skysight-inc/HackerNews huggingface dataset:
They stopped selling ebooks directly to consumers. They still publish them, but now sales are all through third parties. You can get them in PDF or ePub format, DRM-free, from ebooks.com.
So instead of a Dockerfile we now need a builder.toml file. In addition you need a detect and build script:
https://buildpacks.io/docs/create-buildpack/building-blocks-...
Is this really a simplification?
Yes, I think it isn't. Here[0] is a meta-study that illustrates the prevalence of transgenderism across continents and across time. It seems that as the concept of transgenderism becomes normalized, its prevalence increases. This is the same effect we have seen with homosexuality, so it's not terribly surprising.

The short summary: as a lower bound, probably more than 1 in 10k people (0.01%) would identify as transgender. Including the DSM definition of gender dysphoria as an indicator, that figure rises to 1% or possibly even higher.

Now, my question to you: how small should a subset be to be statistically insignificant? For popular reference (and I apologize for using this example again), keep in mind that the global prevalence of Judaism is 0.2%.

[0] https://web.archive.org/web/20141205022609/http://web.hku.hk...
Nice
Find someone I really love http://basketballgames.io
-> basketball games
Copyright is federal law, I don't think the State of California can exempt any institution from it.
Thanks, now I'm scared. Would you know which sort of startups went through a similar path so I can research how they solved scheduling? We have already lost customers we couldn't match.

Any insights on how to solve the other bits, gathering feedback and reviews to upsell are very welcome. Thanks mate
Seems like people are saying art is art, and copyrighted, even if it was illegal graffiti.

That begs the question:

1) what if I start tagging everything possible in public space, and if anyone takes photos of it then I can claim copyright violation or royalties? Evidence in the comments seems to show that this actually works to get settlements.

And this was brought up by a commenter:

2) what if a my car window is smashed (as a work of art), and I take a photo of it for evidence?

Seems like copyrighting artwork done on public property (or other people's property) is an unfair and unjust invasion of one's personal vision space (it's forcing me to look at it). It reduces my personal rights to take photos of a public area and retain what would be my rights to the contents of a photo by having someone's copyrighted artwork imposed there (often illegitimately). In my opinion, if I am forced—that is to say I have no choice—to see something then it should lose copyright (or be applicable as fair use).
Good point. I actually looked for some "No DRM" marketing on the website before I linked it and didn't find it, so I wondered if I was even correct that it was one of their objectives. I've only noticed that the books I've bought from them had no DRM and that's apparently unreliable. Too bad.

Thankfully, better options have been linked in the thread.
The Minimal Persuasive Effects of Campaign Contact in General Elections (2017) [pdf]
Book Review: Quantum Philosophy: Understanding and Interpreting Science
Omnes' thesis is that modern science has become formal, no longer based
upon an intuitive understanding. One of the struggles in physics is, as
Bohr has said, "compute". That is, you can't reason out what the result
must be, you have to compute the result without a mental model. Ideas
such as locality and causality have been shown false in the quantum
domain so any reasoning that includes them is also false.

Likewise, mathematics has unhinged from its intuitive background (e.g.
Hilberts notion of replacing point, line, and plane with table, chair, glass).

He describes a "fracture" within science that is new, novel, and a
challenge to understand. Our primitive notions are no longer a good
basis for modern science.

[0] Omnes, Roland "Quantum Philosophy: Understanding and Interpreting
Contemporary Science" Princeton University Press, 1999 0-691-02787-0
Yes.

Casino house games are set up in a way that the player is guaranteed to be losing in the long run (all of the player's decisions have negative expected value). So maybe trading is more similar to poker because in both of them it's possible to have positive EV but they still have many of the problematic aspects of gambling such as:

- uncertain outcome

- opportunity to lose or win large amounts of money

- some element of skill and the opportunity to "have and edge"

- confounding skill and luck - it's easy to attribute your wins to your skill and your losses to bad luck

- need for emotional regulation to avoid making bad decisions (also known as tilt)

- need for emotional regulation after a session to deal with large losses (or even large wins)

- the fact that you can make good decisions and still lose, in fact this will happen a lot

- the randomness of the outcome and all the associated cognitive biases are prime factors in creating addictive behavior (often to the point where it's problematic)

That's why I would label it as gambling, which doesn't necessarily mean that it's bad. But it's important to be aware of the risks and know that most people's personality and their emotional and mental tooling isn't well suited for it.
In addition to using YubiKey's U2F capabilities, I've been using its HMAC-SHA1 challenge-response mode as my password manager (more precisely a password generator) for the past few months.

