redirects you to a wrong unsecured server not belonging to protonmail. Or protonmail recently added a new server and didn't install their certificates correctly yet.
I really don't understand why they didn't share a link to the repository in the article. For anyone who's interested - here it is: https://github.com/mozilla/send
Very clean and nice, but how is this financed?

That is, who's paying for the server storage and the bandwidth?
Maybe they just don’t need too much storage since they expire quickly. This would be an interesting thing to graph, if they release the statistics.
Storage is extremely cheap. Especially for a service like Send which doesn't hold any data for a long period of time.

Elseways, It might be that they have bigger plans with it. This might be just a product to learn about market potentials.

Mozilla's manifesto is all about the Internet and Internet privacy. File sharing is one of the areas where the internet is losing privacy.
The banks need to emphasis what I believe they have that is truly superior to startup or smaller tech firms: an established business, stable, predictable hours, reliable pay, excellent benefits, and the security that your job won't be ripped from underneath you.
I can't imagine how frustrating it is for folks named Siri.

You can at least change Alexa's wake word to a couple other options ("Echo" or "Computer").
It's wild to realize that this list of like a hundred innovative businesses is just what people are launching today, and there will be a whole new batch tomorrow, and the day after that, and so on. Just today's list is thousands and thousands of aggregated hours of work by hundreds of people for speculative riches with good odds of the businesses failing. And the stuff that gets onto one of these lists is just a small fraction of what gets launched every day!

This site may have been intended to inspire startup founders or side-project hustlers, but it does the opposite for me: it has shown me the folly of trying to make it as one of those!

Going forward I'm sticking to proven, local, likely service-based businesses.

Thanks, stevematzai. Very enlightening site, even if it didn't help in the way you would have liked. :)
Arguably there are 3, depending how you view webkit vs blink; yes, they come from a common ancestor, but there's been quite a bit of divergence by now.

But yes, the loss of EdgeHTML (following a few years after the loss of Presto) is a sad thing for the health of the web.
Bingo. You can bet that the Europeans would put more emphasis on salary if the difference between checkout clerk and tech lead was more than 2.5x, and the difference between junior developer and tech lead was more than 2x.
Very enlightening bit of history here. Also interesting the bit about the CA graveyard. I know of at least one really useful utility that was bought by CA and disappeared off the face of the earth. I implemented a clone and make a nice monthly supplement with it.
It's not - it started with a little more structure "lip sync" but now it's just short form vids.
Materialize Your Components
Will they be extending it now?
is it just me or do you all see "Mr. Burns doing the finger thing in simpsons" everytime google puts out something new?
I regularly do this to offload pictures and movies. I have even used my iPhone as a large USB drive.

But, they don’t let you access to full file system for some reason.
There are a surprising number of apps that use Firebase which is a Google product. Very few of those apps disclose Firbase in their ad listings.

firebase.google.com
But then maybe she's onto something.

Some Genetic Tests Apparently Can’t Tell If You’re Dog Or Human
https://futurism.com/home-genetics-test-dog-human

How DNA Testing Botched My Family's Heritage, and Probably Yours, Too
https://gizmodo.com/how-dna-testing-botched-my-familys-herit...

I Took 9 Different Commercial DNA Tests and Got 6 Different Results
https://www.livescience.com/63997-dna-ancestry-test-results-...

How Accurate Are Online DNA Tests? (Betteridge's Law of Headlines might still somewhat play into this one.)
https://www.scientificamerican.com/article/how-accurate-are-...

Consumer DNA Tests Are Wrong 40 Percent of the Time
https://www.geek.com/science/study-consumer-dna-tests-are-wr...

Consumer Affairs' 23 and me rating (1.5/5 stars)
https://www.consumeraffairs.com/health/23andme.html

The words "Fly By Night" definitely come to mind.

Combine that with ongoing privacy murkiness, and 23andme is basically the medical version of Facebook.
https://www.cnbc.com/2018/06/16/5-biggest-risks-of-sharing-d...
I've never been to a small town where the shopkeeper asks for my address book and to briefly scan my personal communications for keywords "to improve our services and deliver a more relevant shopping experience".
Current status of the web? HTTP 417
> China may be playing politics

all grounded 737 max in China were replaced by 737-800, playing politics to support and promote 737-800 from the exact same company?

that is a cute idea.
Streisand doesn't install an email server.

https://github.com/StreisandEffect/streisand#services-provid...
termux + woof

woof -i <ip_address> -p <port> <filename>

termux: https://play.google.com/store/apps/details?id=com.termux&hl=....

woof: http://www.home.unix-ag.org/simon/woof.html

Edit:

1. Allows directory upload/download (tar/gzip/bzip2 compressed)

2. Local file server (doesn't go over the internet)

3. Allows upload form (-U option)

4. Allows file to be served <count> number of times (-c option)
I have to admit I'm a little taken aback by the focus on how the stated rationale is weak or doesn't fit every company equally while agreeing that there are real problems that would be addressed. Is there a word for this? Its almost nit-picking? Pedantry? Like dismissing someone who is fighting against anti-vaxxers because they didn't quote the most definitive study as rationale. Explanations of policy ideas aren't targeted at experts but at laypeople so I don't see the problem with using terms or rationale they understand even if its not perfect.

I mean the core of the whole idea is that no one should both control the platform and simultaneously participate in it. Is the author against that? The pushback seems to be that it would lead to lawsuits which is almost a cliche from anyone trying to dismiss an idea.
This article is weird. It admits in the first paragraph that the president’s budget request is typically ignored by the Congress and then goes on anyway.

My understanding is presidential budgets are pretty much meaningless and have been for over a decade. Congress ignores them and does its own thing.

SLS is also known as the “senate launch system” and isn’t going anywhere.
It's all about the requirements. For a first iteration, it can make sense to do things insecurely -- for example, to seed internal product discussion and for a partial testing of quality.
Unrestricted access would probably mean that someone could take your phone and access your data.

Instead, there are these 3 ways to share files between your phone and other machines: https://support.apple.com/en-us/HT201301
And no SMTP/IMAP for free accounts. Free plan is unusable.
"We're not X, we're a tech company that does X"is the latest thing that gets right on my tits.
Is there a simple way to get the direct URL of the file (e.g. to use in wget cli calls).
You might be interested in KDE Connect, which provides (among other things) essentially a thin wrapper around SSHFS. It's the most convenient method of computer<->phone transfer I've found.
It does - just so long as you and anyone else you might want to share with are paid up into the Apple walled garden.

I do have an iPhone and I love AirDrop for sharing photos with the few friends who also have an iPhone but it's not even an option for me with a Linux laptop.
Not having a cable is hardly the same issue, iPhones let you easily share images and videos but not all files.
While I feel Alexa has a lot of potential from the couple POC apps I've developed, the device class itself simply isn't where I need it to be to fully capitalize on it yet.