It uses these 3 to consistently generate a password for websites:

1. A secret that I've pre-programmed in the YubiKey (+ 2 other backup YubiKeys)

2. A "pin code" (either provided by me, or in my case - protected by my TouchID)

3. The website's name

If you want to take a peek, I always appreciate feedback. https://github.com/noliran/ykpass
Thank you! I guess if you're interested in this, then you probably also like music and coding. I taught myself AppleScript so I could manage iTunes tags when I was a teenager. The new redesigns look pretty ugly to me, so I'm still using iTunes 10.6.3, and I replaced the rsrc to get coloured icons.

In the medium term, I'd rather rewrite my own offline music player. I don't like YouTube/Spotify streaming of pop music with ads, I like my rare indie MP3s ripped from demo CDs or from repairing a friend's iPod back in 2006. The column browser and playlist folders are essential for me to keep things organised, and smart playlists are far easier to understand than SQL queries.

Would anybody else be interested in rewriting iTunes together? It's one of the few reasons I haven't yet hopped to Linux. (also the trackpad driver, and osascript being built-in to every app).
i agree. the German factories will not be fine.
aren't those still mainly activated on steam?
Can I add Tor (publisher of SciFi, Fantasy etc) who also sell most of their eBooks DRM free.
If you don't mention the company you implicate everyone.
I listened to three of these and they were great. Thanks.
Your figure of 15W/sq foot assumes no gaps between panels - hard to imagine on a 50mile+ array. The bigger problem is that it assumes overhead, direct sunlight. You'd have to cut that at least in half ;)

Yes, the UK does have issues by these metrics, and the US is in the unique position of a huge per capita energy consumption and huge land reserves. Therefore, it is somewhat feasible in the US to just keep building wind and solar farms. However, I wonder how the economics of the non-renewable minerals needed would affect the price. It also doesn't (as far as I know) take into account all the extra infrastructure required to support the fluctuating nature of renewable energy sources.
Same here, it seems that amazon has improved its protection and changed its ebook format to harden it against DRM removal.
>I chocked it up

chalked it up ;)
Sadly that was my point, I can think of none. The standard places like Yelp, Trip Advisor, Google, etc all fall under the category of crowdsourced and highly-susceptible to advertising agendas.

Sad as it is, travel is a hard category to get unbiased information on given how big an industry tourism is.
540 Million Facebook Records Leaked by Public Amazon S3 Buckets
I opened metadata.tsv from here: https://archive.org/download/myspace_dragon_hoard_2010/

Used text editor's search to find what ever I need. Then "View Contents" on the correct ZIP file and download the mp3 file the search in text editor gave me. Therefore I just had to download the songs I wanted to get back to me.
I use it with AWZ3 just fine, but then I also haven't allowed my Kindle to update its software in years, so maybe Amazon is giving me files with older DRM.
Also, with a higher cost to manufacture these energy sources, it's inevitable that the cost to consumers will rise.
>But unless mobile carriers start offering very cheap plans for IOT devices (which is in itself unlikely)

Like this?

https://hologram.io/pricing/

https://www.particle.io/pricing/#cellular-data
"No, no, i'm not calling about the dingo. There's a dead possum over on the other side of the chlorine atom."
Microsoft works toward IPv6-only single stack network
This is not true though. Security is about mitigating threat at some cost. There are some threats you can't mitigate cost-effectively. Some are unmitigable at all.
> We assume that the attacker has obtained the credentials to publish the malicious RubyGems package from one of the two maintainers, but this has not been officially confirmed.

Didn't this _also_ require a commit to the relevant Git repo? Or is it possible to upload a tarball directly to Rubygems without it being backed by a git repo?
Cool, this is somewhat similar to an idea I had before: two persons each make a list, and the app informs both parties of common items of the list without disclosing the rest. That would solve a few of the same use cases you mention, and help decide e.g. what movie to watch, even if one of the parties (e.g. my SO) is somewhat ashamed of their preferences (e.g. romantic comedies), unless the other person shares them.

Not sure if this is interesting to anyone, but in any case, I'm unlikely to be going to make it, so feel free to run with it.
Komodo dragons are at risk of extinction, chickens are not.
Not this kind of audits. Is there any major language for which all third party modules are audited for security before they are released? I would be surprised.
With the right people, yes. You generally don't meet those at "networking" events. If anything, you'll find other peddlers trying to sell you something. You do meet those by throwing dinner parties, talking to and meeting interesting people, going to charity events, and through hobbies.
Btw you may be able to get some inspiration from, or even partner with, Rome2Rio [1] for the transportation part. I interviewed with them before and while I didn't like their tech their results are pretty impressively detailed and sourced.

[1] https://www.rome2rio.com/
Perhaps the pilots didn't have the energy to pull up due to the famine?
Parent was comparing against a tarball, not a snapshotting filesystem.
5th Paragraph in:

> The backdoor was wisely hidden in the 3.2.0.3 version that was only published to RubyGems and no source of the malicious version existed on the GitHub repository and allowed remote attackers to dynamically execute code on servers hosting the vulnerable versions.
Would it help to shuffle the order of the headers in new protocols so software is forced to deal with it actually being optional? Either the order is fixed, or you have to actually experience variety so code in the wild is written to deal with it.
Eiffel has loop invariants, for example see:

http://se.ethz.ch/~meyer/publications/methodology/invariants...

Also see Meyer's Design By Contract book, which you should read even if you will never use Eiffel - it's a gem.
I believe the content of the linked video is what's being referred to as "openly hostile", with discussion of participation in competitive sporting events being reasonable.
Apologies for digressing, but this is an important point.

Instead of the facile happytalk "Don't Be Evil", a much better slogan might be "Be as evil as you want, just don't hide anything from me and let's have an open and honest relationship"

Companies keep using the average user's technology ignorance against them. That was kinda cool and probably acceptable when you were the smart kid making a few dollars here or there, everybody loves the story of some genius hacker able to figure out the stock market and made a small fortune on a stunt they could never repeat, but this has gotten completely out of hand. It's gotta stop. We need to start acting in the user's best interests as if they knew as much about the business as we do. That's the only ethical way forward from here.
> Is this really a simplification?

Yes, because for end-user developers, you don't need any files. The files you mentioned are used by buildpack authors.
You don't belong in this community
You could always just unstash things, I suppose. In the context I was talking about, the stash is only used to prepare a commit, and after that you can unstash everything. For longer term stashing I think named branches you easily checkout are a better alternative.
Use Git as the back end for chat
I like some of the philosophy of docker. But there are improvements left on the table around build and shipment efficiency. Plus it introduces real problems at scale, mostly around the sanity and safety of the overall cluster.
Seeking work - Remote Only (India)
I am a Software Consultant. My strength lies in directly working with customer, understanding there needs and creating a technical solution. I have more than a decade experience in technical implementation. I have build solutions using Cloud and on premise using both Microsoft technologies and open source. Lately used Serverless, Microservice and Domain driven design.

Technology Stack:
Front end : Angular, Javascript, asp.net MVC, Xamarin native and forms, Android Native
Middle tier and Backend : .net core, Web API, Entity Framework Core, SQL and MySQL.
Devops : Jenkins, Visual Studio
Source Control : Git/TFS
Cloud : AWS and Azure
OWASP [1] maintains npm, maven (and nuget, I believe) plugins for detecting use of packages with known vulnerabilities, and a vulnerability db, of course.

[1]: https://www.owasp.org/
You are not wrong. The future is extreme high density living. We are trying to put 7 billion people in cities. People have to give up their suburbia dreams.
Because it is a sufficiently divisive decision that it limits the audience. The threshold before I'd consider working with a language with significant indentation for example, is huge. And for my part at least, I've yet to see an automatic formatting tool that formats how I find things most readable.
I'm more disappointed about the RFC than gmail... Publishing a specific syntax which uses specific ordering and just leaving a note that it's actually incorrect is a really bad way of writing specifications. RFCs should be really clear and explicit in things like that.
If this was indeed MCAS, it is my understanding they 'could have' stopped this by turning off power to the electronic stabilizer trim.
Bddbddb
I'm not saying I'd want to try to a catch Komodo dragon, but they're still less half the size of a saltwater crocodile, which can go over 6m! Here's one tackling a wildebeest:

https://video.nationalgeographic.com/video/worlds-deadliest/...
SEEKING WORK - Bucharest, Romania - Remote preferred

I specialise in building web applications, mostly using Ruby/Rails, Javascript, PostgreSQL.

Email: hello@alexmarinescu.com

Resume: https://www.dropbox.com/s/1yi8cbmysxj1iwd/Resume-Alex-Marine...
> (better yet, it might help them discard bogus emails early in the pipeline).

I wouldn’t expect it to be deliberate, but at the same time it wouldn’t surprise me if it was in fact deliberate. SpamAssassin certainly has various rules around precise unusual patterns in headers, penalising things that are perfectly legal, but close to never seen on legitimate email.

The main reason I wouldn’t expect it to be deliberate is actually that it’s too helpful: they tell you they’re rejecting it, whereas Gmail’s regular spam filtering is a black box that discloses nothing. I could imagine them black-holing emails like this deliberately as part of a spam-filter, but rejecting them isn’t their style.
> this type of ossification for long-used protocols is fairly common in my experience

Agreed HTTP (and all it's intermadiary like proxy and cache servers), FTP, IRC, SMTP, ... When you take a peek at what the incumbent actually do and support it's a real wonders that anything works at all.

Everyone has their own specific thingy and they own way to understand this or that part. Are they wrong ? Yes, probably, but at the end of the day it's just like this case: the question is not is gmail right or wrong, it's do you want your mails to go through gmail or not.
This is a typical strategy of far left media.
Yes. With margins accounts where the house will lend you money so you can leverage your bet to insane amounts.
> DRM is technically a crime, too. It's infringing upon First Sale Doctrine.

First sale doctrine says that you aren't violating copyright by selling any lawfully made particular copy that you own. I don't see anything in it that says the publisher can't use means other than copyright to try and stop you from doing that.
Per the friendly article, "Pilots "repeatedly" followed procedures recommended by Boeing before the crash, according to the first official report into the disaster."
This is a software screwup. It's buggy software due to rush to market. I hope they do an analysis of the whole project. We can all learn from it.
I really don't know what we can do as developers to prevent this. What else could be done? Is there any package manager system that isn't vulnerable to an individual being compromised? Having an audit-tool is only useful after you've been compromised and the vulnerability is discovered. Some kind of vulnerability scanner in all pulled in code might be one idea, but much like the cat-mouse battle with AV's, I don't think would be very successful.

Ideas (shoot them down):
- Somehow tie keys to location.
- Require two-step verification for all commits for packages with over 1000 downloads. (Assuming their phone isn't compromised if the keys are).
Because the language affects how you think about things, and how productive you are. It matters.

And in this case, this is someone with a 20+ year background of experimenting with new languages, ranging from production-ready (e.g. I used AmigaE a lot back in the 90's) to crazily experimental ones.
> But aren't they just an implementation detail, albeit a useful one?

Part of what we do in Cloud Native Buildpacks is to use the layer abstraction more aggressively to make image updating more efficient. That requires taking care with the ordering and contents of each layer, so that they can be replaced individually.

Putting it another way: we don't see the image as the unit of work and distribution. We're focused on layers as the central concept.
> you do need your clean own ipv4 address

Actually you need to clean /24 your address belongs to. Some people use blacklists which assign reputation to the whole /24 and unless you control that, you're going to have a bad day.

(Yes, it's a really silly idea to use those lists, but some people do. And you want their users to get your emails.)
Will be interesting to see the details when the report is actually public. It does sound like the scenario that Mentourpilot explored in the simulator is close to what happened, namely:

Bad AoA probe causes MCAS to trim down, and also to indicate IAS disagree. Pilots increase throttle as per non-normal checklist to reduce the risk of stalling due to unreliable airspeed. Pilots disable electric stabilizer trim, as per Boeing's advice, without trimming back to neutral trim. Plane is now low, accelerating, and trimmed nose down. Pilots likely started to trim up with the manual trim wheels, but that's very slow, and gets harder as airspeed increases. And you don't want to reduce power, because that will cause a pitch-down, and you're close to the ground. At this point you've run out of options that are recommended by Boeing. The only remaining option is to re-enable electric stabilizer trim, and use that to trim nose-up.

Now, from what I understand, appying nose-up electric trim should override MCAS, and so this course of action should be possible. However, at this point, you're basically a test pilot - this is not on any of Boeing's checklists or training. Why didn't it work? We'll have to wait for the full report for that I think.
> Perhaps they wanted the service killable, but for it to always restart?

Then you use a DACL than gives only PROCESS_TERMINATE permission [1] to the desired group (Administrators, Users, …). If killed, service control manager will figure out that the program exited abnormally and restart it.

[1] Overview of all permissions on process objects that can be allowed or denied in a DACL https://docs.microsoft.com/en-us/windows/desktop/ProcThread/...
Maybe you're right, but were they trained to know about this?
Credential stuffing is a huge problem.

I am not sure if allowing users to use non-email addresses as a user-name helps solve that problem, though. I would be interested in reading research on the subject.
Funny how people were saying that it was just a matter of pilots shutting off the system...

Looks like 1) Ethiopian pilots were up to date in training (good for them) 2) MCAS should have never been shipped
Here’s a copy of the thread with a light color scheme: https://marc.info/?l=git&m=155260711429449&w=2
>Because it is a sufficiently divisive decision that it limits the audience.

Considering Python is the 2nd or 3rd top popular language in indexes like TIOBE and job entries, and within the top-5 for over a decade, that's empirically false.

It might put off some insignificant minority (that's superficial like that), but not enough people not to be hugely successful.
At the cost of 300 lives.
pilots should not have to fight the system. can there not be a simple button, "switch to manual"?
I’d love to see those people who accused the airline and crew of being incompetent to apologize in the light of these reports.

It was shameful to see Boeing actively encouraging that narrative behind the scenes. Especially considering it plays on racist stereotypes equating „Africa“ with bad training/bad safety record/…. The idea of „dingy third world airline“ was ridiculous on its face, considering how bad a fit flying the most modern airliner is with it.

And it was also contradicted by the factual record of Ethopian being a competent airline on par with any in Europe or North America. Their safety rating is better than easyjet, Ryanair, Spirit, WOW, and Southwest: https://www.airlineratings.com/safety-rating-tool/
Some dubious arguments there. Why should I trust Cloudflare? Yes, EDNS client subnet leaks the IP address to the authoritative server of a domain. But in almost all cases, a DNS lookup is followed by a connection to an IP address of that domain anyway, so my IP address will be known by the domain owners.
Does anyone have a mirror of that video?
I enjoyed playing Cube based games, editing maps live and whatnot. Will check this out too!
So instead of a non opinionated RFC that most clients and servers mostly follows you now have an opinionated RFC that nobody follows and is useless. I'm not sure what the gain is there.
They themselves may be not aware of this. Sort of like getting lucky with good genes or rare mutation. Meanwhile for a transgender is purely a rational choice

This gets me curious. In your definition, a person with strongly deviating hormonal levels isn't transgender until they are aware of their situation?
A card switching UI for Flutter, support custom animation
Yes, it does. If you have to play a long time before any meaningful challenge appears, this makes the game not fun to play. People loved Flappy Bird because it was so hard to avoid dying. Imagine Flappy Bird Easy Mode. Nobody would play that.